Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
File: W2k88e71-wv3LtXC4ihn0RJK89g.mft (raw, json)
Hash identifier: i0LPkER4fSGSjIVnFlwl0/qVMM9rQIZsCs55s6cN3FA=
Subject key identifier: 0A:3A:79:22:23:59:B8:25:E2:8B:55:B8:89:8D:95:75:04:F9:F4:00
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Certificate issuer: /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial: 0197B5C4B5D4093A2AE2DB81CE86D2A7BC5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 09:00:57 +0000
Manifest this update: Sat 28 Jun 2025 09:00:57 +0000
Manifest next update: Sun 29 Jun 2025 09:00:57 +0000
Files and hashes: 1: SV9kNq2IEFMcsiU27EYmGZik5t0.roa (hash: 4jyjlSiN/7n2r//5rSK3grDPFtbjn3ApiThCyxJ+2wk=)
2: W2k88e71-wv3LtXC4ihn0RJK89g.crl (hash: 2kZB/p51yDId/A2BVXkTEASn8GhNySlTM//O8h2Agtw=)
3: g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa (hash: Vtrkb6OsU8qQ3CnvGKXLNE1uPP6pvCa3n/XLcp+xWOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:b5:d4:09:3a:2a:e2:db:81:ce:86:d2:a7:bc:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Validity
Not Before: Jun 28 09:00:57 2025 GMT
Not After : Jun 29 09:00:57 2025 GMT
Subject: CN=0a3a79222359b825e28b55b8898d957504f9f400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a0:e4:6c:d6:d8:b4:9e:95:8c:42:be:57:1b:
c0:0e:73:9f:40:ca:0b:eb:1e:fb:3c:8d:f5:45:85:
78:17:57:4e:dd:15:80:86:3c:b6:d8:87:06:eb:b7:
d0:ee:a7:38:a4:15:d3:6b:5a:e8:b3:63:8b:b5:d8:
bb:a3:3e:88:b8:c7:f0:99:18:3a:62:85:f0:7f:40:
42:85:93:f7:b8:f5:be:c2:8f:17:9c:4e:49:ed:88:
38:cd:b1:5f:62:9c:5e:7c:a2:ac:cb:a3:b4:1e:76:
48:d9:25:ef:66:9a:97:6b:ae:ab:18:3f:63:00:78:
5d:1c:d3:2d:73:07:2c:02:e6:e4:8e:9b:34:fa:a5:
8b:29:c7:db:23:cc:b2:a8:8f:43:59:fa:8a:56:28:
4a:9b:3d:dc:2d:fa:8e:50:cf:18:74:2c:74:a9:83:
fb:4a:64:7b:4f:65:07:5c:98:8a:c0:19:a1:0f:ce:
76:b2:c9:e0:29:1b:f3:f4:c0:d1:05:e7:f4:88:19:
95:86:df:d7:27:1e:b5:6f:86:bd:12:09:d7:e3:3e:
96:df:bd:1b:e3:4e:59:a0:69:5b:c0:84:c2:d1:8b:
44:09:5c:2b:1e:f4:33:75:ec:f5:4a:39:5e:1b:51:
43:6b:14:6b:ab:e7:df:a2:6c:00:c9:a0:af:ec:77:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:3A:79:22:23:59:B8:25:E2:8B:55:B8:89:8D:95:75:04:F9:F4:00
X509v3 Authority Key Identifier:
keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d3:d2:b2:1b:47:97:b4:6d:ea:70:7e:4b:52:46:cf:23:fd:
c3:ee:31:04:20:73:46:50:66:59:67:c5:95:fc:e6:b4:10:3f:
d9:34:47:dc:67:c7:e4:d6:b2:aa:88:4c:36:f5:3b:4a:8a:1a:
aa:e2:f5:08:71:af:e4:c1:c3:26:f3:29:c5:e2:7f:8b:15:3e:
01:0a:9a:a7:76:d4:13:0f:33:98:ef:02:2b:bb:a1:97:ec:da:
e1:db:da:93:c5:0d:6c:9a:d0:36:25:96:da:a2:c6:e7:bd:65:
5e:bd:e8:27:a6:10:fd:26:fd:83:4e:73:6d:c6:df:22:fa:32:
c6:d0:08:04:21:aa:1c:14:20:e2:53:9e:c6:a3:6f:10:20:1d:
07:23:c8:df:04:dd:d5:61:d9:c6:41:32:1c:2d:53:e8:98:47:
c9:c5:57:40:06:98:57:dd:c4:42:5b:e1:db:5b:08:0e:45:f0:
2d:5d:5c:21:ef:65:7d:89:f5:37:3d:4f:20:34:9f:ee:06:30:
0a:9e:4b:f2:5b:7a:44:b9:f5:63:22:37:2f:3a:80:a4:33:dc:
44:bf:c3:11:88:f0:ca:f5:57:f7:40:18:03:d3:0d:41:13:3d:
e5:4e:de:3a:1b:74:32:eb:2e:a5:c1:4b:ba:5b:f3:28:d4:8a:
8b:30:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:04:40 2025 by rpki-client