Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
File: w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json)
Hash identifier: PPZbtzICB2WHoLZ1HVZ8IlilBYzXi6VotpR71zyGoeQ=
Subject key identifier: 22:D7:25:EC:1D:82:E5:F4:59:6D:CB:C7:08:E7:F5:62:F1:3E:71:54
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Certificate issuer: /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial: 0199FBB37515CEA07574AD9D27A9F2E3D5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
Manifest number: 07A9
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: 6_xNKvKsiyZMdKMukhQ7G0PNeao.roa (hash: 9ruVW6EaPvHe/h/BSSLEev3gfYXJbsL78/n89CguJ0c=)
2: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: mPmYbsmjDeI5Cxl0JQQKCkAHgWxWnivazkWsO+nEWdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:75:15:ce:a0:75:74:ad:9d:27:a9:f2:e3:d5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=22d725ec1d82e5f4596dcbc708e7f562f13e7154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1d:39:01:d2:cd:d7:d7:95:b5:a8:f9:98:d1:
bb:68:7b:e4:ec:b6:b9:d5:8d:03:79:f6:32:23:6b:
c8:81:3a:f3:4e:c1:d5:96:5a:c8:b7:17:e2:2b:8f:
67:e9:fb:20:00:6f:70:06:a9:f5:37:97:c7:46:77:
67:26:0f:b7:e3:50:79:b3:a2:8a:53:12:40:91:89:
e8:c9:32:b1:1e:5e:de:81:4a:d5:bf:64:71:f5:e4:
cf:8b:39:58:79:ea:9d:8a:56:a3:cc:4e:f2:b1:9a:
c3:33:f4:62:15:b0:37:64:da:52:20:60:01:23:06:
66:79:b7:06:17:7f:64:f0:53:02:32:7b:19:0e:35:
fb:03:15:7c:f3:e0:d1:90:ed:69:75:70:f9:84:fd:
9d:8d:df:5b:44:d3:b0:f0:23:7c:05:e2:83:85:ff:
63:ab:76:01:7f:95:e8:8e:f1:f2:20:b4:a5:b9:ef:
d0:77:02:5c:29:00:d2:61:6d:f6:ea:a3:d7:c4:3d:
e8:ec:22:b9:02:18:a5:c6:f4:08:b4:15:34:a4:98:
02:95:11:b0:4e:ea:72:c6:04:38:b6:e9:b8:2d:c9:
5f:a5:2f:6f:0a:85:7b:7a:fe:bf:ad:39:29:c7:84:
e2:09:53:40:e8:59:5e:cd:20:45:89:f5:11:41:71:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:25:EC:1D:82:E5:F4:59:6D:CB:C7:08:E7:F5:62:F1:3E:71:54
X509v3 Authority Key Identifier:
keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:89:20:78:a7:1e:36:db:34:8c:3a:0a:6a:5c:0d:75:a6:c4:
b0:e8:3c:ae:5e:06:ce:c7:4f:39:73:22:d5:73:36:f2:67:51:
56:fd:95:26:ef:17:a9:a3:64:96:cd:b1:a1:9d:68:89:b9:5c:
53:e6:dd:6b:6c:05:b7:66:12:ab:18:17:cb:5b:4a:6b:9a:49:
ac:f5:07:ac:c2:b5:63:b5:d7:e8:68:3f:e9:50:3b:d5:90:9a:
56:24:68:8e:bd:6c:3f:23:26:6b:03:3f:6b:6a:81:f8:6e:65:
12:a2:cb:93:b4:17:42:6d:fa:e6:c4:78:5c:e9:03:6a:7c:2c:
79:05:38:9b:c1:fe:8f:64:4a:0e:93:de:dc:71:09:3d:7e:53:
d4:60:ab:70:8a:9a:a2:18:68:4d:f0:09:02:03:f7:91:ac:b5:
f3:54:50:09:9d:05:99:97:90:30:12:6c:d4:ca:e6:e4:02:3e:
99:19:62:79:ae:5b:a0:e1:d9:57:05:71:a9:29:ed:25:c5:3f:
d7:68:3b:a9:55:05:1a:ce:0a:4b:ba:3a:6e:37:1e:87:31:52:
e3:8f:17:80:cd:a2:64:43:c1:35:41:a4:c5:95:4d:49:8f:e5:
03:b1:83:a0:db:89:8d:85:4e:9e:e8:c2:36:cd:d6:8d:62:f1:
c0:ce:5d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:48 2025 by rpki-client