Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: 3MemMyLIRL4sU/vAMNPfpFBrqhTaenZJrUrZ5KfCzUk=
Subject key identifier: 31:43:07:28:E4:87:B0:FE:97:9D:9D:78:8C:40:55:AC:37:4E:DB:66
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 01984BC1223AC16054C44E87762F2F12B2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 12:00:04 +0000
Manifest this update: Sun 27 Jul 2025 12:00:04 +0000
Manifest next update: Mon 28 Jul 2025 12:00:04 +0000
Files and hashes: 1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: hcOEgA/H3z6zXfIxCxdt6C3bdLMDDspwLfleAhuXWzo=)
3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:22:3a:c1:60:54:c4:4e:87:76:2f:2f:12:b2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Jul 27 12:00:04 2025 GMT
Not After : Jul 28 12:00:04 2025 GMT
Subject: CN=31430728e487b0fe979d9d788c4055ac374edb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f4:2f:ee:53:49:7f:c7:92:d7:79:4a:8c:34:
b9:b3:06:27:11:1b:11:79:d7:b5:bc:18:cb:20:69:
79:6d:82:ea:42:db:09:fe:39:9e:2c:39:e4:4e:ea:
9d:1c:15:90:7d:da:98:66:1c:9a:66:b8:9b:f3:17:
c8:7d:8c:55:30:07:00:c0:db:9a:eb:0f:f7:c3:81:
c9:0c:d4:45:39:b8:90:bd:b8:22:45:88:a1:7d:b3:
9a:03:4c:01:e9:0e:d9:0d:2a:72:ad:5f:f9:c7:1f:
6e:20:a8:7d:7a:af:ee:93:9a:4f:df:f9:08:24:f6:
5f:b6:78:8e:52:32:b9:bf:1c:91:6c:29:4c:86:87:
a2:f2:25:41:4d:76:4c:68:98:cb:73:97:52:a5:1c:
a6:6f:04:da:96:9d:10:f8:69:99:db:3d:d0:87:4d:
e9:8e:94:46:74:d3:99:e2:d7:3e:02:9a:e5:57:af:
b4:2d:19:61:aa:33:5e:9e:c6:e6:ed:ad:e7:22:0e:
15:d0:57:b4:15:68:11:a3:d2:56:df:c5:28:cb:73:
6e:13:b2:51:48:cc:3c:dd:3f:02:58:90:38:81:bd:
ea:04:88:b1:ae:b7:ff:b4:29:d7:5e:66:b9:aa:d4:
2b:b0:89:fe:31:57:21:bf:d6:b8:48:c1:45:ee:88:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:43:07:28:E4:87:B0:FE:97:9D:9D:78:8C:40:55:AC:37:4E:DB:66
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a9:64:84:e2:ab:38:72:17:08:86:b5:ba:2b:77:2f:6d:30:
74:b8:67:c0:f6:85:d7:93:7a:8d:93:7c:49:cf:44:f9:e7:53:
fe:41:49:f2:c7:d6:5d:59:8a:c0:51:d5:f1:28:75:00:88:79:
ae:6b:d3:11:0c:53:73:ee:5f:a2:f2:be:9e:d8:5e:f4:fd:35:
ea:f8:c7:7b:0b:52:3b:48:12:eb:bf:89:08:13:31:c2:cd:1b:
5f:bf:8c:29:95:69:e2:39:a9:d7:1c:bf:00:79:d9:87:ab:d0:
39:d3:15:82:87:02:e3:4f:30:c4:7c:5d:0e:de:cb:c3:38:a4:
7e:f9:67:f6:0c:55:5c:01:79:26:4a:a7:e6:b2:30:b4:4b:47:
98:db:51:2a:a4:10:02:7e:ca:48:1d:5f:87:63:71:2d:d1:00:
a0:2f:b4:61:e5:ee:06:91:26:54:9b:bf:9f:f8:8c:98:73:7f:
f5:e9:99:62:72:34:ce:28:fa:59:ac:a5:47:fd:b0:61:7a:b4:
8b:ec:f2:ba:69:9d:cc:37:2c:98:44:83:73:e3:7f:83:a5:79:
23:71:bc:88:70:78:a7:12:12:c0:77:33:8b:23:a4:38:03:52:
55:cd:b0:82:75:34:42:3d:bf:d1:6f:a9:82:ca:3b:e8:cf:f3:
ed:98:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:05:13 2025 by rpki-client