Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier: 9pvOx2c0eQ+Qt82DtPbzcANlKwKFB1vlsyARolfiBW4=
Subject key identifier: 95:9A:FF:D9:47:A7:67:93:FE:15:43:8D:D2:79:BE:56:9F:A9:14:6A
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial: 019892C9A74F7157C97EACC38CB9B9E9BE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number: 0BC9
Signing time: Sun 10 Aug 2025 07:02:25 +0000
Manifest this update: Sun 10 Aug 2025 07:02:25 +0000
Manifest next update: Mon 11 Aug 2025 07:02:25 +0000
Files and hashes: 1: 6Ij32bY1nBHX7vkCzgQ3qR10RDM.roa (hash: S+nJqkN01ff0FHv6Vz2ODAn9dbe51mqTXffZ1Idn4oU=)
2: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: 3GnFl7rZm02/PeuPfwsvqRRC+567DYmGvloXKXq/M0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:a7:4f:71:57:c9:7e:ac:c3:8c:b9:b9:e9:be:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Validity
Not Before: Aug 10 07:02:25 2025 GMT
Not After : Aug 11 07:02:25 2025 GMT
Subject: CN=959affd947a76793fe15438dd279be569fa9146a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cd:ea:49:15:c9:ec:2e:9d:5b:35:9a:8a:30:
da:d8:e8:d8:49:47:f6:7f:df:d0:24:ee:d2:e6:81:
a0:c3:90:30:3a:d5:6d:0e:44:6c:cc:34:33:5d:01:
ad:7c:35:a0:43:e6:d1:45:a3:c6:cf:87:6e:ae:42:
96:73:ad:17:70:51:39:54:35:80:11:a1:76:df:2f:
fa:f9:bc:82:0f:df:da:da:7f:a4:18:69:30:2e:dd:
9a:10:c8:5d:ea:d0:73:d9:b0:60:94:b1:be:6c:10:
3c:58:52:ff:13:a8:64:cd:f5:4a:3c:eb:fa:0d:66:
27:72:ce:e8:49:cc:29:64:ba:47:41:51:f8:0b:cb:
e0:fd:62:e0:7d:78:ba:9a:bb:35:59:1f:05:32:3c:
c2:b7:0d:2f:57:40:24:bc:90:01:36:7a:43:f8:77:
a0:6f:9b:e0:ba:56:f1:53:e1:d6:16:d4:46:44:17:
37:83:90:ad:01:5d:8c:02:49:0c:23:98:88:db:a9:
00:3e:e2:69:36:be:f7:99:15:c3:0e:13:fb:00:54:
95:46:13:86:9e:7a:d6:91:ef:21:4d:16:a1:72:bf:
0a:07:96:a2:b9:7b:79:b2:9e:35:d4:4f:8c:51:00:
3e:14:b7:14:5b:81:ca:9e:2f:de:ec:d9:a3:33:82:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9A:FF:D9:47:A7:67:93:FE:15:43:8D:D2:79:BE:56:9F:A9:14:6A
X509v3 Authority Key Identifier:
keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:03:17:b0:f7:8f:c8:d7:2a:53:4e:4d:01:b0:2b:38:b9:08:
3e:bd:ae:4c:85:fa:6a:b5:dd:41:69:30:f8:31:23:fa:5d:0b:
7d:1c:4a:5c:eb:84:2c:cf:1a:6b:ad:95:d7:b8:27:24:b1:d8:
5b:fb:39:5f:01:db:b4:89:42:6b:06:ab:3e:93:f9:97:2c:8c:
f8:96:82:a8:6b:b1:e3:92:86:3f:4c:53:5f:6c:08:27:4b:72:
9b:0a:41:e1:dc:d5:2a:af:9a:be:13:7e:ea:ed:c3:e0:e4:3d:
47:ba:fa:27:11:8a:9c:a9:12:98:c6:2c:29:a9:26:2e:9f:75:
b3:67:32:28:6b:a6:e3:c6:12:1b:1a:ef:51:15:10:a6:ac:52:
17:24:61:7a:1c:e9:f4:96:b5:aa:5b:f0:36:7e:99:86:83:ec:
76:44:a0:da:47:bd:9c:06:9b:35:3c:ed:bf:e0:2b:bd:bc:ee:
35:33:16:7b:60:93:dc:79:77:5e:e7:7f:34:6b:98:a7:59:e2:
07:23:14:da:17:76:2f:22:67:0b:a7:a9:10:12:2c:4a:63:19:
06:ab:36:07:64:73:03:40:f5:56:c9:7a:11:bd:ab:3f:eb:eb:
0a:37:a8:16:46:e7:bc:01:00:06:19:7b:fd:5b:30:ab:77:48:
7f:0c:e6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:01 2025 by rpki-client