Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: CT/U4eAqiuA3VyXchqFm19jwaMhwmiEb0vCIxDmp8v0=
Subject key identifier: 1E:C2:DF:2B:28:B6:E1:19:D6:9E:86:67:90:C4:C2:40:03:29:8E:C4
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 0198D472E6AA1CF3F705634BFD2F1FBCA330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 1548
Signing time: Sat 23 Aug 2025 01:02:36 +0000
Manifest this update: Sat 23 Aug 2025 01:02:36 +0000
Manifest next update: Sun 24 Aug 2025 01:02:36 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: UfhCm2L7Lns2YTDZZTgLvsYwhrSwmGXZvh3P434AnW0=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e6:aa:1c:f3:f7:05:63:4b:fd:2f:1f:bc:a3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Aug 23 01:02:36 2025 GMT
Not After : Aug 24 01:02:36 2025 GMT
Subject: CN=1ec2df2b28b6e119d69e866790c4c24003298ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:2a:ad:f1:0c:af:74:b5:a1:e5:19:1e:a0:
93:79:21:de:77:11:32:5c:c2:eb:b6:8c:46:d5:cd:
9e:d3:52:ea:90:60:22:a9:73:19:1d:f0:ab:61:8b:
28:4e:9e:41:12:8d:4e:a7:d4:80:34:79:ea:d1:00:
1e:e1:0d:bb:ca:ce:86:43:81:85:87:a0:0a:72:6d:
52:f7:e3:9c:3b:e7:92:ec:90:39:8e:bc:4a:98:1d:
72:0f:fd:6e:3f:38:34:b2:eb:59:7c:fd:65:52:bf:
c4:d5:1a:f7:29:7e:b7:80:13:bf:24:57:a9:08:cf:
54:36:85:dc:ff:3a:1a:9d:3b:ea:9b:9f:13:f0:c6:
7f:dd:20:5f:df:1e:af:91:75:3b:db:31:7e:21:19:
db:ae:72:66:b0:b7:59:3b:fe:fa:09:61:ce:40:ec:
62:91:7c:5e:f9:d9:7c:69:1d:42:eb:a0:61:b1:c3:
a4:0d:76:ee:d3:5a:09:3d:09:18:79:4d:95:81:22:
9c:b0:b1:57:39:63:89:8f:7c:20:09:19:57:87:cd:
4a:80:6a:b6:31:0f:94:38:5d:38:e7:fa:be:82:d7:
9e:9c:bf:5a:70:fa:09:ac:22:39:79:31:06:93:e9:
16:6d:95:be:59:eb:66:dd:83:02:25:b6:54:13:8b:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C2:DF:2B:28:B6:E1:19:D6:9E:86:67:90:C4:C2:40:03:29:8E:C4
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8c:4c:6f:f5:2d:2e:1d:69:64:76:ca:a9:1d:48:13:74:cb:
79:81:0e:d4:4e:c4:e2:11:c2:e4:4a:d3:36:98:4a:a7:90:9d:
bb:1f:5c:45:81:05:85:7b:48:63:a3:80:b0:4e:b3:c2:bc:e4:
fc:18:29:2e:88:c8:67:9b:d9:41:22:1d:89:9c:13:41:c3:0b:
f8:a3:66:d4:48:21:88:56:4b:6f:9c:b0:87:c4:2a:e4:71:4a:
36:56:24:92:6d:69:48:77:69:28:c5:7e:0f:41:cb:38:4a:dd:
51:91:ab:71:4e:7e:9c:93:bf:4a:27:2e:77:d7:b9:cc:d2:7c:
c1:48:f0:0e:98:ab:be:c8:6e:7c:6d:56:a7:78:3f:3d:94:6b:
dd:d3:9c:64:2a:a1:9f:3d:4e:1d:71:08:fe:f0:06:d5:72:23:
4c:fc:8f:72:47:32:95:0c:a2:44:57:a1:77:59:83:20:67:c3:
4b:87:b6:f3:64:d8:1f:e3:bd:b0:bd:0d:6a:1a:bf:b8:02:42:
d9:66:56:c4:83:53:78:0c:5a:55:77:72:6e:f2:2b:9e:38:17:
60:31:a3:21:24:ef:e1:31:60:03:c0:8a:b4:55:d8:16:22:cf:
63:f0:2f:70:8a:87:fa:32:36:23:bf:44:d8:cc:76:11:02:a3:
0e:f6:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:40 2025 by rpki-client