Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
File: W-rKvp_cy7VH7V6plEr9ed3zUZc.mft (raw, json)
Hash identifier: cF5X9qG4UxocZC5P5NmoS0wy58p8329LOPF2IXYyNR4=
Subject key identifier: D3:63:E4:1F:EF:BF:3F:33:FD:94:63:2C:D0:C7:97:E1:02:30:EA:A9
Authority key identifier: 5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97
Certificate issuer: /CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
Certificate serial: 019A00A34293C3D97EA027496E684C6C5551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
Manifest number: 0AA8
Signing time: Mon 20 Oct 2025 08:01:30 +0000
Manifest this update: Mon 20 Oct 2025 08:01:30 +0000
Manifest next update: Tue 21 Oct 2025 08:01:30 +0000
Files and hashes: 1: Fp8qUQCiFpg7_XS_cRTNvORhpUI.roa (hash: DyvJm1MsNLqanW4GtBFAMBVCCMC4YL7VCe+zTPcnzYg=)
2: UWG68TUhxQ5rdmjT9or0tbc2r3g.roa (hash: hGDufwDgqiOJ7DNdGZkyQ5sM1ddhpmms1eW+c/C//xU=)
3: W-rKvp_cy7VH7V6plEr9ed3zUZc.crl (hash: Ot4XfYX9ZQTdDYhyh7EdBHX8iVBHkwhpIEs4vuAashA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:42:93:c3:d9:7e:a0:27:49:6e:68:4c:6c:55:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
Validity
Not Before: Oct 20 08:01:30 2025 GMT
Not After : Oct 21 08:01:30 2025 GMT
Subject: CN=d363e41fefbf3f33fd94632cd0c797e10230eaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:c9:ca:95:6e:c7:e5:ce:56:fa:30:51:00:
b4:91:7c:59:82:a0:df:69:a8:11:3d:e0:df:78:a5:
7e:77:52:a6:9a:37:49:be:ad:b1:4d:c6:25:c5:e4:
0d:b1:d0:61:b9:77:1a:f5:89:41:39:2d:40:c2:63:
a5:55:5c:7e:e6:c4:b8:00:c4:16:0a:b3:b5:35:6a:
24:9c:49:9f:79:f6:cd:e7:45:95:2e:51:13:e0:fb:
d0:71:dc:e1:68:a7:88:9d:fc:b9:32:68:42:61:23:
91:9e:ce:62:26:71:5b:53:a5:17:b2:36:58:7d:46:
97:2a:c6:c8:f2:d5:86:4c:f0:39:f2:41:ec:c5:fa:
13:ef:64:8c:8a:71:c9:de:3a:28:e9:6f:ea:26:12:
86:7b:53:9e:55:e2:aa:a2:ce:cb:50:d4:71:97:e7:
f6:1c:96:47:0f:74:74:8b:46:49:a3:4f:aa:23:c1:
4b:af:98:5c:04:78:dd:10:f7:8b:b7:1e:9c:f0:f2:
f0:13:3b:00:3c:5e:90:62:1e:ca:1d:d7:ef:8f:d4:
94:6b:9c:74:40:57:b7:01:84:8d:fd:fd:44:84:f8:
84:f5:1f:74:ef:37:61:c3:65:69:aa:d9:ac:21:df:
b1:9f:ea:d4:39:61:8c:6f:bb:17:4b:aa:15:f6:51:
c1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:63:E4:1F:EF:BF:3F:33:FD:94:63:2C:D0:C7:97:E1:02:30:EA:A9
X509v3 Authority Key Identifier:
keyid:5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:21:32:f2:88:fa:bf:40:e0:f1:21:cb:1a:4f:d8:3b:38:c9:
cf:ce:70:6d:ce:d3:83:47:d4:2e:9b:09:4f:17:17:c0:46:29:
00:9a:9b:80:15:82:29:f6:33:a5:7b:63:72:6a:11:02:b5:e2:
fe:0b:8e:02:c5:2e:b9:13:dc:13:bd:68:a2:42:2e:b4:73:2b:
e0:2d:ff:41:e9:67:57:69:0e:77:47:dd:57:80:e2:4e:5a:b4:
00:3b:9f:c3:91:3e:d4:7e:97:57:50:24:fc:7d:bd:0f:d1:7c:
9d:a2:8d:a3:c2:cc:e9:cf:97:93:b4:15:ac:2b:8f:2e:58:5d:
b9:a4:ff:44:40:7f:3d:6d:6a:10:c2:7c:24:13:88:95:d9:92:
c1:a3:85:a4:19:7f:ce:ea:20:97:9c:ad:57:d1:48:19:21:da:
29:a5:3a:c1:25:dc:86:1a:93:dd:cd:a9:ce:f2:52:26:b1:e5:
2d:f6:1f:1e:b1:8e:0d:34:4d:ad:53:37:f0:71:af:96:09:04:
eb:86:71:42:68:60:66:13:6d:9f:d7:8c:02:02:20:6d:27:b5:
96:89:20:5a:8b:76:08:59:4d:32:3f:68:b8:60:40:c0:9b:26:
79:d7:d5:1c:62:7f:15:df:45:f5:48:a3:90:af:22:15:99:f3:
a0:f2:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:25 2025 by rpki-client