Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: oJS1dDyhQUKGR0Wbmq7kqeQNMnU9ugcjqQJxMnewtdY=
Subject key identifier: 20:7D:93:97:E6:AC:65:1C:46:4E:43:03:23:B5:4A:01:E6:64:D4:27
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 019873E2434A14911CC896B66C75A037C19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 0E45
Signing time: Mon 04 Aug 2025 07:01:04 +0000
Manifest this update: Mon 04 Aug 2025 07:01:04 +0000
Manifest next update: Tue 05 Aug 2025 07:01:04 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: bCEDdQicLOFVXzLi3XqSivEpxZ5jqfSefOsS6VzAFFs=)
2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:43:4a:14:91:1c:c8:96:b6:6c:75:a0:37:c1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Aug 4 07:01:04 2025 GMT
Not After : Aug 5 07:01:04 2025 GMT
Subject: CN=207d9397e6ac651c464e430323b54a01e664d427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:59:a8:ff:7c:a1:67:f1:18:a6:b1:eb:45:
23:70:1a:f4:24:a2:0e:fa:3d:6e:01:31:03:e3:3c:
2c:6f:20:95:b6:79:78:b9:28:8b:c2:d5:35:9f:6b:
e6:90:48:0d:4a:dc:6a:c7:b9:8b:d8:ad:e6:9d:5d:
50:9d:d2:8d:46:e3:41:26:76:de:47:6b:db:b3:ec:
3b:69:8b:2b:d8:6d:c5:16:ef:31:a0:d5:39:50:d6:
90:c9:51:78:6b:32:53:a8:22:6d:e7:ec:b1:ea:c6:
4e:0f:cd:b5:6a:9d:e7:5e:f5:9b:ed:83:b5:9e:b0:
b2:9d:a2:87:ce:c7:6b:3e:89:6c:f7:1f:b1:d7:43:
7e:a9:60:77:6d:c2:f3:0e:07:ac:b0:e9:9b:0d:03:
5d:08:ed:31:60:b5:4d:5b:97:af:a7:40:00:36:8a:
19:8d:35:d8:7e:c3:d9:94:da:69:64:26:a7:a3:8d:
f8:e9:9d:9c:6a:18:48:35:e2:0b:27:fb:ea:65:9d:
b6:c4:99:08:f1:07:64:a0:b4:07:55:5e:17:82:4a:
ac:c7:89:84:34:ad:da:da:1e:aa:e5:59:e3:93:c2:
bc:4d:ff:19:14:4a:f0:9e:10:2a:a0:a3:2e:3e:a7:
08:19:1e:15:63:1d:a3:76:c0:c2:6d:23:26:5c:93:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:93:97:E6:AC:65:1C:46:4E:43:03:23:B5:4A:01:E6:64:D4:27
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1b:e8:c0:2f:56:f3:0f:89:9f:ac:36:f5:4e:c6:c0:99:f8:
1c:01:7e:4a:31:2e:90:e2:12:bb:8c:b6:38:51:1c:8a:56:b0:
07:74:3f:69:c2:88:c4:2b:9b:f1:8f:1a:2e:d7:ce:2c:37:d9:
f9:c7:98:ab:c4:ba:5e:25:82:dd:e2:27:0e:9f:5c:f9:7d:53:
f4:23:1a:3b:5b:d8:f3:7d:b6:98:fa:d0:d3:16:ec:44:d8:82:
e9:6a:84:87:17:70:d2:b7:53:6b:81:26:a4:b3:e2:d2:2f:97:
2e:c1:e8:a3:c3:db:f3:d1:62:8c:8a:a0:04:49:13:71:a8:46:
c7:37:3b:28:7a:20:c8:15:27:84:f0:04:be:8f:5e:3a:1d:c3:
b4:25:09:62:1e:31:c7:33:24:4d:5d:8f:7b:39:7d:0b:cb:34:
05:a1:cc:ea:b6:33:50:62:63:3d:70:ea:e9:73:d5:44:38:8e:
9b:54:9a:d5:1d:10:21:12:17:2d:f2:13:c4:b4:a0:5e:b8:88:
30:94:98:e4:67:61:33:75:38:af:6d:50:05:27:1a:5c:c2:b6:
2c:79:66:b5:00:31:1e:1e:93:a4:f5:13:72:84:0a:ec:c2:a0:
3a:8a:ac:bd:33:ff:69:7f:18:f0:c5:78:57:f7:bc:6b:01:0f:
9f:20:b0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:50 2025 by rpki-client