Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier: TtYF4wNYHPgubz5/LTE6lwfskP0JTccSV31FUCQpzEA=
Subject key identifier: 53:35:20:EE:B4:D0:F9:A0:D9:EE:AE:C2:55:9F:8B:46:CC:7C:F1:71
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 0198D472825B4606B5516015F6E098DB0DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 01:02:10 +0000
Manifest this update: Sat 23 Aug 2025 01:02:10 +0000
Manifest next update: Sun 24 Aug 2025 01:02:10 +0000
Files and hashes: 1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: uDsBdTJT23uX1mbVJeN0jSIeRvBZhriM5eKcKW7dCq0=)
2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=)
3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:82:5b:46:06:b5:51:60:15:f6:e0:98:db:0d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Aug 23 01:02:10 2025 GMT
Not After : Aug 24 01:02:10 2025 GMT
Subject: CN=533520eeb4d0f9a0d9eeaec2559f8b46cc7cf171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:50:c6:50:b0:dc:3f:45:19:ed:1a:d0:ec:
01:91:e8:21:12:da:33:6d:58:13:48:8d:b6:cd:da:
c4:25:0f:35:54:ca:a3:f6:1b:ca:a6:42:9e:89:06:
db:57:42:98:e5:f3:b1:e4:8d:58:c9:91:88:a7:6e:
4c:c0:78:fa:80:58:7f:40:05:b6:49:2d:01:e4:92:
c1:38:11:32:7f:52:93:46:37:65:e9:ba:c4:5f:82:
a3:53:8f:35:fd:04:ba:16:f0:8f:e6:83:5d:39:64:
f6:b1:ae:92:63:73:87:05:5b:82:54:f9:9e:7b:19:
c2:f4:34:fa:91:40:48:bc:a6:1d:1c:61:95:bb:45:
07:c5:d9:04:7f:0f:c9:7a:f6:25:1c:ff:ce:80:ce:
e7:25:51:4e:11:87:5f:76:ce:79:b1:c2:2b:8a:83:
bb:f1:5c:8c:32:bc:5d:35:45:b3:e5:52:31:a6:57:
23:fa:8f:28:67:07:e7:e4:ad:e6:88:5a:34:0f:37:
36:87:58:6e:ee:7e:cf:e8:b4:9c:bb:61:84:98:f8:
e7:50:9d:6d:a9:6e:cd:05:03:e4:2b:da:ec:94:76:
59:7f:03:18:35:06:9e:2d:9d:70:bd:59:05:e4:74:
3b:7e:62:ce:13:76:92:a5:1e:28:e0:0f:0f:1d:e6:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:20:EE:B4:D0:F9:A0:D9:EE:AE:C2:55:9F:8B:46:CC:7C:F1:71
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:fb:a9:bb:24:76:f4:8e:fa:59:88:2b:09:bf:c2:51:cc:
24:83:1c:bb:13:d0:62:1a:08:4d:9d:a1:fe:d7:d9:33:e8:25:
84:32:13:a4:b1:91:d9:a1:ab:80:a7:b5:e3:37:e3:9c:b4:8f:
4f:a8:1c:27:70:bb:08:e2:8e:95:e9:e5:d8:41:2c:d3:5d:6c:
23:6c:3c:80:dd:0a:01:3c:7f:7b:6f:ca:a0:13:0a:dc:3b:1c:
a0:32:2c:83:13:f0:82:12:36:9a:0b:f2:c2:0c:e1:dd:07:e7:
eb:dc:8f:c1:a8:ac:0b:3c:a2:6a:32:5c:09:45:ca:28:dc:81:
8a:6d:56:81:bc:f1:9e:ae:fb:b3:31:85:ec:2b:63:e8:b5:0e:
09:59:3c:73:8b:08:63:b1:8f:e7:91:da:96:cd:ec:6c:a0:4f:
0d:92:3c:7c:99:15:85:eb:20:ee:1b:c0:5f:26:be:be:2d:b0:
e9:21:f4:6c:9b:ba:f8:46:3b:e2:dd:c1:d3:9e:e9:b2:22:6f:
c4:bb:8a:0a:98:b8:bc:85:88:9e:ed:c3:0c:42:7e:37:3a:84:
35:a2:08:9a:10:13:ed:3f:9f:c5:75:0e:39:4b:f1:7d:94:af:
27:ef:16:38:ec:fe:6e:9a:5a:d4:99:74:e9:60:5a:5f:8f:da:
59:42:9c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:16 2025 by rpki-client