Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier: 7CKsnqWeic8e6dkU9JqvyUHTuxBSBQK7jV8Th2fTypE=
Subject key identifier: 36:CC:B1:57:87:EC:44:0A:9C:8B:8B:B7:0D:B9:5B:D2:BC:79:9C:B2
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial: 0198D73B6013AC31A92C92EE0C046F51433D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number: 161F
Signing time: Sat 23 Aug 2025 14:00:49 +0000
Manifest this update: Sat 23 Aug 2025 14:00:49 +0000
Manifest next update: Sun 24 Aug 2025 14:00:49 +0000
Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=)
2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: UuW9gkxeL/K59ueHZX4WzB9ynLOB4P64VYrD2pVH3xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:60:13:ac:31:a9:2c:92:ee:0c:04:6f:51:43:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aae19678aa37525512229a94e7890147183273c
Validity
Not Before: Aug 23 14:00:49 2025 GMT
Not After : Aug 24 14:00:49 2025 GMT
Subject: CN=36ccb15787ec440a9c8b8bb70db95bd2bc799cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:37:a3:e3:b3:59:4d:49:9a:71:58:af:df:
d2:59:c0:05:b7:67:ec:d7:de:c3:a9:86:b8:13:dc:
af:5c:5e:fb:fa:89:fc:06:f5:87:bc:dc:4c:e1:b1:
b7:a0:87:cd:9f:5b:ac:d0:d0:02:cc:45:1d:a8:20:
af:74:7e:4b:a2:c1:74:16:5a:db:0f:37:1b:ac:78:
8b:cb:85:e7:92:82:9d:45:8d:75:15:3e:99:58:b5:
b2:ba:28:b6:88:d6:f0:85:b5:c7:23:99:70:c5:c8:
24:86:3d:ba:df:43:42:30:cd:ab:2f:74:16:45:2c:
38:05:ec:57:55:f2:46:f8:3d:b6:49:23:0b:b0:76:
ae:a3:8b:c4:73:26:37:eb:e3:b8:99:43:3e:db:bc:
af:2c:b0:61:92:2f:fd:8d:21:c9:ef:61:5f:64:e9:
16:36:1d:63:d1:09:45:e6:19:36:9c:50:74:e5:f4:
43:d6:3d:0c:f0:3d:5d:76:60:76:13:14:ef:68:1d:
03:0e:9f:fe:b9:75:b6:10:b8:71:ef:ce:c2:2c:b6:
74:0d:91:5a:47:14:d5:3e:0c:68:c1:2c:a2:2c:22:
9d:2e:63:61:d9:d0:ba:10:8b:78:be:4c:31:be:c9:
02:c8:1a:a4:d3:70:fe:41:8d:55:da:1e:67:ac:e6:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:B1:57:87:EC:44:0A:9C:8B:8B:B7:0D:B9:5B:D2:BC:79:9C:B2
X509v3 Authority Key Identifier:
keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:91:54:f7:5c:49:ac:70:89:3f:fb:43:f8:18:87:92:2c:0b:
af:61:7d:00:b0:61:44:1a:bf:f9:f5:5c:2f:11:fa:d0:b7:12:
76:99:9e:01:39:ae:ae:62:53:5e:38:47:6d:95:38:7e:37:2d:
ac:be:68:5f:1a:38:d6:4c:c8:4e:90:0b:f7:3b:df:04:f0:eb:
d0:1a:66:9e:68:57:35:6b:14:c1:e8:fd:29:f6:6c:cb:06:fc:
18:9b:18:d6:e9:a1:08:5b:05:86:81:b3:5a:37:64:a2:bd:48:
5b:af:0a:30:1d:16:dc:55:24:55:cd:5d:9e:e3:a8:03:20:07:
8c:25:6c:4d:c6:ac:58:43:35:be:57:ec:eb:fe:b1:e1:9a:4f:
50:ad:6c:d9:44:0b:5a:e8:62:bb:6e:ea:72:fa:ee:4c:bf:cf:
7a:95:cf:ff:2f:e8:20:b6:a7:65:29:ca:17:63:cb:73:ec:08:
e7:8e:47:e6:87:e9:7d:89:56:d0:55:ec:1d:cf:63:d5:03:e6:
d4:05:e4:d1:71:07:63:88:25:fa:c1:bf:0e:c8:2d:6a:f2:58:
a5:44:ec:90:a5:fd:87:e9:21:6e:03:a8:f7:8e:62:8f:3c:54:
2a:d9:f4:10:60:41:7b:20:c4:14:91:83:e5:86:a4:28:c3:f5:
68:9a:83:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:43 2025 by rpki-client