Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
File: W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json)
Hash identifier: S1gtiAZuZ+oFzaWwYy5dAMGocw+qgfk6234Aimf/lp8=
Subject key identifier: 55:75:EA:FD:6A:8B:10:6F:DE:72:11:29:E4:26:9E:93:0B:C3:4A:20
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 0198D5837674C302F8292474D473F4D55F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 06:00:19 +0000
Manifest this update: Sat 23 Aug 2025 06:00:19 +0000
Manifest next update: Sun 24 Aug 2025 06:00:19 +0000
Files and hashes: 1: RErNlaOpDzrD6wSfbbH1rz1M530.roa (hash: wgBHw0Ti6lWp1Z64AKciY1+PcChXXuuN8WEU42REeQ4=)
2: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: eK/o0DYbwp75PnQPkAnPPDAMt9A3OM1MqetLO4d5fJs=)
3: iuYZctM9ho40y9O9NGu8oiwydyQ.roa (hash: iVbT4XgjGA1oWctdpXO1acTvsUwxsInkD3aqlUFGvoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:76:74:c3:02:f8:29:24:74:d4:73:f4:d5:5f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Aug 23 06:00:19 2025 GMT
Not After : Aug 24 06:00:19 2025 GMT
Subject: CN=5575eafd6a8b106fde721129e4269e930bc34a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:04:cd:46:e0:3c:ab:02:14:4a:b9:63:38:
7e:56:46:01:b0:90:03:5e:b7:5f:9b:29:d6:0c:9d:
dd:17:01:b4:ad:ff:b0:31:f2:99:40:ce:7a:16:68:
92:88:32:9f:f0:7d:00:2b:3a:f6:39:15:a1:c3:e1:
f3:c3:5a:c6:ae:b4:31:5d:45:d5:b3:06:53:17:66:
12:f8:7d:7b:e2:46:56:ef:9f:6a:3b:58:be:cc:b1:
61:a9:c7:38:39:5e:cc:a7:de:a8:7b:16:73:85:15:
83:b6:82:f0:08:f1:64:89:97:dd:20:7b:7e:69:3e:
ee:17:61:73:6d:33:16:01:ca:5b:6e:c8:c9:d8:92:
63:60:03:47:83:d4:42:d1:65:cb:af:e4:3e:11:9d:
02:45:e8:9f:41:e5:f5:9e:bc:b4:9f:cc:27:70:e5:
1e:04:32:c7:0b:66:1c:b1:1b:a6:0c:d3:d1:26:33:
40:c4:f1:44:5f:a7:e2:10:c5:a9:42:da:8e:54:67:
e3:df:70:d7:4c:48:3e:8d:de:fb:9d:49:71:07:06:
68:16:11:ab:c9:05:b0:63:fd:31:c3:e1:d2:c5:18:
01:f4:f5:90:3a:5f:ae:c9:93:e5:67:35:a0:b1:ee:
19:e9:d4:3f:57:16:71:68:8e:aa:db:72:5b:55:8d:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:75:EA:FD:6A:8B:10:6F:DE:72:11:29:E4:26:9E:93:0B:C3:4A:20
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b5:bd:49:9e:a2:25:18:59:77:83:dd:6a:cf:11:48:b2:b3:
b9:88:f8:d4:d1:fa:45:c7:73:23:e6:bf:66:ff:8c:c2:f1:2a:
27:dc:c9:26:87:36:c3:8c:97:64:e6:77:36:c8:8a:71:5a:f0:
c4:48:bc:18:c6:08:83:fb:b4:89:d0:0c:d8:bb:ff:6d:8c:57:
1e:8b:90:89:bc:5f:64:5d:87:dc:88:ae:40:28:bb:43:47:6b:
74:6d:ff:07:d4:f3:cd:4c:cc:eb:75:65:64:b3:a2:31:b8:e9:
2d:b7:41:e0:0c:0f:06:b9:44:d9:09:b6:7e:3b:22:0f:ab:bc:
04:d1:71:ba:27:23:e2:22:5a:91:62:8f:4c:d8:16:22:ea:ca:
df:89:42:4b:89:7b:ec:9e:5a:93:60:46:33:88:21:cf:8e:69:
87:2e:72:28:a2:f9:65:8a:82:df:4a:d6:14:6a:6b:9c:00:32:
ed:41:c5:7d:0c:d8:ea:05:4b:79:5b:46:17:9a:a7:3c:ed:f8:
45:24:c9:f6:14:d6:02:f0:44:68:6c:74:95:37:e7:da:5e:88:
1f:f8:3e:f7:e1:fa:c3:68:51:9f:18:93:ee:e4:25:41:4c:8d:
20:d4:65:3b:94:f5:cf:3f:71:fe:1c:70:b3:8b:2f:d4:b9:40:
88:65:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:19 2025 by rpki-client