Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: QBTQ3EafT+rfgR5MyLFDIMGaE4DpGu7W/ZjV1Rv6/xU=
Subject key identifier: 31:B9:70:90:4D:80:DC:30:6E:1A:62:39:6E:DC:C5:FC:5C:0D:BA:D9
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019873E26BA38A90A1ACBD7ECB129402D510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 1516
Signing time: Mon 04 Aug 2025 07:01:15 +0000
Manifest this update: Mon 04 Aug 2025 07:01:15 +0000
Manifest next update: Tue 05 Aug 2025 07:01:15 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: 43rFQzV9wfNr6/FY6MSHo9CWirGmsdqxfe4GiMM6Pws=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:6b:a3:8a:90:a1:ac:bd:7e:cb:12:94:02:d5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Aug 4 07:01:15 2025 GMT
Not After : Aug 5 07:01:15 2025 GMT
Subject: CN=31b970904d80dc306e1a62396edcc5fc5c0dbad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:09:99:5d:03:6f:77:4b:02:6b:0f:d9:92:
c2:ab:fe:ac:e0:d6:a1:65:15:5d:91:81:53:ab:ea:
2c:38:86:72:da:a8:6e:9a:ca:cd:3e:c3:4a:b9:78:
5e:43:5b:d5:31:c8:2b:bb:75:95:2e:dc:8d:0e:3a:
4c:c4:6c:f2:3f:d3:c3:38:ed:22:27:16:ae:c6:6d:
0b:4e:e3:0c:f6:3d:dc:0c:6d:3f:39:f1:21:f4:55:
32:24:ae:d6:43:27:4c:da:3e:78:e9:72:99:ba:5c:
e3:0e:23:f6:38:98:15:fd:85:30:0c:09:25:15:28:
6d:31:c6:71:e3:a6:67:0f:e6:b3:dc:cd:38:44:b6:
7d:59:5a:ac:26:0d:77:e2:7e:1a:fc:4b:4c:3d:0f:
60:fb:06:8e:b6:7c:39:97:0b:b9:bb:74:84:a1:8d:
64:81:49:c1:b3:aa:79:d8:f6:66:96:26:cb:b4:23:
eb:06:0c:38:33:f8:4a:02:b4:87:16:b5:25:97:c0:
b3:01:fa:33:d9:0d:cd:90:ce:93:e9:69:43:1f:b8:
b3:2a:04:3f:fc:1f:1e:c6:ff:85:9e:1e:ab:73:d7:
9a:32:f0:af:14:15:31:9e:ae:a4:d2:7f:29:30:35:
78:64:18:da:4f:b3:35:19:03:07:2e:4d:5e:8d:ae:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B9:70:90:4D:80:DC:30:6E:1A:62:39:6E:DC:C5:FC:5C:0D:BA:D9
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5d:87:ab:7a:04:69:8c:14:09:7d:13:e8:50:8a:a9:b2:7b:
64:21:b3:03:c6:2e:9a:49:61:e3:59:3b:e3:88:e4:58:70:03:
94:12:9e:75:b2:18:b8:25:b5:fb:9c:c3:12:b1:24:be:da:6c:
d8:02:56:82:7d:87:a8:f4:c5:12:68:21:8a:34:a3:0c:d0:91:
d1:3f:5f:53:9f:48:88:1f:06:a7:a4:54:a1:f0:a9:39:93:38:
25:ea:1e:98:fd:50:41:26:b3:f4:31:c7:1a:3f:0c:54:c2:8d:
30:13:ae:be:80:15:11:1f:49:b0:15:80:51:08:d5:57:e4:69:
1a:d3:01:27:2c:c0:f7:74:b5:7e:a3:26:6b:68:2e:5f:48:9f:
8b:5f:b9:7d:c4:83:2a:7f:24:37:f8:20:f3:90:2a:31:d4:08:
36:59:c3:27:54:77:b9:00:59:31:40:44:b5:5f:fa:1e:53:40:
0b:3b:f4:32:87:47:3a:e6:53:c2:0c:69:a8:2f:9a:8e:72:e2:
d2:e3:9f:5d:c6:c2:a2:03:d3:64:dc:74:3e:4e:bf:1c:5f:d9:
21:05:fa:47:6f:79:3a:c9:ec:45:26:a3:70:2a:cb:c6:ff:ee:
06:32:58:2d:8e:78:ad:e6:bb:fb:6c:45:63:5d:a5:43:8b:bf:
04:b9:c2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:26 2025 by rpki-client