Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
File: W_fQ5HEirv77Ys6iFnSoECVVmxo.mft (raw, json)
Hash identifier: 1IJFKIgXyw2JR9SIhLd0Tr9ceNmR84d+0PXR6Nqrk1o=
Subject key identifier: 22:21:D8:6E:DF:76:61:B8:59:CF:0A:D0:D5:9A:84:C4:28:86:CA:64
Authority key identifier: 5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
Certificate issuer: /CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Certificate serial: 0198D54E7DBA4E670733C3CB7334C0B172EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
Manifest number: 0605
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: W_fQ5HEirv77Ys6iFnSoECVVmxo.crl (hash: EXfI2VPJbIK/ZuMTkv5QSh2vNjBW+gLo4Qs5neiSJ5M=)
2: asNSq8lkmS1XdMPBwyGi7exxYUQ.roa (hash: IeZFlfU/tf7kNLd1ueG9wWhJ27KVNelvhJ00kXOKzso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7d:ba:4e:67:07:33:c3:cb:73:34:c0:b1:72:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=2221d86edf7661b859cf0ad0d59a84c42886ca64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:4c:57:3a:43:7e:e2:41:6a:ce:13:9b:5d:
8e:71:f7:bf:3f:6e:c2:42:93:c8:49:36:0c:ff:a0:
87:3a:ae:69:15:70:0f:50:f6:26:d9:4f:44:67:38:
39:02:9b:b2:c6:00:5c:f4:79:a4:89:72:60:0a:4c:
4f:ca:b2:a9:5d:53:04:19:3d:6f:e9:cb:0e:2a:fb:
c1:b4:43:15:e3:0c:cf:5e:ef:f1:17:8a:a0:a3:6c:
d3:47:7b:9e:02:5a:cf:ef:ac:a6:4d:b8:0e:56:a8:
82:b3:61:cc:0b:3a:bc:b0:de:38:90:54:1e:58:e8:
b2:52:12:3b:f5:d8:28:20:b2:c8:6f:f7:eb:2c:c6:
51:c5:3e:a1:ef:ef:0b:61:b1:17:d6:64:4a:1b:c5:
9c:1e:42:9d:05:2e:bd:06:b2:aa:d6:27:26:0e:0d:
a1:9b:a7:52:14:a4:fb:a7:3f:07:6a:99:28:a8:1e:
6d:eb:3d:e7:19:0a:4e:fd:c5:43:e2:31:bc:10:4b:
c0:42:92:b1:12:eb:34:90:20:ee:8d:30:b0:8a:30:
51:21:9a:25:a3:b3:65:5c:44:c5:4f:7e:fd:ce:19:
0f:04:fc:66:f7:a1:82:ca:83:ab:63:1c:c4:71:d6:
f4:b5:95:08:1c:78:e6:30:3f:ef:1a:52:81:70:27:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:21:D8:6E:DF:76:61:B8:59:CF:0A:D0:D5:9A:84:C4:28:86:CA:64
X509v3 Authority Key Identifier:
keyid:5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:80:99:e8:d5:d2:8e:bd:5e:70:43:30:97:8f:42:5b:84:2f:
80:ef:31:26:37:9a:7c:5e:17:cc:28:d4:84:2d:98:2f:0d:96:
23:0a:98:1b:1a:ed:db:89:b8:1a:17:bd:b2:84:e4:1d:e4:24:
73:f2:de:e2:1d:0d:22:92:be:f3:b5:81:e9:e4:5d:7f:fe:a0:
4e:c8:52:45:7d:1f:a9:03:91:9b:d9:36:f8:cb:92:97:ad:00:
5e:d9:2f:0c:db:9a:0f:f7:28:04:e9:02:19:d7:ed:96:1d:17:
9e:98:34:2f:26:cf:28:c9:2a:f0:0e:28:cb:be:5b:0f:3b:43:
e8:44:b3:8d:63:dc:be:51:62:9a:34:01:bc:80:fe:77:fe:be:
db:37:28:52:66:2c:70:20:7b:fb:a2:93:f6:2e:3b:b5:ed:42:
bd:37:8e:de:2b:5a:34:64:e7:9a:42:15:79:44:19:65:49:27:
51:fc:95:f4:12:c5:18:90:ff:2c:05:ea:1e:f4:79:e4:b6:65:
ff:4b:9f:e0:53:14:4f:b2:95:fc:a0:85:c4:c4:9a:cd:27:bb:
6c:1f:14:53:e5:fe:48:6f:14:8c:ae:8f:34:27:a7:24:59:31:
e1:e3:f8:72:07:8c:8c:2e:9a:69:c9:a2:f6:06:52:b4:6e:8a:
37:ef:b9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:36 2025 by rpki-client