Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File: W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier: 0P05MbRFDqIyOZH2cCpAc7ZOqgECgMQgHzYiUWravBc=
Subject key identifier: D4:B9:BA:6F:B5:39:CA:F8:D9:F6:D0:85:14:DD:78:30:11:C0:7A:97
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 019889214923A646EA6D7D1A32485C331D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 10:01:56 +0000
Manifest this update: Fri 08 Aug 2025 10:01:56 +0000
Manifest next update: Sat 09 Aug 2025 10:01:56 +0000
Files and hashes: 1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: i9vzcCh7TTcgSqhYvJ+Nf3QqZdxYGGYaG3O6Bqadimc=)
2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=)
3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:49:23:a6:46:ea:6d:7d:1a:32:48:5c:33:1d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Aug 8 10:01:56 2025 GMT
Not After : Aug 9 10:01:56 2025 GMT
Subject: CN=d4b9ba6fb539caf8d9f6d08514dd783011c07a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:86:df:74:1d:c0:5a:2e:41:03:76:bb:d6:
e2:f9:7e:bc:de:f9:bc:79:41:02:21:b0:57:71:ba:
b6:fc:ae:a4:97:d8:8f:77:6c:5c:e7:99:14:ec:ae:
3b:ab:8a:d1:69:a6:dc:85:43:cb:e6:9c:aa:64:e5:
2c:79:76:b0:ed:7d:1a:9c:02:35:65:c7:1f:cc:a8:
84:cc:02:e8:32:ab:56:d8:fc:2d:6d:04:97:d9:f8:
42:ad:9b:d9:10:e1:0c:68:e8:3d:9c:36:65:aa:36:
37:16:40:03:87:7d:64:c9:24:6d:54:c4:a5:71:12:
77:be:4f:56:80:ca:62:43:b0:fd:4c:c1:be:0a:af:
86:2f:d0:1f:e0:f1:9f:b2:f6:14:2d:7e:fd:9f:34:
9a:6f:b6:28:1e:ab:13:e9:b0:6a:19:f6:22:b2:ae:
62:a6:a5:81:8d:1a:93:fc:a2:1e:e6:f3:bb:02:b6:
0a:47:3c:dc:aa:06:2d:c4:1c:4f:32:70:52:7d:ec:
52:96:1b:cb:32:1d:ca:da:91:61:16:9c:5e:a4:fb:
ed:84:e0:ae:5c:ce:1b:c5:e0:67:9b:fd:c6:24:41:
5c:48:23:50:c5:3e:25:51:fb:d9:88:13:3c:23:63:
17:c0:c1:d6:8a:df:5d:b3:af:33:13:07:5f:b3:e2:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B9:BA:6F:B5:39:CA:F8:D9:F6:D0:85:14:DD:78:30:11:C0:7A:97
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2e:cb:a0:a1:c2:55:e1:1d:66:63:36:5a:6d:35:61:36:a9:
29:56:ee:11:1f:4c:2d:e5:f4:33:98:e6:b7:a9:23:2e:ba:89:
ee:2b:0b:7c:2f:ba:d8:29:f7:e9:5c:79:c0:91:b1:78:10:cb:
7e:e5:19:e4:c7:0d:bf:3c:cf:28:b3:f3:6d:1a:05:06:7d:a2:
ce:15:29:fd:4f:53:3c:e2:0b:96:ea:26:68:09:5e:85:62:39:
82:4b:47:cf:50:6c:b7:0c:e3:4d:ad:d4:2e:bd:c1:b2:6c:66:
0b:3e:2a:70:dd:66:05:f4:42:1f:81:11:5d:dd:e4:de:68:fe:
07:2a:87:bf:7d:1e:53:c4:c6:20:18:7e:02:26:ba:1d:97:af:
94:1b:cd:e6:92:0e:bb:8d:b6:a9:d3:db:23:98:f6:54:aa:6c:
de:c4:81:4c:c1:0b:38:2a:3f:40:11:b5:19:84:50:ac:55:36:
8d:5f:2b:8f:bc:ba:52:1a:f1:e4:06:1c:fe:c3:15:1f:e7:36:
ea:c3:52:de:9e:11:c8:5e:da:4e:9e:c6:6a:8f:e2:bf:97:f5:
3f:d0:99:4b:c3:45:f5:c2:64:b1:ce:03:3e:8c:f1:de:88:71:
a8:0c:d1:35:a7:23:2f:91:12:d6:fa:20:d8:33:03:80:3e:91:
83:ce:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:07:57 2025 by rpki-client