Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
File: W0lMbhb0nQi-dhyowOqnEihy-oI.mft (raw, json)
Hash identifier: CM6FK0BQmxfiC/OV4yjteJJ0ijPYUE8Gl/AFJych4ME=
Subject key identifier: 5A:25:75:6A:A3:D4:BE:3E:CF:45:17:51:09:B5:C2:D1:8D:74:38:6C
Authority key identifier: 5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
Certificate issuer: /CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Certificate serial: 01987D1CADE43B650EC47A011B70B45CFD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:01:28 +0000
Manifest this update: Wed 06 Aug 2025 02:01:28 +0000
Manifest next update: Thu 07 Aug 2025 02:01:28 +0000
Files and hashes: 1: 3K3BWWtJTikdCXD1GiHEAWkWrNM.roa (hash: 8sWSqC8Ih92DS5DdfTRJP5hCXAztrqlMm3kUKR0XOZc=)
2: TJ2hwoBGgOzkeWhqHN6Mxx7QhtA.roa (hash: 3R7yJP25UZbo9ce0Ffrs5KJBp9yypSbTdrsjbTzVD5w=)
3: W0lMbhb0nQi-dhyowOqnEihy-oI.crl (hash: V8tw5omhc1vPkI7xOHZJXxd/BKbWhwQ45PmRPDlmNIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:ad:e4:3b:65:0e:c4:7a:01:1b:70:b4:5c:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b494c6e16f49d08be761ca8c0eaa7122872fa82
Validity
Not Before: Aug 6 02:01:28 2025 GMT
Not After : Aug 7 02:01:28 2025 GMT
Subject: CN=5a25756aa3d4be3ecf45175109b5c2d18d74386c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:e2:ef:b8:6f:3b:cc:78:c9:d6:8c:2f:c8:
fb:af:1f:64:23:c8:6b:f2:73:ec:b8:58:6a:73:12:
9c:29:4f:88:57:77:70:93:15:e2:14:c6:87:b6:56:
c6:36:49:a9:46:21:0f:ce:5f:c1:4e:95:de:82:4b:
49:89:6d:19:1f:7a:6d:44:6c:29:06:23:44:e3:82:
ca:49:10:0e:18:7d:b5:42:28:a4:d1:5f:9e:53:50:
00:53:22:e4:89:82:cf:c0:30:0d:25:97:5b:eb:a4:
59:1c:b2:5d:33:6a:fb:68:30:93:ad:14:5f:d8:13:
84:d3:01:ac:96:a8:32:61:64:bd:73:da:35:cb:40:
31:cd:dd:18:67:f2:c8:72:7a:62:f8:40:45:9e:21:
a2:91:b3:b5:23:fd:97:12:00:f4:86:17:8e:21:58:
57:28:c1:86:52:dd:13:1e:bb:55:85:97:8c:fb:9f:
ec:54:79:4d:ef:76:35:06:92:6a:c5:1c:aa:5a:4c:
13:d6:8e:e5:8c:47:1b:91:08:e2:28:ab:43:30:db:
e2:2b:97:41:19:df:46:a4:80:26:88:c6:b8:6a:c4:
75:7b:76:a2:5a:9f:35:50:4d:f1:5c:87:27:15:34:
4e:99:60:6f:82:4b:de:bb:01:8c:b2:56:3c:68:ef:
f3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:25:75:6A:A3:D4:BE:3E:CF:45:17:51:09:B5:C2:D1:8D:74:38:6C
X509v3 Authority Key Identifier:
keyid:5B:49:4C:6E:16:F4:9D:08:BE:76:1C:A8:C0:EA:A7:12:28:72:FA:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0lMbhb0nQi-dhyowOqnEihy-oI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/92bcf4-d0f2-4f9e-874d-c2c6f6a4097f/1/W0lMbhb0nQi-dhyowOqnEihy-oI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2b:1f:b2:55:90:68:9e:c5:3f:ac:ea:fb:ed:54:0e:a9:3e:
5c:f4:01:34:60:7e:d4:4c:39:32:44:40:f0:64:22:d0:bd:e4:
36:f7:6a:4a:e7:06:45:f6:d8:1d:89:ea:14:5f:4c:ec:36:4a:
de:c7:de:a8:d7:96:65:75:56:16:35:6a:92:bc:d4:ec:5d:3d:
b0:69:9f:15:af:a7:e4:be:95:b8:bb:d5:36:68:35:45:05:53:
c6:74:36:93:ad:e8:9c:d1:7a:fd:5d:e0:d2:3a:0a:eb:9f:35:
42:da:99:2f:21:e5:68:37:e2:4a:e1:77:e8:e9:af:37:02:e4:
6d:6e:e0:53:92:e8:ac:3f:20:88:30:a4:21:76:59:cd:b6:4a:
6e:12:75:3c:d5:9f:a0:bc:c2:31:8b:c9:a1:ec:4f:42:c3:21:
2e:df:6b:b9:0b:ea:05:6f:13:50:e0:d0:cf:43:94:0d:ab:c4:
1d:52:a1:df:c5:cb:5c:a9:2f:bd:0b:e1:fa:2b:7c:d3:cf:3c:
54:ac:3e:da:d6:a3:9e:3d:2d:2e:8e:f4:f2:50:58:a1:5a:43:
8f:a0:d4:f7:02:81:b7:90:f7:da:09:45:3e:b7:51:d3:0b:56:
83:71:6a:ef:df:f6:2f:07:ae:ac:44:c5:c7:e2:09:a4:b1:fe:
27:90:94:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:31 2025 by rpki-client