Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier: 1eeUAP4zdM5zTz8SKdbOV8qxmOOWjHcIoZXY1rOJRPE=
Subject key identifier: 84:8E:DF:6C:BE:5B:3F:82:82:3F:2E:BC:E9:2C:43:A6:66:AF:D9:44
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial: 019897811D4044393742A1A84A068746561C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number: 15FE
Signing time: Mon 11 Aug 2025 05:01:17 +0000
Manifest this update: Mon 11 Aug 2025 05:01:17 +0000
Manifest next update: Tue 12 Aug 2025 05:01:17 +0000
Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=)
2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: hoqnefqTBDZ3d8N5D2DY255uPsKaeCaSqbi/2hdpLRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:1d:40:44:39:37:42:a1:a8:4a:06:87:46:56:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aae19678aa37525512229a94e7890147183273c
Validity
Not Before: Aug 11 05:01:17 2025 GMT
Not After : Aug 12 05:01:17 2025 GMT
Subject: CN=848edf6cbe5b3f82823f2ebce92c43a666afd944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:f2:49:1e:d6:c9:29:6f:18:c7:5d:7a:94:
2c:25:60:69:c8:e8:00:f3:ff:87:b2:69:4c:46:de:
45:e5:3e:07:18:31:44:e5:16:22:1d:47:72:fd:8c:
12:55:79:b5:65:f7:bd:0f:54:0b:3a:8d:b4:ed:08:
7b:25:07:8d:17:b7:44:73:01:a1:1a:0e:b2:37:28:
5a:f2:a9:8b:9b:fa:e1:8d:5b:87:cf:da:ec:b1:7d:
d0:09:15:1a:17:43:22:bc:73:cd:5e:1d:2d:3b:5f:
47:0b:d2:fe:8e:d7:68:0b:27:10:f0:7a:4e:98:f5:
5a:31:72:a6:ba:8a:74:68:4d:29:af:1e:6e:34:66:
14:31:ac:34:eb:b3:2f:30:45:6f:8f:ef:fc:30:af:
3b:2e:1d:1c:97:24:66:15:13:4a:ea:65:00:12:bf:
b4:72:c7:ee:f1:88:80:6c:6a:4e:11:19:e0:a5:5f:
00:3f:b5:fb:9f:b7:db:bf:5c:a2:93:d1:22:d2:6d:
78:47:58:5f:25:20:1d:90:b5:5a:c3:d6:e6:ce:8f:
a8:26:19:c9:dc:33:63:3e:22:f8:37:33:e2:19:7e:
ed:5a:c3:34:78:87:ad:ce:cd:aa:b1:b6:94:14:0f:
e9:a8:36:29:41:df:93:90:00:97:c6:fb:14:ce:30:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8E:DF:6C:BE:5B:3F:82:82:3F:2E:BC:E9:2C:43:A6:66:AF:D9:44
X509v3 Authority Key Identifier:
keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ea:7d:21:07:f2:d9:93:fc:c5:5f:f7:74:44:13:c6:98:98:
d5:cb:8c:5c:56:13:6e:c6:17:19:96:3a:e9:d0:52:dc:9e:32:
38:c1:41:74:04:e7:5f:e2:f9:8b:a3:c9:a2:e9:51:e2:83:11:
95:73:b7:d7:e0:07:97:69:7a:fa:16:b6:f7:b5:db:b0:87:6b:
3d:9f:51:51:ef:40:45:3a:63:b7:26:cb:a4:11:d0:b0:33:bf:
6e:17:af:88:a9:f9:68:2d:b9:21:7a:44:32:ae:bf:fc:ca:7b:
93:94:1d:dc:37:26:ac:b4:a4:3f:7a:6b:6d:3e:4d:2e:a9:de:
39:97:97:f8:eb:e4:c0:4e:78:90:9c:7b:42:74:80:59:a4:dd:
00:97:20:34:de:e1:a8:28:6c:57:9b:88:3f:e7:e2:40:19:43:
5d:9c:a2:1f:bb:92:ff:28:c7:d1:44:14:f3:4b:00:19:1f:b5:
64:32:d3:e6:d8:7b:53:04:75:8a:59:75:5a:2f:a6:3e:ab:91:
be:0e:49:05:98:73:dc:b7:94:8b:d1:87:85:61:13:5e:c8:da:
a2:fe:57:fd:f1:97:43:3d:e2:75:ad:67:fe:86:7a:74:e7:6c:
1e:59:48:d7:40:20:44:d3:23:af:57:62:0a:3a:7b:12:c3:e8:
d1:b9:53:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:09:20 2025 by rpki-client