Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File: W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier: KzfiYuLbMd2rPYcTibk2uEbJ1/+VKmI9S5vf7IOGCNo=
Subject key identifier: B5:DF:0C:F0:23:23:50:E0:81:38:43:A5:BD:28:DB:16:C9:7C:44:78
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer: /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial: 01984A41A34C48A556A3FEE8A59AC31333D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 05:01:12 +0000
Manifest this update: Sun 27 Jul 2025 05:01:12 +0000
Manifest next update: Mon 28 Jul 2025 05:01:12 +0000
Files and hashes: 1: QZDKvK6iw_tPh27glx9LTGGHSYU.roa (hash: XgdxnkBVQi+6Pi+BDAfBhOhlkd5fb/2ukIHoQx2+z08=)
2: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: 3JLly8kNOlLkxKBgGwr1kLEVD3ooYaJBrtXagXcs8nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:a3:4c:48:a5:56:a3:fe:e8:a5:9a:c3:13:33:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Validity
Not Before: Jul 27 05:01:12 2025 GMT
Not After : Jul 28 05:01:12 2025 GMT
Subject: CN=b5df0cf0232350e0813843a5bd28db16c97c4478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:de:97:51:6c:38:b6:ff:01:9b:77:6f:71:
bc:75:e9:4e:b0:99:79:5f:1d:e3:a0:8d:f0:17:22:
31:f6:b4:2e:d6:bd:ca:ba:05:f3:b9:10:31:ba:1f:
11:83:db:f8:9c:d6:bb:30:a2:54:ad:c9:85:39:78:
6e:97:9e:e5:b8:79:d3:bb:16:79:8a:49:7b:04:ff:
5b:86:f7:8b:1c:60:e7:cf:80:29:88:7c:2f:1e:c4:
2c:06:92:4c:76:5b:df:22:7a:c7:f2:30:75:27:76:
96:77:a5:ee:c5:76:89:93:48:7b:a5:32:ec:2d:96:
1f:ec:25:03:0c:54:6b:40:52:f4:08:5b:f3:09:65:
42:9d:aa:10:da:53:00:9b:1d:b0:35:88:2c:c3:23:
0e:d8:c4:f0:f3:6e:1c:cd:11:37:9d:7b:81:b5:36:
6d:67:eb:77:c3:ee:99:1d:26:8c:c7:c9:b7:37:96:
bd:c4:6f:49:98:5e:50:12:84:cc:ee:55:a6:fe:2b:
3f:b3:4e:c7:23:98:0d:07:d2:2b:61:cd:99:cc:5f:
99:38:d0:e6:4d:97:fe:23:c0:bb:52:12:da:f7:6c:
4d:f6:e3:cc:76:10:cb:d6:21:e9:95:a1:f9:d6:c1:
91:45:99:8b:ef:36:84:1e:ac:89:b9:65:7c:79:78:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:0C:F0:23:23:50:E0:81:38:43:A5:BD:28:DB:16:C9:7C:44:78
X509v3 Authority Key Identifier:
keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dd:1a:27:7e:ad:17:7a:27:f7:e2:68:94:55:13:09:2a:13:
d7:3c:be:73:b0:12:a9:2d:da:54:75:4a:12:80:df:cb:56:12:
5a:42:58:ae:b9:77:4a:81:dd:68:94:3b:3f:13:fd:3c:11:8e:
1e:d0:fe:7e:02:91:b8:d9:9a:05:69:cc:05:af:dc:f8:b9:1b:
f2:40:75:21:69:8f:d3:a5:b1:72:8b:d9:7b:e6:e7:32:9f:22:
21:33:5c:f3:0d:3b:36:76:36:c4:05:fe:2b:65:44:4d:c8:68:
44:a5:fb:fb:ae:b5:41:10:e1:c5:51:0b:69:92:de:82:30:15:
5c:71:cf:03:88:ca:17:1e:bb:9f:db:75:39:cb:9b:ff:3c:4e:
87:4e:ca:a7:b3:6c:fc:05:ce:76:0c:02:9e:44:09:84:21:a9:
81:46:92:f8:65:c6:21:4a:20:43:91:fa:4e:d3:59:a1:97:65:
e2:c5:8d:68:97:79:0a:26:bc:e0:5c:fc:ce:14:c5:99:36:1e:
20:45:a1:22:cc:13:3e:f6:41:15:cb:33:df:71:35:37:77:64:
df:52:12:39:13:a8:36:65:65:c6:5a:49:43:9c:02:e5:16:bd:
e4:7f:05:c6:3b:28:ad:55:b1:77:05:41:c9:7b:80:bf:65:85:
51:40:25:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQaNMSKVWo/7opZrDEzPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYjVmMDVmMTJiNTIwNzY4NjhlZWZjZDE0YWZjZWMxOTJm
ZTJjZjIwHhcNMjUwNzI3MDUwMTEyWhcNMjUwNzI4MDUwMTEyWjAzMTEwLwYDVQQD
EyhiNWRmMGNmMDIzMjM1MGUwODEzODQzYTViZDI4ZGIxNmM5N2M0NDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszbel1FsOLb/AZt3b3G8delOsJl5
Xx3joI3wFyIx9rQu1r3KugXzuRAxuh8Rg9v4nNa7MKJUrcmFOXhul57luHnTuxZ5
ikl7BP9bhveLHGDnz4ApiHwvHsQsBpJMdlvfInrH8jB1J3aWd6XuxXaJk0h7pTLs
LZYf7CUDDFRrQFL0CFvzCWVCnaoQ2lMAmx2wNYgswyMO2MTw824czRE3nXuBtTZt
Z+t3w+6ZHSaMx8m3N5a9xG9JmF5QEoTM7lWm/is/s07HI5gNB9IrYc2ZzF+ZONDm
TZf+I8C7UhLa92xN9uPMdhDL1iHplaH51sGRRZmL7zaEHqyJuWV8eXj37wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXfDPAjI1DggThDpb0o2xbJfER4MB8GA1UdIwQY
MBaAFFu18F8StSB2ho7vzRSvzsGS/izyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzdYd1h4SzFJSGFHanVfTkZLX093WkwtTFBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85OGFkYzEtNmZmOC00OTU5LWEzNDQt
ZGI2Y2E2ZTRkNGEzLzEvVzdYd1h4SzFJSGFHanVfTkZLX093WkwtTFBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS85OGFkYzEtNmZmOC00OTU5LWEzNDQtZGI2Y2E2ZTRkNGEz
LzEvVzdYd1h4SzFJSGFHanVfTkZLX093WkwtTFBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjt0aJ36t
F3on9+JolFUTCSoT1zy+c7ASqS3aVHVKEoDfy1YSWkJYrrl3SoHdaJQ7PxP9PBGO
HtD+fgKRuNmaBWnMBa/c+Lkb8kB1IWmP06WxcovZe+bnMp8iITNc8w07NnY2xAX+
K2VETchoRKX7+661QRDhxVELaZLegjAVXHHPA4jKFx67n9t1Ocub/zxOh07Kp7Ns
/AXOdgwCnkQJhCGpgUaS+GXGIUogQ5H6TtNZoZdl4sWNaJd5Cia84Fz8zhTFmTYe
IEWhIswTPvZBFcsz33E1N3dk31ISOROoNmVlxlpJQ5wC5Ra95H8FxjsorVWxdwVB
yXuAv2WFUUAl/A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:53:08 2025 by rpki-client