Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File: W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier: DMWBfTDiMU/IsPHUJqfay8Y5O6PfF5F8wl//lTYAxl8=
Subject key identifier: 44:6A:74:9F:78:8E:4D:C9:5A:C9:D2:22:B8:4F:8D:16:F1:92:82:C1
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer: /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial: 0197B77C3B965A50ABC9B0CE45C4AE2F2BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: QZDKvK6iw_tPh27glx9LTGGHSYU.roa (hash: XgdxnkBVQi+6Pi+BDAfBhOhlkd5fb/2ukIHoQx2+z08=)
2: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: u+g5Jc1c7xuxSRkrPSwm3eKIOXm6TQvI/K/O0bxkzT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3b:96:5a:50:ab:c9:b0:ce:45:c4:ae:2f:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=446a749f788e4dc95ac9d222b84f8d16f19282c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:09:c1:e5:f3:d7:b9:0b:dd:4c:dc:6e:52:
b5:96:0a:0f:ab:af:09:fa:9e:82:17:05:08:8e:bd:
7b:3a:45:09:71:cb:47:97:f1:b6:0e:19:f3:14:58:
37:c1:e8:20:bd:b7:13:59:e1:86:d6:a8:9f:d7:5a:
f1:5c:c2:b7:52:ca:62:77:14:fe:7f:bb:03:23:06:
ea:85:89:67:6a:32:dd:a6:ef:10:58:03:5d:98:b6:
bd:5a:e0:4e:40:92:da:e2:1c:2e:e4:57:a7:f5:64:
32:87:d5:d9:63:37:9f:66:c4:35:7e:2e:45:ca:d2:
e4:04:3c:73:46:de:c4:14:8d:c3:6f:5c:0a:73:65:
7c:2c:1b:2d:da:ac:2a:86:bd:b6:11:1a:e5:65:80:
90:05:4a:81:3b:8b:ec:fb:2a:65:92:d3:66:22:35:
eb:c7:1e:60:77:94:41:d1:04:3c:53:59:25:02:39:
79:9a:e7:21:39:cf:85:0f:1b:2b:70:3e:3e:6c:7b:
f3:14:87:17:3a:7b:10:7b:29:fa:77:b9:b6:f4:88:
2c:e6:81:dc:3e:69:90:3f:69:7f:e4:28:f1:fa:d7:
86:5b:e2:d0:0f:f8:c4:77:d2:ad:4c:0d:ef:8b:d2:
8a:1d:bd:b3:db:2d:0a:d8:37:17:c9:ac:0f:08:92:
b5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:74:9F:78:8E:4D:C9:5A:C9:D2:22:B8:4F:8D:16:F1:92:82:C1
X509v3 Authority Key Identifier:
keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ab:7e:b3:df:b6:48:a3:58:32:29:2d:aa:f2:80:fd:45:7f:
fa:b6:d5:d7:14:9b:f0:8d:80:27:e9:6b:c6:b2:a7:01:73:fb:
63:df:20:27:df:92:6e:07:4d:9d:84:9e:f3:b9:15:5f:d7:28:
e0:e3:ab:ef:b6:ce:84:64:35:2f:cb:41:d2:1d:1a:a5:0c:a9:
89:62:86:fc:af:51:33:84:bb:ea:a9:44:42:3b:81:a7:35:56:
cc:31:8f:cd:bf:a3:84:ea:ae:4a:d3:0c:28:12:97:51:e6:8e:
a8:ba:bc:61:00:16:75:4f:71:50:96:54:16:c8:43:f7:ec:a7:
3f:49:8f:ba:a5:e5:f4:41:0a:5a:12:dd:80:be:29:8a:8d:49:
d1:1b:f9:d8:3c:7e:90:da:11:59:92:49:57:cd:98:d4:57:73:
9e:8c:c8:3b:18:52:12:b6:ff:55:26:5c:ab:f3:28:38:a7:c0:
76:e6:7c:8f:af:90:68:b6:2c:0e:08:dc:34:d1:19:0b:b7:7b:
56:ec:4d:21:83:97:f3:79:1e:df:2e:c5:26:be:82:f1:7d:45:
7b:de:7a:01:ea:af:3c:9f:46:ed:01:4d:4d:7a:7b:a9:90:d3:
1a:4d:8f:c1:8b:58:6d:05:70:37:85:0c:3d:17:f4:84:80:94:
31:83:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:49 2025 by rpki-client