Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
File: W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json)
Hash identifier: W68az/4R9kwStlFCW8ptVbYLRuE7RTxopYGkQMV1UfM=
Subject key identifier: CE:2B:E7:D9:03:50:C0:3B:5A:FA:E2:44:6F:C8:F9:90:F4:A4:2A:C7
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial: 0198D515A1EB8BE75F71518C091B6EB08FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
Manifest number: 0CE5
Signing time: Sat 23 Aug 2025 04:00:21 +0000
Manifest this update: Sat 23 Aug 2025 04:00:21 +0000
Manifest next update: Sun 24 Aug 2025 04:00:21 +0000
Files and hashes: 1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=)
2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: /K9uzL9doiWE+bK8GJCWH/c9Jf4MXkPyyzFQv0RdysU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:a1:eb:8b:e7:5f:71:51:8c:09:1b:6e:b0:8f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
Validity
Not Before: Aug 23 04:00:21 2025 GMT
Not After : Aug 24 04:00:21 2025 GMT
Subject: CN=ce2be7d90350c03b5afae2446fc8f990f4a42ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:bc:ad:b9:d8:f9:e9:37:da:10:4d:28:3c:
74:ae:31:92:d0:5c:55:46:7c:ee:71:8d:3f:1e:05:
03:c7:ba:e5:fd:32:5c:54:2d:f8:92:ef:40:ea:29:
1f:48:8c:12:b3:8c:47:f3:41:4c:6d:c2:f5:ff:84:
b4:1c:7f:5b:2c:d8:74:38:21:e9:ca:e6:3d:2e:8a:
c4:fa:aa:cc:94:a7:a1:ee:f0:0b:d6:6d:54:88:74:
43:8a:72:9c:5b:a4:1c:1e:39:8a:48:4f:bb:03:64:
63:52:d3:51:ff:4a:3f:55:2b:39:00:18:b8:26:91:
11:0c:24:d3:8a:2e:8f:e1:c8:8d:87:77:82:ec:e3:
74:cf:53:1a:44:07:df:20:8e:6c:5e:44:79:b5:e6:
5b:33:5b:75:bb:46:65:1b:60:a4:ef:ed:d7:00:0a:
bc:e7:d2:ff:8a:1c:25:c4:26:f7:99:5c:f4:84:43:
a4:f4:db:97:c9:3b:03:94:89:77:6a:87:61:38:81:
69:c2:ef:bd:44:40:9d:7d:b6:fc:98:c8:be:43:c0:
9a:8f:ef:13:9f:ba:35:4e:89:05:62:ab:6b:49:61:
ce:b6:96:c2:cf:0c:53:38:9a:6a:7d:ea:ac:5c:30:
10:08:fa:13:8e:a3:19:9c:3e:bb:96:2b:97:b7:c7:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2B:E7:D9:03:50:C0:3B:5A:FA:E2:44:6F:C8:F9:90:F4:A4:2A:C7
X509v3 Authority Key Identifier:
keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:58:f9:78:15:a8:70:d8:d2:42:b6:99:5f:dc:da:9c:44:14:
11:29:06:9f:ea:ee:a6:da:e7:00:b0:5d:3e:04:11:8e:77:0c:
c2:a3:0d:d8:d8:6a:b2:0a:98:fa:04:a7:14:8b:74:53:ec:e6:
52:c0:97:ff:2f:30:4e:d7:e5:ce:9f:c4:de:7e:7f:71:00:d3:
55:90:3b:83:c2:7c:52:06:67:28:20:45:9e:02:75:cd:4c:72:
cd:fb:3a:a5:6a:d5:0f:8b:a6:23:78:2f:8f:e8:b7:d4:33:d4:
c6:03:06:16:f9:b2:c7:77:e4:86:ca:31:ad:6e:ba:38:93:ab:
46:70:5c:32:27:00:01:a2:b0:cc:50:e0:aa:ab:f1:08:ae:4b:
fd:ba:1b:91:53:e7:50:2b:c8:b6:31:2b:37:4a:ce:1b:3b:e6:
1c:a0:56:2c:58:57:1a:80:d3:81:79:9e:3d:8e:ee:8a:13:95:
ba:05:3b:24:f2:63:00:d3:89:eb:af:bc:de:de:cb:4e:ef:20:
49:46:ff:f9:05:4b:09:53:97:0b:8c:25:08:aa:c3:74:c5:e8:
bb:30:15:b5:4a:d9:17:e0:a1:74:bb:aa:a7:df:0c:69:87:06:
7b:5e:6b:22:81:89:3e:b1:21:b5:41:ea:63:e0:47:5a:9b:a8:
73:bb:36:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:17 2025 by rpki-client