
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: dg7Y4phS93JA8b5x+7CyqgNhQGrExWMuQ3zdIRO9kkI=
Subject key identifier: 48:C7:24:B4:50:6D:2A:7F:1E:36:D6:2B:B3:69:1F:BA:D4:02:68:F5
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 0198D65F6BF4082ECCDC1566062C9D9DABAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 1257
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: ZN+UulGmv6RnBpKn3dlQHo++oUcL/q4nKiOiHlpUtro=)
2: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
3: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6b:f4:08:2e:cc:dc:15:66:06:2c:9d:9d:ab:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=48c724b4506d2a7f1e36d62bb3691fbad40268f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e4:33:1a:4d:e3:66:1b:c9:73:25:b3:c5:53:
eb:04:a4:88:78:bc:a6:3f:0e:1b:23:ca:b2:cd:99:
47:94:d9:4d:ca:cf:f5:dd:10:e2:5b:64:39:76:72:
3f:ec:ea:80:23:99:ad:56:f3:d2:60:91:ad:83:e2:
d0:69:ff:81:ab:20:ad:55:40:de:e7:19:81:44:0b:
59:59:42:e1:b6:5e:40:b9:04:ab:d8:04:fa:4f:ff:
6c:3a:21:48:4b:d2:26:ef:7d:f3:3c:22:09:44:2a:
30:a6:e8:51:c6:96:12:fa:41:b8:b2:bc:12:b4:80:
16:55:25:25:a8:66:70:d8:58:84:e1:a0:16:68:ba:
03:1c:0d:e8:b6:71:df:0d:ad:cf:66:11:5e:ec:ef:
3f:44:78:0f:ea:08:70:13:65:ad:af:81:2c:60:15:
5f:b2:cb:72:97:a1:27:bc:da:ef:85:c3:5f:20:0f:
41:08:91:28:c5:df:d3:52:b7:9d:64:0f:c2:29:ee:
07:74:de:30:bb:e6:5c:f6:4a:5a:f2:d2:cb:55:d9:
b1:75:a7:9c:9e:3a:89:75:87:f3:4d:e4:2a:5d:35:
40:3e:32:dd:cc:ac:fe:ed:3f:78:3b:02:5d:fb:cb:
8b:4a:60:b4:da:b5:38:79:39:bb:94:44:e4:01:1c:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C7:24:B4:50:6D:2A:7F:1E:36:D6:2B:B3:69:1F:BA:D4:02:68:F5
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dc:e4:09:b9:92:e2:cc:fc:dd:a4:d3:5d:1d:73:42:f9:04:
7c:ab:fe:12:d7:de:c4:6d:f1:6e:a8:71:bd:da:1f:64:b5:7f:
31:c7:4e:71:30:fe:1e:71:70:32:c3:03:83:d1:dc:12:b0:43:
38:3a:c0:71:64:13:66:6e:b1:99:41:3e:96:13:66:97:da:30:
7d:d8:4a:1c:3e:5a:93:61:a7:99:cf:18:82:71:7c:5c:c5:da:
98:02:8d:b1:40:11:3b:3d:32:9b:97:a9:32:1d:ff:37:40:13:
75:d9:3f:bd:f5:83:26:42:ba:31:ff:6c:e6:4c:d7:f6:f3:0f:
b5:53:31:b5:97:92:f1:f9:56:11:fa:87:5b:54:d2:0c:21:cf:
36:78:e0:a8:ba:62:0c:f4:d4:42:50:ea:cc:5e:fd:6d:81:f6:
e8:fc:8c:89:b2:3f:3f:ef:7e:1a:f5:6b:c3:64:0f:9d:f8:2c:
0c:ac:64:70:35:e4:91:70:38:72:b6:15:84:b5:e6:64:51:78:
cd:ae:65:ec:47:0b:23:02:73:65:05:a7:dc:6d:49:b6:e3:b4:
0a:12:6b:ac:a0:4c:76:95:00:13:67:8a:1e:43:26:c8:48:89:
fa:a4:6b:74:e3:37:17:84:5e:48:6a:61:25:30:8a:94:78:60:
43:75:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:12 2025 by rpki-client