Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: rX7LaJefh88JcXlrf+6R6J6oFgLbBMVCBzOGOZq4vUg=
Subject key identifier: C7:D2:DC:E0:E3:A4:78:D9:33:25:EA:52:0F:84:2E:95:BC:D8:B2:4F
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 019854FC71DF73CBA372C424974FC8BD97B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 1628
Signing time: Tue 29 Jul 2025 07:01:27 +0000
Manifest this update: Tue 29 Jul 2025 07:01:27 +0000
Manifest next update: Wed 30 Jul 2025 07:01:27 +0000
Files and hashes: 1: 4D3wEAaKaO-VNYMegevp2dIDiZA.roa (hash: Pboeq/VEw/fEiNcfqVmPGeRB5EfnZp8myD9JUVRtoS4=)
2: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
3: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
4: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
5: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
6: HQ5pk500M9r_ovoVxF0QEcohnog.roa (hash: ww8oMO4jWUVQ6/eBdnQNu3m8JDu+2hsoI9UHwgt7uPk=)
7: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
8: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: BvO8LnsGwtQBmPG3UO9y7cbmriI+jacmpxXdjsHIoWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:71:df:73:cb:a3:72:c4:24:97:4f:c8:bd:97:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jul 29 07:01:27 2025 GMT
Not After : Jul 30 07:01:27 2025 GMT
Subject: CN=c7d2dce0e3a478d93325ea520f842e95bcd8b24f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:e8:5a:49:24:38:fe:7e:3b:f4:e7:12:86:
d7:e0:b8:fa:f3:b3:0a:af:3c:e5:a6:31:de:e1:16:
52:c3:d0:42:03:64:e7:87:9e:d2:3e:d6:ed:f0:ef:
0d:a8:fb:f6:47:20:35:32:02:3b:e1:2b:d2:9a:17:
8d:4f:c8:f4:b4:b8:e0:a6:7f:b8:76:43:9e:fb:53:
aa:4a:e9:3f:92:2a:9a:39:0d:c7:bb:cc:b9:22:34:
d5:24:b7:a9:10:89:d2:24:4e:1f:8b:d5:ad:3c:ad:
2d:94:b2:dd:5e:ab:8d:b8:37:5c:29:dc:f3:31:92:
54:2e:9c:d3:d5:4d:38:03:45:55:8f:4f:5e:79:69:
3f:69:45:21:b0:9d:6e:90:39:7c:cc:eb:1b:01:6e:
1e:e7:95:4a:70:cd:f5:5b:16:fc:a1:cc:8f:05:27:
d8:2f:66:ac:99:4b:4d:17:d9:f7:09:00:9c:a3:b3:
4d:8a:ea:f2:2f:ad:69:ec:64:21:a0:41:c2:45:6b:
6d:a0:58:c7:8f:45:52:9a:a8:ba:f0:7f:b9:04:55:
7d:ec:f2:d2:f8:5d:2b:c0:c7:30:f0:4f:c9:11:00:
e6:8d:94:64:b4:40:7f:27:31:e6:eb:3e:e6:6c:b1:
6f:80:94:12:cf:ee:3c:85:58:3a:8a:71:30:a2:48:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:DC:E0:E3:A4:78:D9:33:25:EA:52:0F:84:2E:95:BC:D8:B2:4F
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a0:9c:b6:2b:7b:2c:d7:03:98:06:0d:b3:6d:5a:68:f3:02:
f7:b0:34:63:3b:a1:db:c5:9d:da:5d:b4:c5:99:f9:6e:3f:5f:
0e:48:42:6b:7a:ef:ac:3a:1e:c0:ed:84:18:98:e5:e9:39:c1:
34:7a:74:db:a6:ca:a2:c1:59:b4:5e:bc:a2:87:b4:d4:ba:d6:
8a:f5:2d:c8:11:dd:05:33:8c:38:52:e3:c3:2a:06:ba:39:2c:
76:15:da:c4:56:2a:a2:4b:8f:65:cb:90:6a:4d:5a:aa:84:82:
6e:a5:7b:97:b1:ca:d2:6e:a9:6c:f1:bf:59:03:37:6e:ab:53:
df:cd:8e:32:78:0f:34:5f:30:f8:e1:18:3f:2f:9e:91:e6:e7:
31:10:ae:63:37:fa:10:00:42:b8:90:85:91:71:16:5c:c6:aa:
6c:96:85:db:3d:a9:1d:6c:7b:e1:22:d0:23:ca:f2:79:3e:2c:
18:7f:0e:02:ed:76:18:d6:14:ae:52:b6:68:ec:50:0e:f1:73:
54:b0:78:c6:7c:f2:41:16:01:59:a8:03:76:0a:82:26:af:38:
c9:7f:7c:d5:fd:55:6c:a8:69:ef:4b:b7:e1:da:56:83:0c:ef:
ff:cd:a0:78:c1:c6:5c:9f:ca:d4:4b:52:13:e7:36:b9:3f:f4:
11:cb:27:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:57:19 2025 by rpki-client