Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
File: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft (raw, json)
Hash identifier: mZh3FerhxnTizDCsq1nA0Y3QvKRbn5izGCRiLw8cfYY=
Subject key identifier: 32:7C:53:06:39:B9:A2:C8:82:55:7D:C7:98:95:EC:41:57:B4:6C:47
Authority key identifier: 5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
Certificate issuer: /CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Certificate serial: 01984965EA6DD3B82243612AFF23180D68C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
Manifest number: 1592
Signing time: Sun 27 Jul 2025 01:01:12 +0000
Manifest this update: Sun 27 Jul 2025 01:01:12 +0000
Manifest next update: Mon 28 Jul 2025 01:01:12 +0000
Files and hashes: 1: W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl (hash: OFr5k2BpyLuty8IFIvkdRNf16tT2mX89RpwD6o/SrF8=)
2: cwNcFibEiknBhjZUsu5CDMCAHjU.roa (hash: uRGOj4tJKaLxVK1NmQ/cajMQwRP5s1agqok1B0mO3Is=)
3: ocfaSphrJL3xu-4-94X1BAg_eco.roa (hash: CMK1dG+CtJembHP9+sAk12iQiNKdSn83yhz9BkvkSQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:ea:6d:d3:b8:22:43:61:2a:ff:23:18:0d:68:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd6cbdaa794a97a7d8266702cb054f1b249d4bf
Validity
Not Before: Jul 27 01:01:12 2025 GMT
Not After : Jul 28 01:01:12 2025 GMT
Subject: CN=327c530639b9a2c882557dc79895ec4157b46c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:c6:20:ed:47:10:95:8d:3c:33:37:51:00:
f9:63:57:d7:54:ed:76:da:4a:fd:b2:f2:18:fe:52:
9a:74:ce:a5:60:5c:61:29:85:4c:8e:5b:79:ba:ee:
2b:5e:d8:8b:b7:cb:81:dd:4e:f8:9b:f5:45:95:f8:
d7:f4:fd:c2:18:00:2b:db:d8:48:59:a1:16:0b:f7:
b8:1e:fd:87:ed:79:db:ab:3b:b3:f9:98:13:e0:d0:
d3:b5:4b:5c:bb:e5:b3:16:fe:72:3c:7b:7b:dc:cf:
61:aa:5b:ae:67:ef:45:4c:19:75:f7:f7:1b:06:ac:
a6:e1:c5:90:5e:e6:81:22:3e:2d:3c:9b:81:98:04:
63:83:03:08:cc:ca:f1:fd:20:13:51:3a:cf:e4:92:
6d:d1:c5:37:ad:d4:9f:42:3d:49:83:3b:df:99:58:
51:ed:91:a0:2d:8e:48:19:03:39:11:ea:aa:3c:18:
31:f8:76:a9:f5:c8:0a:ba:d4:c5:35:15:7a:e2:d8:
64:9f:f9:7e:c5:73:45:67:05:17:fb:5e:1e:42:a4:
bb:ca:da:2f:0e:7a:bd:39:8a:59:0c:12:c0:26:f1:
3c:68:00:ac:4b:f2:8c:2c:bd:95:f5:2f:ce:10:66:
e4:2a:1a:ee:fe:44:fa:86:46:2a:5c:c1:f4:b8:52:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7C:53:06:39:B9:A2:C8:82:55:7D:C7:98:95:EC:41:57:B4:6C:47
X509v3 Authority Key Identifier:
keyid:5B:D6:CB:DA:A7:94:A9:7A:7D:82:66:70:2C:B0:54:F1:B2:49:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/c931fc-df1e-4bb1-9de9-d74a12959ad7/1/W9bL2qeUqXp9gmZwLLBU8bJJ1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:9b:e8:35:ae:61:67:e0:9b:36:ea:8b:61:3b:8e:5c:45:75:
91:19:b4:5d:28:b3:7d:6c:74:47:8a:9e:f0:14:03:33:ab:f3:
4c:b9:af:ef:e7:4d:48:20:31:f3:15:c1:43:53:75:eb:25:6c:
40:16:0c:78:df:f8:27:44:a1:6a:68:40:70:02:e4:af:d1:b7:
13:4b:65:85:3d:6c:56:82:44:12:75:90:dc:d5:90:e6:85:14:
89:14:4c:51:bf:2d:a7:bc:bf:65:11:e3:d7:d4:bb:5b:73:b1:
f2:21:97:23:eb:cf:68:5a:ea:a4:bd:33:18:f5:3b:2e:ef:16:
7b:9c:73:3c:b6:c5:9b:db:f0:28:fc:87:42:e2:54:ce:1c:dc:
62:b9:28:5f:60:bb:11:47:fc:c4:dc:3f:8e:de:64:c7:c0:6c:
89:5f:c2:00:ac:7f:c5:4d:b6:be:7a:b7:2b:57:f1:d3:df:d2:
ba:b6:9e:d4:70:4b:00:a3:be:66:4f:54:6e:19:e6:9a:ce:46:
76:3f:81:9e:16:26:12:30:42:0b:db:e5:cf:44:98:e1:01:94:
df:fb:61:e6:42:7b:1f:97:f7:95:79:b5:98:f9:b4:2c:50:15:
39:f4:25:ae:ad:8a:a4:5b:96:66:bc:d8:b6:22:37:2a:88:dc:
eb:1a:3d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:11:38 2025 by rpki-client