Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json)
Hash identifier: Qum9hPGyf9cxtNNzTnfDIVL/zXOBiaICKjmM0RDQhcs=
Subject key identifier: 24:D3:21:67:40:A9:03:DA:CB:D6:86:24:46:E3:71:99:83:F0:0F:73
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial: 0198820C1B6824BCFBB73050361954FF6039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
Manifest number: 0CBA
Signing time: Thu 07 Aug 2025 01:01:28 +0000
Manifest this update: Thu 07 Aug 2025 01:01:28 +0000
Manifest next update: Fri 08 Aug 2025 01:01:28 +0000
Files and hashes: 1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=)
2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: JEXuSXX4kEcb/Om3DZ/RNWY7pp9VZE2T11ESHwRr33w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:1b:68:24:bc:fb:b7:30:50:36:19:54:ff:60:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
Validity
Not Before: Aug 7 01:01:28 2025 GMT
Not After : Aug 8 01:01:28 2025 GMT
Subject: CN=24d3216740a903dacbd6862446e3719983f00f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:4c:70:a0:2d:e6:38:38:81:a9:38:5a:9d:
53:97:be:7d:47:98:9a:e3:3a:68:5d:76:04:30:47:
a3:ad:77:a5:c6:ac:a0:41:e7:13:f0:68:0d:61:d3:
13:42:80:6b:d0:fa:22:de:8d:98:db:c0:a8:8c:d9:
6f:5a:05:52:f3:90:2a:d0:14:ea:4c:28:0b:ad:f4:
e3:ac:94:85:65:e8:a7:3f:49:41:85:d2:6f:39:41:
a0:16:e0:6e:a7:8d:ba:d3:8c:19:03:76:b6:e6:cb:
4b:97:ed:1b:a2:e3:f6:9c:25:7d:23:8f:c6:a2:66:
b0:de:6a:53:b1:90:f1:2e:91:22:d8:30:ee:15:bb:
1c:51:3c:43:79:8e:86:d2:21:20:b4:54:5c:e1:a1:
02:07:81:29:ff:68:1f:4c:f3:50:b4:e8:d5:ea:30:
0b:66:1e:a2:2c:06:db:68:c7:27:cb:3b:79:55:b4:
f1:3e:e1:32:bf:2c:0d:c7:a3:58:87:a0:19:b3:2c:
af:57:7d:b6:41:18:55:35:15:80:0a:35:a2:3e:fc:
5d:bb:86:ff:7b:11:d9:03:f8:c9:97:d8:ba:da:63:
7e:a6:a8:56:74:be:70:4d:f7:36:f9:44:19:e7:4e:
a9:e7:b2:c2:c3:2c:b2:a4:8d:f3:dc:0f:ac:9a:7a:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D3:21:67:40:A9:03:DA:CB:D6:86:24:46:E3:71:99:83:F0:0F:73
X509v3 Authority Key Identifier:
keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:00:5d:cf:0e:5c:ff:b3:9f:65:7c:75:17:b3:06:74:ed:b7:
d7:d7:ef:f3:9b:e4:3b:10:c3:0e:50:5b:f6:c5:cc:c3:aa:06:
f6:75:99:c8:55:61:e8:b5:d0:19:90:12:1f:06:8d:15:21:be:
21:0e:2a:15:c9:c0:88:90:93:0a:be:17:43:72:59:92:75:d7:
87:4b:75:9b:72:78:92:2d:71:81:89:00:b5:50:53:ac:cb:4a:
7f:b9:df:c8:d9:2c:ee:26:b9:31:8f:bc:c7:6f:9c:d9:9d:69:
ed:92:8f:04:6b:62:1d:e1:d3:6b:c6:17:b4:95:36:45:7c:d4:
39:b9:72:25:2e:7e:67:9b:3c:4e:6c:a7:2f:10:56:df:8c:d1:
ce:b8:8c:e0:0e:60:c9:c8:c5:88:ff:47:36:f8:f8:25:93:97:
b6:2f:e7:44:46:98:de:d5:1b:d7:5a:7c:43:a4:e4:b4:cd:6d:
67:8c:d2:e0:72:68:01:ad:2f:8c:51:39:24:db:7b:61:0b:62:
17:61:bf:38:41:eb:c7:d4:d0:ab:cb:91:b3:ec:b0:92:df:45:
b6:4f:ea:c2:c6:27:0e:69:ba:7e:29:93:ba:36:a5:f9:d9:90:
74:76:a2:49:20:77:63:25:16:09:c4:8a:ef:67:df:cd:3b:0a:
f3:1a:5a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:59:44 2025 by rpki-client