Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: +p1N0S75fJHBWE0V1h2yhYVVU/gol9pLIWKm+dMugEg=
Subject key identifier: CB:88:22:85:27:2E:5A:65:89:4A:35:90:6F:CE:AC:C6:3D:27:74:7A
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 0197B6A1E76204FAF127D2721296FCB902B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 14B4
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: j9mH0aZzSAIIExVh0dsNQclQgKe32CP9H6lqEiR8NYk=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e7:62:04:fa:f1:27:d2:72:12:96:fc:b9:02:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=cb882285272e5a65894a35906fceacc63d27747a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:0e:b8:4a:d6:08:a5:66:aa:58:37:32:78:
d9:53:1d:1e:99:05:e5:45:6c:86:17:20:1f:63:24:
20:3e:6d:c2:2f:cc:c7:d2:bd:bf:ed:e7:c0:7e:db:
fc:54:5e:14:3e:38:2e:d4:b9:48:78:4f:c9:17:fd:
aa:2a:bd:29:7f:5f:e4:12:96:c6:f7:07:eb:2a:a6:
c6:73:28:5c:74:25:1e:94:55:26:0b:79:a8:19:08:
99:1e:c6:c8:83:de:89:32:76:ed:c1:b9:68:8a:8d:
46:23:02:8c:91:3c:a3:76:d2:cf:de:9e:ef:6e:59:
87:eb:64:96:c6:cc:58:74:95:64:50:df:40:6d:1e:
db:39:78:38:41:44:43:bb:8e:2d:d4:54:c0:2c:6d:
c6:b3:5f:4b:5f:e9:fd:fe:9f:89:d7:2f:3b:6e:0a:
85:e4:61:77:b4:ca:5a:bc:88:19:76:d8:bc:76:fc:
a4:f4:38:0d:33:f8:03:14:be:5a:b6:1d:92:f9:29:
8d:cc:a5:ad:84:d3:c0:15:7e:8a:63:b1:16:8e:fa:
dc:9f:5e:a1:06:ac:c0:32:3f:60:53:b7:b8:8a:e7:
aa:59:58:72:0f:55:08:07:b4:6c:62:a9:93:43:61:
da:80:b9:43:37:f9:b9:35:de:c1:10:5f:91:82:54:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:88:22:85:27:2E:5A:65:89:4A:35:90:6F:CE:AC:C6:3D:27:74:7A
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b4:17:9c:cb:3c:39:eb:e7:dc:02:34:d3:f6:30:fb:dc:d5:
12:a6:18:52:55:ae:49:3d:66:27:99:c5:b9:da:6e:a8:c7:d7:
70:d1:25:7d:ff:e9:0a:f4:f4:78:37:1e:53:47:56:b8:a8:db:
2b:39:26:dc:9b:55:1f:46:e2:96:48:ef:34:71:10:30:32:06:
76:f7:de:16:07:76:e4:54:91:5c:7d:1c:ab:1b:34:f8:68:af:
a8:b1:39:d6:66:2f:9f:91:24:af:8c:1e:58:3e:d3:c0:e3:39:
eb:a2:85:64:6a:5d:f3:da:13:48:8e:03:50:99:c5:27:f2:8d:
6c:f8:6c:85:2b:1a:b4:b8:e8:85:bd:e0:4e:9c:48:3e:82:ed:
ca:e2:6d:2f:ad:37:c6:02:05:ed:9a:e7:28:6a:0c:8a:82:e4:
49:ac:a6:5f:ab:07:94:81:d6:42:32:a0:00:00:73:9e:f1:69:
8b:f2:57:09:f2:7d:73:1a:0a:8c:19:44:5d:c4:3d:19:3f:30:
64:92:b6:77:aa:cb:ba:9e:4e:4d:a4:19:a0:07:09:98:59:3d:
ef:0b:90:f4:ea:02:35:04:44:a5:99:84:03:51:fa:d3:be:8f:
f5:56:c8:1f:70:bb:be:b1:5c:32:e2:0e:96:7f:ca:7b:66:f9:
66:09:49:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:34 2025 by rpki-client