Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: w3a6Bqir5ab+2gICM1VK++cxz1PYbkfs21ZfGT1Q3bE=
Subject key identifier: 84:1C:39:CA:58:E6:7D:2C:41:7E:5F:7F:3E:C2:C7:7F:4E:2E:60:74
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 0199FDDA14CAD4C33B153ADABA53663DFEE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 1704
Signing time: Sun 19 Oct 2025 19:02:31 +0000
Manifest this update: Sun 19 Oct 2025 19:02:31 +0000
Manifest next update: Mon 20 Oct 2025 19:02:31 +0000
Files and hashes: 1: 4D3wEAaKaO-VNYMegevp2dIDiZA.roa (hash: Pboeq/VEw/fEiNcfqVmPGeRB5EfnZp8myD9JUVRtoS4=)
2: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
3: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
4: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
5: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
6: HQ5pk500M9r_ovoVxF0QEcohnog.roa (hash: ww8oMO4jWUVQ6/eBdnQNu3m8JDu+2hsoI9UHwgt7uPk=)
7: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
8: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: pKjmnYzhPz9RTvUQay1JVBwcsOOtn0G/IiUQhUF/Ink=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:14:ca:d4:c3:3b:15:3a:da:ba:53:66:3d:fe:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Oct 19 19:02:31 2025 GMT
Not After : Oct 20 19:02:31 2025 GMT
Subject: CN=841c39ca58e67d2c417e5f7f3ec2c77f4e2e6074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:c9:4a:8e:be:1b:39:de:df:32:c2:13:96:
23:40:67:c4:66:8d:6e:31:44:44:4f:a3:27:4b:ec:
b4:60:1e:40:cd:1b:60:e9:3b:af:8d:31:c2:7e:3b:
28:dc:62:02:d0:ce:6e:6d:0a:ab:35:c8:ed:64:d9:
12:e3:53:08:57:55:b6:23:2b:73:73:f2:42:62:8b:
5e:d7:fd:78:ef:8c:63:c2:82:16:66:9a:2f:6a:ed:
54:68:02:6c:d3:63:5a:32:bd:03:5a:79:f3:05:74:
bf:58:89:19:86:8a:18:14:d6:2b:74:91:d2:21:29:
cf:ba:e3:9f:f5:16:87:4d:ae:60:52:2f:e3:56:04:
03:44:a3:40:d7:fa:3f:cc:d8:69:62:1e:43:b0:97:
a3:36:65:ae:6c:b9:cd:d5:41:73:83:b4:b5:e1:13:
58:23:df:a0:44:18:46:8e:d8:0e:24:e7:26:4d:37:
77:e0:20:4d:d2:1a:f5:9c:68:e8:c7:70:26:ef:ed:
af:76:b7:59:9b:e3:92:66:ba:99:87:d4:fe:e9:79:
fd:4c:f3:c0:0f:d8:f1:cd:bb:4f:bd:ab:6f:e0:fa:
0a:2e:18:c3:d1:0e:29:bd:ca:54:1a:51:c5:cc:ac:
98:0f:4e:20:31:43:81:84:a7:5f:55:85:09:67:65:
61:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1C:39:CA:58:E6:7D:2C:41:7E:5F:7F:3E:C2:C7:7F:4E:2E:60:74
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:75:bd:07:58:0a:1d:8a:b5:5f:bf:9f:58:ce:aa:72:1c:0b:
ea:bb:ae:82:0d:d0:ce:ca:1a:43:7e:c2:54:6e:d9:3e:de:dc:
28:c9:8f:06:c5:bc:94:07:ba:ec:61:79:7f:7b:56:4d:0b:cb:
b2:45:f9:c7:2f:c7:57:fe:fe:be:db:8f:bf:e0:f1:f4:cd:d4:
a2:45:0c:84:ad:e9:57:aa:2b:df:39:7b:3a:c2:78:72:f0:b9:
4b:89:91:ab:1e:49:3b:11:36:9b:0a:81:66:ef:86:b5:c6:04:
ba:ae:55:cc:8d:c5:25:9f:88:de:c1:d7:de:d2:2b:4b:e0:40:
f9:99:75:b2:26:8d:b5:69:40:93:5d:77:33:1e:c7:6a:64:28:
33:75:d8:01:14:83:d7:f6:3c:f8:51:fe:8d:ac:c6:71:4b:a4:
97:17:8c:f9:4a:3c:a2:4d:88:1b:4c:63:b3:b1:c1:d3:a3:7a:
44:eb:20:52:30:26:ca:05:a8:78:4e:9f:92:48:4a:7a:91:11:
5c:75:78:53:db:21:97:aa:4f:2a:80:1a:bb:d7:33:08:e8:57:
60:6a:5b:d6:56:41:87:02:0d:79:4b:df:76:cc:52:3c:57:84:
72:d9:06:fd:76:31:04:c4:fd:79:3e:d8:9f:56:c2:5a:b4:ae:
7a:0d:eb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:51 2025 by rpki-client