Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
File: W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json)
Hash identifier: vO+BTKtjCUEnh3i8Nt6nBe9+oTUX8sEMmTiWEf/SBBM=
Subject key identifier: CB:5C:FB:B2:C1:77:5E:13:6D:38:75:A3:31:FA:BB:6C:8E:6E:2B:74
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Certificate issuer: /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial: 0199FDDA50940F5F66B8C1558412C160F9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
Manifest number: 0ABB
Signing time: Sun 19 Oct 2025 19:02:46 +0000
Manifest this update: Sun 19 Oct 2025 19:02:46 +0000
Manifest next update: Mon 20 Oct 2025 19:02:46 +0000
Files and hashes: 1: B2n18W6FZZHyRPgmArtbq0-BQHI.roa (hash: sGRiT/dWrEM0f4SVXVnUW/pThWPm0EW+IVYQygpGhOY=)
2: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: oT5nsTWdd6H38wd8wB4H2jLsvCXmumFVenqSDutvGjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:50:94:0f:5f:66:b8:c1:55:84:12:c1:60:f9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Validity
Not Before: Oct 19 19:02:46 2025 GMT
Not After : Oct 20 19:02:46 2025 GMT
Subject: CN=cb5cfbb2c1775e136d3875a331fabb6c8e6e2b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:90:94:98:f0:03:f6:56:36:85:03:95:0f:
89:aa:32:e7:20:67:c2:9b:1f:65:a8:2c:5c:5f:78:
30:20:9c:fb:99:76:17:57:41:c1:cd:74:44:4c:52:
44:91:1f:ab:42:4e:91:54:0a:a1:79:68:8f:ce:71:
76:e0:63:ea:16:54:58:90:0e:06:e2:99:6e:fe:9f:
ce:fe:23:ac:cb:71:cb:93:4a:07:29:81:e3:c4:87:
05:62:8f:d9:e3:9c:0d:43:63:34:15:93:1e:a7:fa:
fd:af:6a:e6:b5:31:b4:29:93:66:8b:18:77:f7:10:
87:e8:93:6d:6a:97:21:2d:1c:fc:af:c0:ce:62:6f:
58:94:4d:c6:f1:d3:4d:c3:39:8e:d0:90:f0:38:ab:
f3:ae:9d:59:42:8c:cf:f4:97:b8:65:85:1f:f2:31:
32:35:1a:03:3a:44:a1:98:11:50:7b:d6:25:46:bf:
50:8b:c2:87:fe:98:38:5b:dd:f4:88:f2:cc:d5:f6:
77:20:48:c6:84:70:45:03:0d:59:ce:52:47:bd:a1:
13:0a:84:c3:ee:80:23:ba:d2:07:17:d6:b7:86:e9:
02:45:75:f0:7b:4c:a8:79:0a:bf:6a:67:8a:2b:e7:
37:aa:32:92:ac:6a:3c:8e:f0:28:4c:15:e2:49:6d:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5C:FB:B2:C1:77:5E:13:6D:38:75:A3:31:FA:BB:6C:8E:6E:2B:74
X509v3 Authority Key Identifier:
keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6b:1a:6b:d8:76:e7:40:79:32:95:d2:bd:10:a7:da:3a:96:
49:9c:7c:bf:3f:17:8d:9d:34:5a:02:02:a4:48:27:d0:07:5c:
35:d8:86:c7:aa:7c:f9:e2:1f:a9:75:e6:16:55:b6:d5:a4:7d:
80:4d:ab:88:65:53:60:ac:58:21:63:11:f5:ad:eb:21:5a:28:
81:7e:c6:70:b2:f1:86:31:bc:7e:b0:38:50:17:bd:5d:67:26:
ce:2a:2a:4e:09:16:79:85:05:74:1d:63:8f:e5:12:ad:3f:d9:
e6:48:f7:c8:6c:18:e0:09:e4:bb:67:d0:f6:98:8a:6b:c9:67:
10:93:c0:f8:9d:31:56:80:44:dd:f3:e6:f3:77:99:27:c9:65:
d9:d9:a4:8e:d0:27:aa:38:17:e7:34:49:ce:5d:7b:a0:e9:0f:
ec:83:c4:07:9a:8c:b3:70:53:9b:d4:29:55:29:ac:06:0e:15:
8b:70:fd:5d:fb:2a:e3:22:5b:0c:f4:2d:61:e7:75:1c:b5:36:
ed:1d:f4:ef:41:fa:80:0f:10:da:aa:fb:10:cc:28:b0:2b:b3:
05:90:79:31:6a:04:8f:f6:78:ac:97:88:0b:f3:b3:85:54:81:
f7:3e:24:91:2e:e3:24:8d:1e:ac:cc:54:3d:76:e0:97:e3:d7:
c6:a5:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:01 2025 by rpki-client