Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: HJPnMUebp/GZIPLLdJAWKQHotabpTFpjrEFrGoI57n8=
Subject key identifier: 2D:1F:A8:77:5B:48:E3:61:83:F2:E9:53:FC:2F:C8:13:8B:1B:14:B3
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019849666ABCA34CD25F58E3E88CD7D6A75F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 1500
Signing time: Sun 27 Jul 2025 01:01:45 +0000
Manifest this update: Sun 27 Jul 2025 01:01:45 +0000
Manifest next update: Mon 28 Jul 2025 01:01:45 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: dcr9C3mEMt8fSDs+Bv+31QJAg5hm1Cw5Dd9M4mudyio=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:6a:bc:a3:4c:d2:5f:58:e3:e8:8c:d7:d6:a7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Jul 27 01:01:45 2025 GMT
Not After : Jul 28 01:01:45 2025 GMT
Subject: CN=2d1fa8775b48e36183f2e953fc2fc8138b1b14b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:02:39:73:cb:8a:be:16:c7:34:29:e6:5c:
02:ff:19:47:26:8d:e5:74:ad:32:f8:63:bc:47:33:
c5:1d:6b:4a:cf:96:0b:83:4f:ac:b8:3e:16:89:5c:
9c:c9:53:06:86:b7:6a:ca:35:9c:67:15:0f:e7:45:
f0:42:c5:d9:2c:39:79:44:9f:7f:cb:20:19:3d:ac:
88:5b:4f:aa:ff:19:e9:8e:ab:1d:3d:b6:d7:e3:b3:
be:a3:71:bc:af:92:7c:e5:7e:a3:b7:ec:1c:8a:86:
e2:64:ce:0a:47:31:1a:ec:78:97:cd:a1:ba:c5:e0:
54:59:6f:62:86:28:69:8b:0e:0c:a6:08:6b:92:ec:
15:1e:b4:35:f5:19:d5:12:c2:a1:49:01:4f:0e:67:
3d:ed:33:73:42:1c:3e:2c:43:71:fb:a5:c0:97:74:
20:be:56:c6:da:90:16:60:a2:a3:6e:db:e5:43:57:
de:7e:bb:b9:cc:65:92:1f:46:8b:2e:9d:ed:6e:63:
92:e1:b7:c3:e4:05:70:26:3a:93:c8:77:c1:4d:a0:
8f:df:eb:3b:4f:ed:d0:87:6a:a5:0e:84:b6:a2:cb:
f4:7d:1c:40:bf:c4:9c:b2:00:0d:06:58:4e:c9:af:
7d:92:9e:64:d1:44:ec:72:94:09:16:6d:23:da:fc:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1F:A8:77:5B:48:E3:61:83:F2:E9:53:FC:2F:C8:13:8B:1B:14:B3
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6d:7f:d4:3c:bc:67:fe:c2:34:47:3b:50:ca:bd:42:4e:01:
9c:76:35:bc:92:45:5d:61:d7:d9:4d:68:b6:cd:2b:63:b6:c9:
80:a9:5f:06:63:8f:b3:84:4f:8b:6c:c8:64:c1:e3:c5:96:2c:
5f:45:d5:1f:42:5a:e8:0c:1a:9d:b9:7f:31:2a:2f:a3:dc:d2:
50:bb:ab:e8:42:86:ce:eb:16:f9:31:05:c3:bc:fd:a8:7b:54:
dd:38:83:14:b5:8b:d7:06:55:86:6b:90:73:9c:98:1d:9f:b0:
05:ef:0f:f9:e3:68:30:ff:5a:70:f0:de:1c:4d:d3:27:46:da:
14:38:b7:34:24:15:19:47:ab:ca:6e:80:1f:67:76:5c:73:7d:
2d:03:71:8d:f5:77:fe:ab:6f:b2:97:24:d2:b5:d4:99:d6:5f:
7e:0f:d8:f1:b8:29:cc:ff:1b:ad:bc:72:ef:ae:ad:a5:a1:97:
30:3d:c4:90:3e:3f:31:8c:40:ac:b4:80:09:da:0f:2d:ec:e3:
65:36:82:0c:0c:a2:28:40:f3:19:a1:1f:cf:7e:c2:b8:3e:8d:
9a:61:31:51:2d:f0:f2:11:76:4c:83:7d:fc:06:1f:be:e4:fa:
f0:08:56:98:4a:2a:97:a5:aa:e5:65:25:0a:e6:ef:e6:18:0a:
5f:9d:20:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZmq8o0zSX1jj6IzX1qdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViN2E5MDVlMjVhNGQ1Y2NjYjJlZWJlNGUyZDVjMzkyMDgx
OTc1OGUwHhcNMjUwNzI3MDEwMTQ1WhcNMjUwNzI4MDEwMTQ1WjAzMTEwLwYDVQQD
EygyZDFmYTg3NzViNDhlMzYxODNmMmU5NTNmYzJmYzgxMzhiMWIxNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBkCOXPLir4WxzQp5lwC/xlHJo3l
dK0y+GO8RzPFHWtKz5YLg0+suD4WiVycyVMGhrdqyjWcZxUP50XwQsXZLDl5RJ9/
yyAZPayIW0+q/xnpjqsdPbbX47O+o3G8r5J85X6jt+wciobiZM4KRzEa7HiXzaG6
xeBUWW9ihihpiw4MpghrkuwVHrQ19RnVEsKhSQFPDmc97TNzQhw+LENx+6XAl3Qg
vlbG2pAWYKKjbtvlQ1fefru5zGWSH0aLLp3tbmOS4bfD5AVwJjqTyHfBTaCP3+s7
T+3Qh2qlDoS2osv0fRxAv8ScsgANBlhOya99kp5k0UTscpQJFm0j2vwSFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0fqHdbSONhg/LpU/wvyBOLGxSzMB8GA1UdIwQY
MBaAFFt6kF4lpNXMyy7r5OLVw5IIGXWOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMTIzOTUtYzBmOC00ZTA1LThjYjEt
NzNhM2QwN2QyYzMxLzEvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jMTIzOTUtYzBmOC00ZTA1LThjYjEtNzNhM2QwN2QyYzMx
LzEvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWG1/1Dy8
Z/7CNEc7UMq9Qk4BnHY1vJJFXWHX2U1ots0rY7bJgKlfBmOPs4RPi2zIZMHjxZYs
X0XVH0Ja6Awanbl/MSovo9zSULur6EKGzusW+TEFw7z9qHtU3TiDFLWL1wZVhmuQ
c5yYHZ+wBe8P+eNoMP9acPDeHE3TJ0baFDi3NCQVGUerym6AH2d2XHN9LQNxjfV3
/qtvspck0rXUmdZffg/Y8bgpzP8brbxy766tpaGXMD3EkD4/MYxArLSACdoPLezj
ZTaCDAyiKEDzGaEfz37CuD6NmmExUS3w8hF2TIN9/AYfvuT68AhWmEoql6Wq5WUl
Cubv5hgKX50gRQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:54 2025 by rpki-client