Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
File: W67rTDpphRQSVf1fauGIQGc0j0E.mft (raw, json)
Hash identifier: TOJ7vUcOcWUSaY+CT2cuM/i/a5IzApO7EqJ/y+GAKoY=
Subject key identifier: 0A:88:4D:A2:6B:77:EC:90:30:56:16:48:58:D4:CD:20:A7:42:A4:F1
Authority key identifier: 5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
Certificate issuer: /CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Certificate serial: 0198D5F1CF733B7964357DAC815227ED6FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
Manifest number: 01EF
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: W67rTDpphRQSVf1fauGIQGc0j0E.crl (hash: 6qWDRZPv5Xfjq0VZpN4OMMoPVeujTc7RyjYFqtG55aw=)
2: fImxldtEe3i_XS4-KxZuO-LAgYs.roa (hash: y0/Y4Oas1pqWDy9av0sFDF2hXjn1ElLUDcx131DTb88=)
3: w518JUndnoJzF7ArkNi72UzL1I0.roa (hash: 8BFeioFwQr4QIG7R1EZ3G0EZLDkxKgvDohVxrnoFSAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cf:73:3b:79:64:35:7d:ac:81:52:27:ed:6f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baeeb4c3a6985141255fd5f6ae1884067348f41
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=0a884da26b77ec903056164858d4cd20a742a4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:00:23:2d:5d:eb:1c:59:90:d9:c7:7e:21:
fe:32:19:0c:e1:36:c6:41:8f:2d:09:f7:23:7a:db:
0e:ee:e2:3b:82:b1:48:3e:bb:7a:13:69:12:91:28:
5a:f9:5a:0b:b2:76:30:4d:6e:69:f6:06:9b:a2:a5:
e1:58:f7:05:a8:0e:56:0f:22:ee:1d:a3:84:c0:b0:
29:fe:c8:17:5e:28:35:fb:3c:51:02:3b:25:f5:62:
97:98:78:33:3c:06:f2:f6:84:6c:81:13:f9:5a:d1:
35:a5:9a:0a:b6:79:97:58:d7:f3:2a:73:fa:54:6f:
4a:3c:94:88:f4:62:b8:dc:f7:f6:a3:da:42:34:48:
ed:37:0d:20:95:c9:3a:01:9f:8d:76:30:6d:28:85:
c3:ed:99:a2:f2:96:45:da:78:eb:9b:6a:db:f9:10:
12:8d:5b:4d:1b:2a:13:0c:71:c8:c5:72:64:01:2c:
a6:4a:a3:dd:6e:1c:76:58:c4:b6:42:7a:9a:0c:5d:
14:47:9b:1f:96:47:45:ee:3e:5c:45:4d:ab:34:85:
cd:9a:d5:5a:68:09:57:64:9c:f7:72:b6:c3:6d:88:
3e:1e:ab:8c:07:97:07:ff:93:3a:0b:6b:f5:44:d5:
26:6c:1d:0b:e6:93:24:9d:52:34:f2:80:e7:c3:50:
5f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:88:4D:A2:6B:77:EC:90:30:56:16:48:58:D4:CD:20:A7:42:A4:F1
X509v3 Authority Key Identifier:
keyid:5B:AE:EB:4C:3A:69:85:14:12:55:FD:5F:6A:E1:88:40:67:34:8F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W67rTDpphRQSVf1fauGIQGc0j0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b4b01a-0746-45ff-af41-15e288b4a57d/1/W67rTDpphRQSVf1fauGIQGc0j0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:eb:c9:a8:bf:8d:a1:b6:72:66:28:73:9c:a2:55:08:1d:d0:
63:41:49:3d:8c:5d:95:97:b5:6c:02:b4:7b:aa:c1:45:af:32:
a7:93:a2:8a:e1:0e:66:bd:1e:39:19:ce:36:2a:31:2e:13:3e:
90:57:7f:d3:9a:60:49:b0:15:82:74:96:3d:a4:16:da:16:bc:
46:d4:33:b1:e5:f2:bc:4b:c8:70:1e:dd:30:33:4f:66:90:cd:
f6:57:48:f4:26:3e:c2:90:48:ae:6a:97:15:1c:34:10:68:57:
81:e4:98:06:c9:b6:bb:29:15:99:98:bb:b2:40:0c:d8:7b:fd:
33:3b:05:e0:bf:94:bd:99:60:5a:d4:b4:64:b8:b2:5d:da:75:
a7:37:64:dc:9a:3e:d5:a9:1c:26:90:14:f0:7b:87:c0:56:9d:
fd:0b:ae:ba:63:f4:0b:09:7b:b7:5a:dd:dd:93:d9:d4:02:33:
27:cf:4b:fd:80:6d:ea:35:c5:47:ac:71:5d:64:39:b4:5a:a9:
20:8a:0c:68:c7:36:e2:c8:f2:ef:0c:80:fc:84:81:29:28:f0:
21:f8:6d:94:a7:43:f9:5c:9e:2f:fa:ce:1a:88:e6:36:94:18:
9d:be:df:fb:10:ba:68:b5:9e:ea:d6:86:27:55:8b:38:27:82:
d5:f9:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:51 2025 by rpki-client