Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
File: W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json)
Hash identifier: 6w0ARA21P/+PM/bvCXbcvrJQZoLkCKLOwBPX30H8ZTA=
Subject key identifier: 9E:0F:B4:7A:EA:7C:2A:D9:CE:28:76:03:66:CA:0F:71:64:7C:68:53
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 01984965C7515442937C5354B0B6486CBEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 01:01:03 +0000
Manifest this update: Sun 27 Jul 2025 01:01:03 +0000
Manifest next update: Mon 28 Jul 2025 01:01:03 +0000
Files and hashes: 1: RErNlaOpDzrD6wSfbbH1rz1M530.roa (hash: wgBHw0Ti6lWp1Z64AKciY1+PcChXXuuN8WEU42REeQ4=)
2: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: x/AlTRDvC9xtrxs/OUYvumf8yYEeGPYxotSzwugHijg=)
3: b3SLe6B8RMqbliWDKav99vFdTek.roa (hash: iCQ5veiisd5iDOsW30aYP2ZsuL0olskVYr7vQwj4J8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:c7:51:54:42:93:7c:53:54:b0:b6:48:6c:be:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Jul 27 01:01:03 2025 GMT
Not After : Jul 28 01:01:03 2025 GMT
Subject: CN=9e0fb47aea7c2ad9ce28760366ca0f71647c6853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d0:f6:9f:18:24:4b:ad:d5:32:79:5f:9a:7a:
1d:26:b8:f1:d5:a8:d5:df:2d:52:2e:65:b5:e1:9b:
8f:8b:66:c4:1d:54:3e:1a:a4:07:b2:1e:7f:7a:6e:
70:00:76:45:b5:24:10:73:79:9e:97:9e:37:00:38:
65:bb:66:b4:d8:8d:d6:ca:e9:df:50:e9:52:4c:ad:
3e:75:b7:35:64:de:e6:56:29:bc:22:89:0b:99:c8:
fe:d6:63:25:c0:a9:df:b5:81:64:9c:de:8e:cf:e7:
9f:23:17:03:2b:10:45:c8:58:69:80:a5:54:8e:a1:
6e:68:26:00:73:c5:a7:84:7e:32:37:7b:c0:7f:9f:
e4:ca:0b:9c:9e:57:e0:e2:10:45:69:76:17:2f:2a:
e9:a7:28:d8:ad:c7:8d:d3:0a:29:6f:aa:ce:57:b5:
99:ef:46:3f:4d:47:f2:ed:ba:4d:dd:3a:96:f0:6c:
81:45:49:29:87:41:e3:0c:2a:0c:2d:48:e7:81:36:
4d:00:5e:67:7b:62:12:78:8d:05:86:88:75:d4:4f:
19:94:93:2d:5c:0c:4e:88:d3:90:04:35:4d:f8:d1:
a2:f2:14:d8:58:01:0f:fa:90:9b:40:44:8a:6d:f0:
fd:d4:38:c5:83:47:af:55:09:32:a4:42:5b:80:e8:
87:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0F:B4:7A:EA:7C:2A:D9:CE:28:76:03:66:CA:0F:71:64:7C:68:53
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:65:b0:7f:14:f0:84:97:7c:52:11:b7:46:fe:21:a0:3d:d1:
40:44:4d:dd:57:ea:f1:e4:e9:36:ba:b8:e4:12:9d:b8:a1:1d:
46:50:ba:f6:67:77:8f:92:62:bc:e3:f9:ee:fa:fe:49:70:38:
d5:7f:9d:19:68:a4:3d:64:c4:6d:72:c0:9d:33:4e:3b:e3:2a:
b7:40:1d:96:ea:3d:b8:d4:88:3b:9d:0b:8d:0d:42:7a:d6:5a:
91:a9:65:60:bc:75:bb:9d:6c:60:01:ec:41:9e:e6:ae:47:d8:
b9:43:db:f6:a7:f0:b3:a4:da:43:07:c9:fd:aa:32:c2:dc:e0:
08:04:95:4b:89:88:52:8e:ee:91:32:80:0c:9d:c7:18:91:ca:
2e:fc:b2:05:fa:7c:99:22:e9:68:25:47:d8:b3:d9:19:50:5d:
92:da:f0:fc:ee:c0:01:40:2b:b3:e7:17:4e:ef:b2:fd:36:5c:
af:64:7d:10:e7:df:c8:3c:8e:90:2b:4c:c2:27:ec:a8:50:1c:
2e:36:c8:0d:59:64:c5:98:65:c7:03:66:47:9b:a9:6a:77:47:
bc:88:f9:e0:81:f3:8b:37:93:05:57:91:da:a4:07:9a:69:e1:
07:00:13:af:f3:24:5d:7a:4f:11:09:92:0c:cc:e7:19:21:b3:
96:ea:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:47:29 2025 by rpki-client