Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: LcNWrPg5eimpF9MJ0uFt8VLrm9mX++pfqajbrMzQR/E=
Subject key identifier: 68:20:75:34:1A:E3:F5:C2:35:AB:2F:64:C0:45:04:A7:CD:9B:D2:99
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 0198819E246C708F6F304CFBDF76E038F95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 129D
Signing time: Wed 06 Aug 2025 23:01:21 +0000
Manifest this update: Wed 06 Aug 2025 23:01:21 +0000
Manifest next update: Thu 07 Aug 2025 23:01:21 +0000
Files and hashes: 1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: GsfRw/9U8ZpFmKqAZ4bzEA4OptESYLVqXuzS8Djui9o=)
2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:24:6c:70:8f:6f:30:4c:fb:df:76:e0:38:f9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Aug 6 23:01:21 2025 GMT
Not After : Aug 7 23:01:21 2025 GMT
Subject: CN=682075341ae3f5c235ab2f64c04504a7cd9bd299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:c3:b4:16:ec:05:00:22:90:b3:e2:f7:0b:
fd:6b:77:ab:c5:1b:9a:49:1f:63:77:e4:23:6a:2f:
b8:5c:ed:d0:15:d0:76:b5:3d:3a:15:4f:94:1f:7e:
37:08:c2:2b:ac:c3:af:3f:ed:43:6b:ba:68:b3:99:
1e:e7:1f:21:37:90:ef:f6:e1:33:f8:78:91:c0:56:
4d:9d:52:95:77:b0:bf:74:a3:a5:2f:8a:bb:01:05:
c2:aa:f7:62:73:f2:65:37:9b:2d:0d:ef:98:f3:bd:
b1:98:32:c6:46:71:b8:33:40:4a:f7:32:85:69:b2:
3e:1c:bd:80:88:b4:1b:c5:ff:c4:af:f1:94:db:cf:
a6:1a:9a:4d:8d:87:d2:83:aa:5a:c7:98:63:3b:97:
51:d3:9c:43:4d:60:db:6b:f6:aa:49:f1:e5:23:00:
a3:89:a0:9a:f2:ab:98:2d:ef:ab:b9:2d:19:ed:08:
fc:3d:c6:80:ad:ce:40:9e:90:49:52:95:8f:f9:92:
98:2b:b8:85:14:20:18:55:55:f1:60:8c:df:0a:5e:
6b:1c:b0:ce:a7:ba:bf:6d:1a:c9:51:c9:29:a8:3a:
e0:b6:83:5a:11:48:95:a0:03:41:db:1f:cc:53:15:
49:30:90:8e:92:71:4e:77:7d:b2:a4:24:b7:29:dd:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:20:75:34:1A:E3:F5:C2:35:AB:2F:64:C0:45:04:A7:CD:9B:D2:99
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:05:02:fc:60:03:5e:49:b6:19:07:58:68:c7:25:73:bb:1a:
d0:f3:c3:16:03:87:c4:44:48:3c:a0:db:37:c3:83:28:c1:3e:
6e:1b:15:ed:5e:9a:f7:7b:2a:fc:ff:14:11:34:bf:a7:6d:87:
c2:60:8e:12:e9:0d:f9:ec:97:af:33:5d:a7:ad:a0:25:ab:c6:
be:13:1c:cb:c8:81:fe:bc:ff:24:84:25:b8:31:81:38:41:0e:
2d:32:ec:d5:69:cf:f6:e7:a4:02:84:ca:40:7e:ab:3d:ef:32:
cd:14:77:3f:41:57:b0:df:08:15:8f:b6:7d:98:18:41:01:87:
67:b5:e3:4b:a6:45:6d:c1:a3:28:16:ec:8f:8e:b1:3e:d8:0d:
a1:80:32:3e:2b:74:7a:29:0e:b5:76:87:9f:f9:0e:fd:fb:ce:
67:d3:b3:b4:03:fc:94:d5:7e:d4:72:40:18:45:31:85:b9:03:
fa:aa:f5:3c:72:37:15:c3:b1:d9:82:f7:5e:7e:88:ad:7d:12:
81:46:72:e3:a1:c5:4e:5f:f2:eb:74:5f:de:7a:dd:08:72:f1:
22:9e:cf:ef:bc:ef:6e:dc:16:07:8d:2e:dc:11:29:c4:c0:6b:
38:68:8f:0b:26:63:7a:40:2e:75:20:06:c2:42:31:99:14:7c:
d9:6e:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:47 2025 by rpki-client