Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: KM9PHDHa0TqJZaOR7pJV/wKbRdsRATWEDz7OlZWWPcY=
Subject key identifier: A9:65:E1:04:63:26:36:A0:E9:1F:08:2F:6F:57:68:16:C7:CE:EA:BF
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 01976D06D013682C1951E95C09E47EC2CE58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 148E
Signing time: Sat 14 Jun 2025 06:00:52 +0000
Manifest this update: Sat 14 Jun 2025 06:00:52 +0000
Manifest next update: Sun 15 Jun 2025 06:00:52 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: vi8KYOvk2ajmQu2iZf34QjUFhB31yLwkeM4bbFfsZZY=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:d0:13:68:2c:19:51:e9:5c:09:e4:7e:c2:ce:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Jun 14 06:00:52 2025 GMT
Not After : Jun 15 06:00:52 2025 GMT
Subject: CN=a965e104632636a0e91f082f6f576816c7ceeabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:27:bf:10:96:4d:d7:59:61:ee:77:2e:9a:
53:73:76:9e:c3:ae:ca:42:8f:36:9b:2c:6b:a8:81:
3c:47:3a:59:7c:23:77:f4:d5:c9:84:eb:d9:3c:8c:
f9:42:8f:40:bf:6a:f1:b8:f7:0a:97:1e:6e:a3:2e:
0c:81:bb:88:06:0f:a5:19:0c:fc:ff:6f:d9:16:62:
db:b7:a1:40:5b:79:a2:15:74:a7:4b:4c:f4:b6:6a:
e3:40:35:e6:a0:35:aa:78:82:54:40:66:25:b2:23:
82:8e:96:77:21:1d:ca:c5:3d:6d:1d:df:77:45:ad:
2b:a5:ab:17:53:79:65:2c:e5:80:b9:1b:53:3d:cf:
94:a4:35:b5:05:42:e2:bb:3f:4a:fe:cc:c8:3d:e6:
1f:b3:cc:dc:75:d4:c6:14:5a:4c:78:02:d3:da:ec:
7d:2d:90:63:62:b2:2b:d9:13:61:97:94:31:9a:dd:
73:b2:b2:a3:bd:0f:d0:41:95:cd:45:cf:b4:c8:14:
e6:d9:bf:03:56:70:0a:d3:d6:26:42:60:95:4e:b4:
23:22:6b:83:1d:cc:27:46:f6:af:6a:43:79:76:ab:
6a:eb:0e:9d:97:4d:06:ba:e5:7b:1c:fa:32:cc:10:
66:47:9b:bc:b5:1a:5a:e4:97:29:3f:e2:c4:4f:ad:
a8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:65:E1:04:63:26:36:A0:E9:1F:08:2F:6F:57:68:16:C7:CE:EA:BF
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:97:0d:47:2d:60:c8:41:42:e1:58:f3:1d:4a:91:22:c1:21:
56:fd:56:aa:a7:9e:13:c9:c2:86:68:b5:cf:09:3b:ce:c3:ee:
e6:10:59:c9:2e:50:6f:09:bc:88:25:1d:46:e4:97:ed:09:02:
f6:8c:90:93:33:5e:e5:cf:3a:e6:a4:c5:79:ad:03:b7:45:a6:
11:e4:77:17:cf:b5:97:8b:77:ed:8e:0e:89:ff:b2:4b:87:31:
c2:e5:77:96:78:24:8b:a6:96:55:9f:47:c7:91:72:7e:b4:cd:
b2:83:ea:bc:9b:4b:2d:c1:7f:27:ef:9a:dc:b8:64:43:50:77:
6e:69:f0:f8:2f:b5:58:9a:03:63:a7:83:f5:bf:80:4d:ed:94:
56:89:8f:46:3a:b6:03:86:83:19:97:78:b5:29:91:17:85:30:
ae:3a:f2:f7:5c:7a:41:b9:0a:a1:15:0c:ed:19:76:1b:5d:58:
c9:71:70:63:8b:c7:aa:40:5b:6b:32:48:98:f5:7b:de:0e:3b:
de:94:8e:58:76:80:6e:da:e7:d3:ca:3f:34:6f:38:43:ac:40:
e8:f6:e2:75:a7:00:36:fc:a8:a4:18:55:1d:af:bd:93:e3:9e:
d6:5c:32:5c:7a:5f:f9:07:c6:d8:df:07:a3:1b:8a:ae:91:88:
b9:40:6e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:24:19 2025 by rpki-client