Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
File: W7HFcFXCnWafKJqfaPOSgjlCEyo.mft (raw, json)
Hash identifier: 2W7P4zboErbNSwTiiChaPstqbVIgn6MuowYjuTgngUM=
Subject key identifier: 42:1C:EF:86:EC:C8:26:F4:58:39:5F:5C:B5:E9:03:41:FE:84:7D:1A
Authority key identifier: 5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
Certificate issuer: /CN=5bb1c57055c29d669f289a9f68f392823942132a
Certificate serial: 01988732BAABCAC56DFAA3412F070D1F6F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
Manifest number: 122E
Signing time: Fri 08 Aug 2025 01:01:45 +0000
Manifest this update: Fri 08 Aug 2025 01:01:45 +0000
Manifest next update: Sat 09 Aug 2025 01:01:45 +0000
Files and hashes: 1: W7HFcFXCnWafKJqfaPOSgjlCEyo.crl (hash: 6lrZWKJKli7IAYpkKwHXMomJXjRMKgCwt1uOKMc918w=)
2: oLD0eFUFYxck4v3i6OymPCRtKqc.roa (hash: d9IQhkXi9el+adqbpk+yqo7QWqWaJxfrg/LT1tEGEMY=)
3: uB1fsTN5xt9prk3FmqA_vfOk3V8.roa (hash: Xbk+Y99PsH3Ea8NbCtaJ5KS35ZMdZP+5pz4Y3JKvU0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:ba:ab:ca:c5:6d:fa:a3:41:2f:07:0d:1f:6f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb1c57055c29d669f289a9f68f392823942132a
Validity
Not Before: Aug 8 01:01:45 2025 GMT
Not After : Aug 9 01:01:45 2025 GMT
Subject: CN=421cef86ecc826f458395f5cb5e90341fe847d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f4:a7:d5:57:f4:54:8f:05:73:6e:27:2e:8a:
9e:01:12:1a:12:d9:01:52:c8:be:dd:64:0a:1e:aa:
3d:4f:bb:51:fe:8a:72:d9:6d:c8:b3:ea:66:48:26:
e4:37:95:79:ef:b6:02:55:98:6c:01:33:c3:3b:6f:
92:99:79:3b:e3:5f:ec:eb:40:84:68:07:59:85:7f:
af:21:bc:83:22:56:99:ea:02:15:fb:cb:63:bd:7e:
1e:68:66:de:f6:46:0f:69:99:04:c7:00:6a:3f:8a:
2b:23:4b:c6:e0:e6:40:6f:d5:48:38:2f:2b:51:24:
f0:a8:ff:94:40:8c:ac:00:12:25:e4:90:0c:59:db:
fe:c4:b4:5b:33:c4:a3:c7:c4:2b:1f:ca:28:90:78:
4a:53:98:b6:c3:19:13:0a:39:47:66:a2:95:e2:07:
14:69:4c:12:54:02:22:9b:d0:72:78:22:67:cc:ae:
1e:b1:c0:1c:93:5a:f2:5d:cd:2b:ee:e7:11:fe:38:
33:c3:76:67:e7:fb:3d:fb:a1:c7:b2:92:39:87:d5:
d7:31:19:a4:b5:e1:39:c4:81:25:d4:6b:13:58:ce:
5c:41:c0:57:e6:be:57:a1:92:82:c8:3d:86:32:c4:
20:3d:da:2b:3f:7f:46:c1:0b:a8:d0:b5:dd:7f:d4:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1C:EF:86:EC:C8:26:F4:58:39:5F:5C:B5:E9:03:41:FE:84:7D:1A
X509v3 Authority Key Identifier:
keyid:5B:B1:C5:70:55:C2:9D:66:9F:28:9A:9F:68:F3:92:82:39:42:13:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7HFcFXCnWafKJqfaPOSgjlCEyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/822376-808a-465c-a87f-5ceae19f94f9/1/W7HFcFXCnWafKJqfaPOSgjlCEyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ec:0c:f4:84:da:e6:b9:a5:9a:82:7f:d5:7c:a4:24:ee:b0:
91:87:9c:06:61:11:3a:0c:29:d6:4f:9a:70:e7:de:d4:33:ba:
09:20:0c:00:60:41:38:86:4c:72:f1:cf:5a:58:3e:8a:64:d0:
4a:46:12:8c:97:9f:10:62:54:5b:63:a4:77:19:7e:ab:fb:29:
c7:7c:3f:bc:23:38:9a:51:40:76:bf:f6:ef:fe:ee:33:40:e5:
fa:84:4f:ab:02:06:25:1a:d2:6f:f0:72:67:0f:a8:cb:a2:8f:
31:07:80:c5:f9:d8:33:3d:1a:a1:56:f2:a5:c8:9a:cb:df:df:
68:76:46:56:21:55:e2:29:d2:44:41:c6:9e:d3:47:f3:99:24:
94:af:43:be:44:b7:0c:07:31:2d:56:ea:92:db:10:71:1d:d7:
06:a6:0d:34:3b:88:93:7b:e5:8d:b2:3c:fb:82:cd:61:36:39:
01:73:2b:a9:15:26:1c:84:43:a1:03:d3:9c:7d:be:f9:06:30:
4f:ca:39:c1:46:d8:eb:34:2d:9e:59:4f:c6:b2:09:2f:0c:90:
c5:85:73:86:3e:5e:c7:16:bf:15:b6:ea:cf:0a:f0:91:d8:d0:
e6:a5:86:47:d7:57:ca:e3:b3:7d:a7:7c:29:bf:45:4b:07:56:
46:59:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:09:59 2025 by rpki-client