
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier: BsyF4sDCRl7IDpecAcUqBRTpGGJNJtBItVJlELZLxSI=
Subject key identifier: AA:5C:0F:11:7F:72:20:C2:8A:AE:4F:E3:BB:28:D9:1D:54:64:2D:B6
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 0198D85002A42E55A9323C0349E830284F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number: 0D2B
Signing time: Sat 23 Aug 2025 19:02:58 +0000
Manifest this update: Sat 23 Aug 2025 19:02:58 +0000
Manifest next update: Sun 24 Aug 2025 19:02:58 +0000
Files and hashes: 1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: IO1WpZczokG86SBwKO+O3BG7LCyiO8cr27CQX338aHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:02:a4:2e:55:a9:32:3c:03:49:e8:30:28:4f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Aug 23 19:02:58 2025 GMT
Not After : Aug 24 19:02:58 2025 GMT
Subject: CN=aa5c0f117f7220c28aae4fe3bb28d91d54642db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:f4:c3:84:48:02:a9:34:15:b0:2d:a6:47:
5a:39:34:91:ec:ed:23:ef:8e:12:9b:f1:ce:df:33:
bc:16:fb:fa:51:9e:4a:4c:47:06:f7:62:d3:af:3e:
e1:cf:bf:a6:5e:05:b9:08:12:8a:25:62:43:e3:35:
02:68:46:8a:39:3b:77:ad:93:7d:4f:d0:a3:9a:87:
45:09:74:de:55:d0:e9:ce:9a:5b:d2:38:9c:cd:e7:
a6:05:b9:ed:6d:e8:a6:77:db:77:c9:5c:7d:84:7e:
2f:99:a5:03:7d:64:8a:44:42:5f:59:63:ee:6f:15:
e9:17:46:81:1b:56:f5:23:b4:31:7b:b7:59:bd:9b:
c4:a5:ba:f1:21:22:9c:89:f6:8b:b8:ad:a2:47:ee:
66:c9:97:d5:a0:18:1c:58:09:52:1a:7e:9f:92:0b:
d6:83:91:70:02:33:b2:38:bc:55:f5:38:4d:7b:ab:
59:66:7e:60:8a:ae:91:6e:2e:f6:e2:aa:6b:e6:bc:
d0:c5:56:06:79:98:e3:23:c2:23:38:e2:88:a1:fb:
0f:f4:83:0f:87:4c:02:1e:e4:a5:c9:46:90:e5:ee:
be:67:ee:25:03:1c:b2:d9:10:b4:da:6c:20:21:c4:
07:de:b6:11:00:a7:42:66:c2:ab:3b:bd:18:72:2c:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5C:0F:11:7F:72:20:C2:8A:AE:4F:E3:BB:28:D9:1D:54:64:2D:B6
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c7:f6:fa:bf:a9:55:2a:f9:db:1f:c4:f9:6a:06:a5:a9:4b:
1a:14:44:89:4d:ab:11:90:47:93:e1:7e:72:8e:98:25:68:77:
d6:14:49:bd:c4:5c:4d:72:c5:96:97:ca:43:49:d0:85:95:86:
cb:96:27:14:30:17:82:58:be:ad:16:22:8d:b8:68:bd:52:05:
0d:69:75:cc:7f:f4:b3:30:c8:60:09:bc:72:9e:3b:81:57:1d:
51:64:e3:30:b6:2d:e8:a0:37:e6:c9:55:c7:89:3b:aa:bc:6d:
eb:a6:c9:80:0e:fd:a8:55:e6:e1:2b:3e:d7:de:39:0c:0c:e9:
a4:ac:f1:2b:e1:fa:14:4c:aa:2e:e8:24:73:92:98:5a:f5:dc:
0d:d4:f7:09:06:81:59:c1:f3:88:ac:0d:8c:1e:06:46:1e:75:
8e:a6:5f:c7:b0:d1:b8:5b:23:83:b5:bb:14:0e:e3:98:df:5b:
fc:8a:07:86:d3:46:1b:3b:64:37:2b:c7:1e:79:b8:bc:2e:c7:
70:f0:14:6c:fc:bd:b5:ae:df:9d:f4:00:cb:9a:32:fd:cc:5a:
51:5f:ed:d2:73:04:d6:06:94:75:ba:72:93:e9:dd:17:39:68:
bd:4d:b9:f5:f3:fa:ba:3a:f6:c8:1d:7e:63:50:1f:02:79:41:
5e:4e:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:40:42 2025 by rpki-client