Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File: W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier: hFWb1S2LcemMFPvb2vkcCwjnsQMeTUBImGUSnBmRFb4=
Subject key identifier: 0F:79:22:2F:D4:47:E1:3E:AE:DB:4B:AB:36:32:A2:6A:7F:A5:F0:70
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer: /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial: 0198D5BBE2D76B2F48CBC3BF79426D79D1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number: 03F4
Signing time: Sat 23 Aug 2025 07:01:56 +0000
Manifest this update: Sat 23 Aug 2025 07:01:56 +0000
Manifest next update: Sun 24 Aug 2025 07:01:56 +0000
Files and hashes: 1: D11OUUhDT5UjGqOO2sYVKlSZfd0.roa (hash: 1HSM7rlxpcn34ZRTxOgco4d9oki6ca3htijNuPzC2SI=)
2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: CNkLyKL4CBXrIIZgpabW/rxNzU2r2BEAJFtPeKUxCZk=)
3: sscr1AKks234H4_aH9W5QOyjBo0.roa (hash: QpgjlQcIAUxRiyA26HjeU1kRMWG1ZaRrrHu8xWpWD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e2:d7:6b:2f:48:cb:c3:bf:79:42:6d:79:d1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Validity
Not Before: Aug 23 07:01:56 2025 GMT
Not After : Aug 24 07:01:56 2025 GMT
Subject: CN=0f79222fd447e13eaedb4bab3632a26a7fa5f070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:14:eb:b9:b0:26:e0:ce:b1:a3:28:0a:dd:
0b:b2:37:17:f9:94:db:8b:b2:60:38:24:40:01:19:
df:07:62:de:79:3a:e0:10:2f:2a:e5:25:3a:bb:42:
9b:45:59:18:5e:7f:20:fc:ef:5e:34:51:86:d0:70:
96:88:4d:c0:49:2d:68:5e:77:46:2f:4d:d1:e3:64:
5d:a5:63:8e:7b:34:42:42:ee:69:41:2d:23:76:f4:
79:f6:1e:77:d2:e3:44:2c:c9:68:8f:a7:16:04:31:
da:22:02:69:96:f4:9c:e0:e1:a4:03:4d:71:7e:d9:
c7:79:2d:a6:aa:50:fd:7d:b6:d0:d5:ea:c2:43:3a:
df:e9:b1:96:43:40:27:e5:21:98:21:80:80:c6:b1:
30:45:ae:84:2c:ea:ed:f5:0a:b2:27:4d:c5:01:0b:
5c:1c:5d:12:6f:69:9d:f4:4f:1c:32:93:f5:49:e7:
9f:41:39:63:62:d7:22:19:22:09:28:48:67:2b:da:
38:a1:f0:ba:a8:a7:d7:20:0f:87:9e:1b:24:14:d4:
76:9c:c4:18:62:4b:41:af:bc:a0:7f:38:bf:e1:d3:
16:b5:6e:4b:48:b1:a4:d4:36:f9:4d:04:01:40:92:
b6:1a:b7:7b:8a:70:b2:92:a7:8f:0b:11:ae:87:3e:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:22:2F:D4:47:E1:3E:AE:DB:4B:AB:36:32:A2:6A:7F:A5:F0:70
X509v3 Authority Key Identifier:
keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:02:74:c3:48:aa:75:c2:cb:23:f2:23:99:96:f8:87:fd:f9:
e1:24:49:04:94:d4:24:e7:6a:7b:1a:38:e3:cf:0e:f5:2e:66:
cc:5a:f0:e2:e5:98:80:fd:90:e9:85:31:20:28:94:40:59:7a:
e9:b5:85:c3:46:08:1f:b2:9d:0e:dc:d2:ec:6f:93:47:57:47:
bb:60:c3:ec:40:e4:b4:bb:6f:73:5f:bb:48:8e:c9:f6:8a:95:
84:32:e3:01:44:42:51:b9:05:37:ec:0e:07:82:3b:c7:b4:10:
1a:dd:0f:f0:5e:e3:18:12:c7:45:0d:a9:2c:59:f9:2e:e6:49:
90:28:9f:ac:ba:90:a1:64:d6:5a:e6:43:10:91:95:13:b9:cd:
db:84:b9:6a:47:05:98:1b:18:f2:79:61:b8:6c:c0:72:5b:59:
38:bc:f3:57:ac:f0:bd:8c:a1:0f:0f:17:11:37:ad:01:9c:bc:
72:75:7f:eb:14:0a:b1:01:78:4a:ce:f6:40:ea:ac:ac:c9:df:
0d:fe:e0:60:92:57:93:70:68:f6:7e:ae:4e:6c:60:fd:28:37:
85:ee:ca:c4:6d:83:ad:fe:b4:8e:d1:3b:34:0d:c9:27:e6:b8:
96:a5:c8:2d:31:34:b4:16:23:db:f6:ca:89:1d:32:e0:b6:5b:
db:11:d9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:34 2025 by rpki-client