Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json)
Hash identifier: L03D9LruwY1SFO0n4Hx/WaPTMxFq6jO6AWxKBzICF8I=
Subject key identifier: A3:94:95:10:60:B2:5A:C0:1E:9B:C1:01:D1:E2:29:2F:76:7B:3B:4F
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 0198D8512A9B1A4C53ABB81B5E41BADA88B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 19:04:14 +0000
Manifest this update: Sat 23 Aug 2025 19:04:14 +0000
Manifest next update: Sun 24 Aug 2025 19:04:14 +0000
Files and hashes: 1: Dojs8PEQnvulcYqgM4rdKOxunu0.roa (hash: dLJI4qVjVKlBypD5DT2hbIXIp/KqABCIFpos5VZ0K94=)
2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: RiffB+2habFrmrYGj6qJJhMfD9kmfumWmBJMTpEEy6o=)
3: ZHpRRkh9oiRLBNkKdSMUtdYZ7o4.roa (hash: G5aCOLk/4QhatU9joqPbjeRwSGccuFt7GUatcEniztQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:2a:9b:1a:4c:53:ab:b8:1b:5e:41:ba:da:88:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Aug 23 19:04:14 2025 GMT
Not After : Aug 24 19:04:14 2025 GMT
Subject: CN=a394951060b25ac01e9bc101d1e2292f767b3b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f3:cc:a9:f7:3f:e5:b5:27:5c:ea:2d:ce:3a:
4b:06:d7:1d:e9:0f:75:98:8c:28:39:57:76:4d:31:
71:68:2e:78:cf:f6:53:05:ca:63:05:38:94:72:d0:
11:33:d4:f1:c8:3b:b1:27:4b:68:a5:e4:19:9c:d8:
47:c4:cc:4e:2c:65:17:c7:4e:89:d7:d2:59:83:2c:
60:e5:cf:6e:96:d8:96:d5:78:85:d6:c9:d1:6e:aa:
a0:0d:44:eb:93:b3:9a:c6:2d:33:3d:6d:6f:85:69:
53:e0:e4:d0:f3:98:06:f4:1b:e5:b1:7b:bd:23:91:
0b:62:a0:82:49:2d:68:ea:7a:0e:49:36:91:5e:22:
26:d1:5d:ab:3a:3d:fe:93:c4:4c:4f:bd:25:08:89:
cb:ac:03:7e:8e:db:74:6f:80:d7:27:e8:8f:e5:4e:
1e:85:0c:6d:1e:d8:19:8b:ab:e8:d1:7f:74:ef:42:
c5:1e:6c:cd:2c:e1:d1:9e:4d:57:67:89:20:42:cb:
c4:93:80:e0:20:e3:c0:20:a3:09:0f:13:63:cb:be:
02:4b:f6:d6:25:74:6a:a3:13:ef:25:9b:0c:33:50:
f2:c3:33:9b:ae:31:97:25:92:50:a2:e9:94:48:6a:
e6:b1:aa:31:bf:e1:f5:0a:d6:92:36:fd:2a:eb:d7:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:94:95:10:60:B2:5A:C0:1E:9B:C1:01:D1:E2:29:2F:76:7B:3B:4F
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:6a:0e:6f:9c:16:e1:f9:3b:33:1b:70:e2:90:e1:df:82:b0:
2b:97:51:c9:5d:c1:c1:0f:1a:6a:80:41:ce:d5:34:39:54:5f:
a0:05:30:c8:fb:69:a8:cc:26:cc:18:2f:1f:d9:23:e3:d7:ea:
b3:04:cd:27:58:af:9a:db:22:a4:ce:6b:92:68:9f:ba:a7:05:
1a:da:4c:67:00:5e:1f:c2:28:89:5f:53:47:2b:d1:3b:ab:97:
8f:16:a4:57:0c:50:df:05:c9:53:27:db:0c:9a:5b:53:67:b4:
8a:e9:f1:a6:61:c2:4d:53:89:bf:b6:57:d9:91:15:ac:6d:99:
64:a7:3d:d1:f3:7a:43:f7:13:0b:87:2e:bf:be:85:ae:1d:00:
70:2b:23:e4:a7:aa:2e:17:fa:48:47:82:5c:05:be:75:24:31:
bc:e6:8d:1e:e5:a1:5d:6d:48:fb:01:1d:1c:92:4c:79:85:2f:
73:80:76:60:7d:3d:3b:7f:bf:92:b8:50:db:6d:44:07:94:80:
d8:38:9c:a0:f0:26:8e:22:3d:8d:df:18:eb:b5:97:91:c8:cb:
76:68:d7:52:a3:de:f9:cc:32:7f:e6:14:21:45:73:96:66:30:
5d:61:c2:96:4f:5b:bd:87:9b:b8:ef:e5:ea:4e:50:c1:5d:be:
3f:f9:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:20 2025 by rpki-client