Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: 7jlPeSnYiDcn4wpkY5+v7prGxEtaxEklr7IO1+RU81k=
Subject key identifier: 15:D5:3B:72:73:0A:35:53:9A:71:A9:BF:83:F7:98:FF:C3:2B:CA:60
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 0198D698236FDCC31AD9AD4DA9EC2042EF22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 1534
Signing time: Sat 23 Aug 2025 11:02:31 +0000
Manifest this update: Sat 23 Aug 2025 11:02:31 +0000
Manifest next update: Sun 24 Aug 2025 11:02:31 +0000
Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=)
2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: /YzCeQFIH0k6LysSUzqDndO9CLUyyTSvzK0bT2Ym5Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:23:6f:dc:c3:1a:d9:ad:4d:a9:ec:20:42:ef:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Aug 23 11:02:31 2025 GMT
Not After : Aug 24 11:02:31 2025 GMT
Subject: CN=15d53b72730a35539a71a9bf83f798ffc32bca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4a:a1:35:45:0a:58:c2:61:03:cf:f9:9c:62:
1f:b6:a2:2d:ec:83:02:f8:75:a5:f4:d2:95:d8:f4:
c6:ed:b9:90:97:67:13:ee:b4:4f:11:30:a8:61:66:
13:57:1e:f6:5e:46:99:1f:98:17:aa:24:56:84:e7:
9e:d2:26:aa:86:78:64:23:b7:a9:62:a9:d1:cb:b4:
c7:ef:13:42:2c:ff:24:82:4d:a3:17:6c:b4:b8:0a:
45:e0:bb:4c:0f:df:2c:66:8b:a7:05:0a:4f:3c:75:
61:b0:62:57:98:fc:05:5d:12:c0:16:57:0f:49:bd:
1d:b9:f8:c4:1f:7b:fa:a6:37:fd:a3:c4:99:05:d7:
3b:09:ca:ff:01:f7:ec:a9:2f:30:50:79:4c:f0:ef:
59:bb:97:12:1b:3f:cc:33:c3:0a:0d:68:0c:d0:3e:
05:d5:db:ef:14:e2:be:05:7b:41:75:3b:a9:66:e8:
36:86:23:92:67:32:62:5f:b9:bc:d1:4f:ec:74:01:
29:ad:e7:60:21:4a:39:ce:89:63:ea:b8:2f:3f:ee:
47:9d:72:35:e4:24:29:da:41:9f:f0:e3:ea:a7:56:
ee:ea:a1:2e:18:25:fb:36:37:23:16:bb:ca:16:d0:
c8:90:48:96:e5:ea:16:b7:b4:d7:b6:42:d9:c7:34:
94:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D5:3B:72:73:0A:35:53:9A:71:A9:BF:83:F7:98:FF:C3:2B:CA:60
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:55:f0:7d:23:9a:bd:26:aa:f0:c7:7c:40:9c:55:91:4d:96:
9f:25:62:95:d6:c1:1d:43:29:a8:79:8a:3f:c5:3e:8b:37:2f:
d3:29:dc:92:c7:6b:3a:b7:ff:6a:cb:e7:a6:f8:7b:64:c2:ab:
e3:6e:92:e3:a4:55:4e:cf:06:ae:48:18:80:6e:d2:d9:f1:b1:
89:6b:1b:fc:d7:a6:3f:0c:31:4a:1d:07:ae:f3:7a:1d:01:3a:
10:3e:14:4a:91:67:68:55:8f:95:21:f7:c9:ad:0e:b2:62:65:
9b:ff:f3:75:e8:8e:76:38:a6:ee:74:96:91:b3:73:3c:4e:9b:
2d:c5:84:11:e8:fb:1b:fe:9e:84:e6:28:f2:b7:20:80:e7:7b:
a2:40:1c:08:dc:a0:e7:fd:52:7d:19:66:06:49:fc:fc:f4:e9:
62:64:0c:11:4b:97:fd:0b:78:ed:20:a3:5f:de:3d:fc:62:1f:
51:83:fc:77:68:76:16:e4:cb:bd:ff:66:4d:5b:e6:cb:ff:ad:
91:a0:d7:8c:d5:c1:13:73:f5:a4:e0:d8:4c:a3:9d:e9:6e:76:
7e:bd:9f:98:00:b3:c1:b0:61:86:6e:0e:de:5e:03:ee:44:c3:
d0:da:a3:d4:45:47:89:6e:67:78:25:55:bf:67:e5:2d:29:43:
c5:50:1c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:30 2025 by rpki-client