Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File: W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier: X7hk+Cu/agt1HRl/q1aqfrhrm1nZ4/vGJazF8ivZrxM=
Subject key identifier: 33:00:5A:C4:4F:74:6D:AB:94:F9:B9:B0:69:A6:93:F2:89:91:C0:FC
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 01987719D0E3DFE5979AC77E5B1E46B7BA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number: 03C3
Signing time: Mon 04 Aug 2025 22:00:37 +0000
Manifest this update: Mon 04 Aug 2025 22:00:37 +0000
Manifest next update: Tue 05 Aug 2025 22:00:37 +0000
Files and hashes: 1: D11OUUhDT5UjGqOO2sYVKlSZfd0.roa (hash: 1HSM7rlxpcn34ZRTxOgco4d9oki6ca3htijNuPzC2SI=)
2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: Nq0V13ykXsq+vowyZ6R8hLsqBaRtqpdTuXfwBBBeEjk=)
3: sscr1AKks234H4_aH9W5QOyjBo0.roa (hash: QpgjlQcIAUxRiyA26HjeU1kRMWG1ZaRrrHu8xWpWD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:19:d0:e3:df:e5:97:9a:c7:7e:5b:1e:46:b7:ba:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Aug 4 22:00:37 2025 GMT
Not After : Aug 5 22:00:37 2025 GMT
Subject: CN=33005ac44f746dab94f9b9b069a693f28991c0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:bd:23:16:d5:53:02:f8:5a:e0:53:8e:07:
19:db:2d:5f:34:c6:21:f1:f4:a8:fa:f9:d6:11:4e:
45:ca:91:64:e9:81:cd:6d:3c:d7:ef:fa:62:a8:55:
55:a4:dd:3c:09:c1:ec:f8:72:1c:fd:41:e5:de:e4:
af:a9:1a:74:26:e6:12:f4:90:d5:62:28:f0:f0:26:
94:e5:24:e4:b7:79:5a:b3:36:64:05:47:24:82:6c:
2e:cc:44:c2:74:ee:62:a6:e6:ef:62:13:9d:86:3c:
d0:59:15:a3:74:10:c5:c4:bc:c4:9b:d5:e4:f5:96:
68:31:e6:71:96:f2:82:f6:c5:5b:03:89:a2:ac:62:
48:da:53:25:dc:02:2d:cb:1b:b9:98:9a:36:05:2a:
26:33:a4:08:d0:59:57:3e:dd:ec:7d:9d:f2:a3:89:
da:04:73:5e:0f:41:ca:cb:c6:80:47:a2:e1:d8:9e:
0c:46:63:e9:52:15:62:ef:2b:be:c7:1e:84:25:7e:
1c:0b:4b:00:e9:32:76:f5:e2:47:dd:de:c0:49:e8:
3b:2e:de:1b:af:cb:87:2d:78:cf:78:c8:14:97:f2:
05:ac:f9:cb:14:6b:68:0f:cb:90:d2:4f:4f:b4:64:
33:03:69:e2:96:a7:10:a7:d0:01:6a:aa:f0:d2:75:
61:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:5A:C4:4F:74:6D:AB:94:F9:B9:B0:69:A6:93:F2:89:91:C0:FC
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6f:9c:34:7e:78:e5:d6:c1:d8:44:00:63:5e:29:27:1a:c9:
4a:62:10:54:ba:c2:7c:9a:7f:af:00:95:f4:4a:37:cd:79:1f:
8b:c5:0e:7a:20:e4:9c:aa:97:de:b7:a2:93:16:d1:da:8a:2e:
84:25:ac:48:12:c8:1d:b3:d5:37:52:bc:50:97:d9:fa:06:d2:
f4:b9:fc:f5:c5:be:f0:af:f4:c0:8d:2d:a9:18:dc:29:b8:5d:
2a:e4:d9:38:c7:73:80:74:bb:ca:e1:99:96:9e:8a:f0:fc:93:
9d:a5:31:d0:be:bc:c8:03:fb:0c:5c:21:a8:c0:2c:95:28:4e:
b6:c6:7e:6f:c0:00:f7:8e:95:3f:4b:c9:bd:4c:8d:b6:20:58:
f0:06:a6:e1:cd:7e:a8:d7:8c:ab:96:4a:ca:3d:8b:a7:0b:35:
f7:aa:ee:57:15:9e:94:05:07:16:19:82:81:ac:c6:b0:0f:d8:
5a:83:10:4b:d3:7a:09:ca:f3:bc:d2:6b:97:c3:3d:a6:4f:6c:
ed:b1:38:aa:ce:ad:40:c3:ac:00:ad:33:5d:84:42:df:10:ad:
0c:b2:34:6c:24:d6:6f:5c:ef:24:11:c7:84:a2:76:36:b9:c2:
69:1b:ca:ad:fd:10:eb:00:8a:d7:af:58:c4:7d:25:65:00:bf:
a1:f2:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:09:58 2025 by rpki-client