
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
File: W2k88e71-wv3LtXC4ihn0RJK89g.mft (raw, json)
Hash identifier: nAVOmFVHE/VEYt8k2G/zfUuXo04l+iuF9zTS4gq33QQ=
Subject key identifier: ED:09:AD:3E:5D:DC:A8:F2:31:90:8F:30:CA:C1:86:A4:EE:44:C6:55
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 0198D5837473141A399FABB9F76663CA2376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: SV9kNq2IEFMcsiU27EYmGZik5t0.roa (hash: 4jyjlSiN/7n2r//5rSK3grDPFtbjn3ApiThCyxJ+2wk=)
2: W2k88e71-wv3LtXC4ihn0RJK89g.crl (hash: n4ZN5U4CGpp91xE6lYHFIp9sLuC/V7Q+AtVPYouslu4=)
3: g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa (hash: Vtrkb6OsU8qQ3CnvGKXLNE1uPP6pvCa3n/XLcp+xWOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:74:73:14:1a:39:9f:ab:b9:f7:66:63:ca:23:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=ed09ad3e5ddca8f231908f30cac186a4ee44c655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:14:8f:73:de:e2:89:ec:18:17:96:e6:4c:
e2:8b:59:6c:f9:9f:af:5f:2a:6e:01:a7:ee:5b:bd:
bb:f7:70:64:b3:1a:7b:41:88:b2:57:3b:76:0e:84:
24:a9:30:c6:d5:11:b9:d9:fb:76:e7:85:34:a5:0a:
27:7c:55:2b:0f:8e:a5:c7:90:6e:53:56:fc:61:48:
2a:3c:3d:ec:56:7c:be:0e:31:15:42:c8:42:0f:38:
64:48:0f:25:8b:61:4f:8a:9b:14:45:97:9a:f4:44:
c4:7f:37:0c:73:aa:de:48:b3:3a:b8:de:4f:38:77:
97:12:b4:30:e6:31:5b:30:0c:c2:37:59:03:b3:0f:
15:58:e4:25:c7:3a:a6:da:5a:46:9e:8b:08:ef:93:
38:f9:11:96:ba:54:0d:36:37:d8:7c:d7:44:82:db:
bf:30:29:42:15:71:f6:f4:5f:a2:1b:75:ec:91:14:
2f:d7:fb:74:f0:80:cc:d3:19:d4:90:55:ca:c1:60:
d6:d0:da:7a:a0:a1:cd:af:55:78:83:9f:ea:29:55:
6e:ae:03:48:a7:26:bf:56:9a:6e:44:20:37:44:ee:
fa:2b:40:f6:61:4b:52:e8:f9:4c:76:d2:cc:40:83:
d8:7f:74:d7:d0:01:34:83:c7:04:1c:7c:1c:5e:6d:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:09:AD:3E:5D:DC:A8:F2:31:90:8F:30:CA:C1:86:A4:EE:44:C6:55
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:80:08:75:be:bc:91:e4:a2:49:a1:46:7a:b8:a1:cb:ce:96:
f6:7b:ad:33:b5:36:e6:06:c8:e2:10:37:0b:bf:51:88:7a:16:
63:b3:cd:f4:cb:e9:ae:e8:e6:dc:6d:96:1b:ec:3d:82:50:dd:
07:db:25:c2:2a:2d:7d:e7:81:11:d7:4b:58:c3:7a:09:d6:f7:
ce:ae:b7:7e:e7:39:d3:10:be:33:dd:4f:d6:6e:84:76:87:d7:
bd:57:79:c5:67:fe:70:ab:a1:77:75:b3:2a:00:60:1d:f9:a4:
53:a6:2f:74:ce:ca:53:b2:5b:16:ec:46:78:bc:7e:46:ce:af:
b6:96:ae:ad:c8:2f:14:d2:34:17:e0:83:f4:6f:a0:91:b0:f8:
07:fa:ad:e7:6a:d5:68:af:39:a4:3f:0b:3d:0f:ff:d1:2d:2d:
47:46:98:4d:07:8e:49:6b:29:f6:89:1f:61:74:0d:e5:cc:c4:
3e:b0:39:76:ed:1f:f2:60:fd:94:38:7b:78:b0:e1:c4:fd:97:
9e:49:71:69:6e:26:01:7a:34:e1:59:68:db:44:77:63:45:76:
2c:28:aa:2f:b7:51:f3:6f:e5:f9:e3:a9:0d:de:18:61:af:4f:
c8:7f:49:90:d1:f9:6e:0f:cf:f4:d6:de:07:10:fe:72:30:bd:
49:95:a4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:00 2025 by rpki-client