Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File: W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier: qjjQY9/ojMRjVnr8f/BtdhEteBivp0I64vPhvJBGXwM=
Subject key identifier: C3:6B:CC:B3:02:A6:5F:B2:83:2B:A3:B2:68:5B:82:27:2C:33:19:CD
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer: /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial: 0199FC8F3643B5E0D569885B4B31E4E216A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number: 0195
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: 7XMrXBUl5guh00C3od83p0sdL2E.roa (hash: s4K7G9zJkdgY7spJ3jJ5e9+1XNKqCaxgKeKuHtLUBSY=)
2: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: wzCUuEeKgYqP/pdeg8z0Tg0y60Z98Y5R0HNcZSrmaro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:36:43:b5:e0:d5:69:88:5b:4b:31:e4:e2:16:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=c36bccb302a65fb2832ba3b2685b82272c3319cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:b6:a3:00:e6:6d:f6:fe:3d:c3:c5:64:95:
e4:74:f6:4c:5c:39:29:ad:9b:85:f9:a2:5c:1a:7a:
df:bf:88:54:db:98:d4:ea:ae:5e:9e:7d:cc:e6:ce:
8e:8e:aa:29:b3:66:8d:31:69:66:0c:92:8e:a7:d9:
44:2c:7f:4d:1d:7c:8a:94:fd:5f:7f:1c:19:02:06:
e0:4f:4b:22:cb:b8:35:aa:ad:d6:4c:1d:f2:39:03:
51:53:fd:01:87:2b:1d:55:07:82:c9:df:80:9a:84:
13:93:73:12:43:4b:83:cd:05:79:67:15:59:9e:8a:
61:94:62:0f:a3:eb:c6:53:4a:05:97:81:a9:7a:73:
08:8e:dc:d8:24:ec:01:7c:1d:75:ac:b4:8a:c9:d1:
de:11:3a:c9:a5:cb:bf:7d:93:45:ef:ea:2b:d9:6e:
cc:08:76:2e:c6:b0:ca:c7:e7:06:ef:bf:9d:e5:d4:
4c:e0:d5:1f:3f:4f:05:e4:60:8e:8d:34:b5:87:66:
ce:4d:fa:0c:5a:28:53:da:c5:f6:60:23:2d:aa:0e:
9d:30:29:a0:e9:2b:57:a6:bd:4d:cc:f9:cb:60:00:
6e:28:9a:c6:81:be:b5:f0:c4:aa:5d:8e:b1:03:2a:
4f:ef:59:07:0a:fe:4a:a9:6c:8e:d6:da:f6:0f:74:
b0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6B:CC:B3:02:A6:5F:B2:83:2B:A3:B2:68:5B:82:27:2C:33:19:CD
X509v3 Authority Key Identifier:
keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:23:4f:fa:5b:f5:f6:c2:fb:b2:be:9d:5c:4c:ba:b8:78:62:
ee:d0:5d:e7:43:6f:61:43:b0:20:17:ec:2f:18:90:6e:8f:ec:
21:22:c3:77:70:79:f5:44:49:fe:de:e7:70:a8:d3:75:94:60:
84:bf:58:91:30:68:fa:93:c5:bb:b8:b7:73:d9:17:97:70:9e:
3c:e2:93:e3:6e:05:35:4e:91:2e:21:79:3e:8a:ae:3b:d8:de:
71:87:8b:af:fa:6a:fc:1a:7f:f2:79:d7:27:51:38:4d:46:c1:
48:c5:0e:05:6d:b9:57:81:4b:da:94:96:6d:e7:53:54:25:2b:
a6:97:8f:ac:e2:53:2f:b7:e7:71:db:6f:c7:57:10:01:bf:7c:
68:3e:d0:d5:6d:7e:f8:75:cb:93:1a:d8:f4:90:cd:60:3f:f1:
52:39:52:52:59:f6:4d:9d:8b:48:c6:ec:b6:2d:05:19:68:35:
87:2b:34:50:40:b9:88:d1:fb:19:91:01:9a:c7:72:5e:a7:a7:
ef:b0:8c:b9:47:9e:fe:11:fd:0f:c5:92:24:42:2b:ef:20:2a:
50:9d:7e:5b:3f:4f:8b:4e:d9:98:86:e1:2f:03:1a:ef:3f:2b:
69:72:b1:c5:c9:14:be:1b:8f:e2:be:46:3d:f2:14:ac:69:97:
0d:65:62:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:10 2025 by rpki-client