Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier: SCkPx1dnJfzz9GP7IQCXWhdzF08Y2r0cjxFT8Gw6wXc=
Subject key identifier: B0:04:71:FA:04:83:B3:11:C2:97:46:2C:BE:AB:3F:27:3C:17:C1:90
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial: 0199228CD341E8AF9C83D76B983813CFB9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number: 1646
Signing time: Sun 07 Sep 2025 05:01:18 +0000
Manifest this update: Sun 07 Sep 2025 05:01:18 +0000
Manifest next update: Mon 08 Sep 2025 05:01:18 +0000
Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=)
2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: a4NFQmDHQmKaqzrT2N11PMC62spoBudoJpDa/TjN7JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d3:41:e8:af:9c:83:d7:6b:98:38:13:cf:b9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aae19678aa37525512229a94e7890147183273c
Validity
Not Before: Sep 7 05:01:18 2025 GMT
Not After : Sep 8 05:01:18 2025 GMT
Subject: CN=b00471fa0483b311c297462cbeab3f273c17c190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:72:7e:72:e1:b3:59:f6:bb:72:bc:90:db:
6f:fe:32:c6:9d:2a:46:6c:ca:04:ba:ab:95:96:45:
8f:d7:0d:2e:22:2b:a8:71:82:2a:81:4b:64:bc:9b:
ec:8c:19:b5:04:ff:8e:07:dc:71:ca:2e:c0:a4:95:
11:c9:05:6f:43:5f:8f:1d:a1:f0:df:a3:a1:24:58:
fb:2a:48:64:8f:42:2b:54:c4:d3:16:62:df:0c:07:
92:31:21:8f:72:ee:f2:7c:d6:45:22:a9:74:ce:2e:
7b:79:23:49:d1:20:1b:d2:4b:86:f7:6e:ff:27:25:
7b:05:6d:d3:3c:4d:0d:6a:a1:09:e9:38:07:41:a3:
89:51:7e:09:15:54:11:93:81:a0:d6:1d:52:58:e5:
2b:a8:19:f4:4a:5a:51:2a:ca:15:46:78:58:a3:8b:
e9:72:58:06:80:dc:4b:50:a9:1e:b4:88:2b:61:13:
f2:c3:f0:b7:3a:00:47:f8:a2:10:4f:2c:f4:5e:03:
ed:65:07:e4:05:ef:6f:e6:07:a5:96:e9:b1:38:42:
91:15:9c:dc:30:e4:f9:81:ed:66:99:d2:3e:b5:5f:
c6:e3:6a:67:06:47:f0:29:69:9a:23:df:62:e8:bd:
47:09:69:c6:81:b9:f8:e6:a7:71:b6:17:51:88:fc:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:04:71:FA:04:83:B3:11:C2:97:46:2C:BE:AB:3F:27:3C:17:C1:90
X509v3 Authority Key Identifier:
keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:43:ef:71:49:88:6f:9c:06:35:10:e3:71:a6:42:1a:26:9b:
ef:59:80:54:b6:ad:23:e1:38:1f:a5:e0:d2:0c:e7:35:c6:64:
72:3b:f0:6c:60:bc:04:42:7d:2e:a1:b6:eb:9a:1a:be:6a:24:
79:f9:a4:e9:d9:04:2f:ed:75:37:f8:6a:fd:35:ee:ab:4a:47:
a7:9d:72:22:88:31:0e:40:9e:88:2b:bd:7a:79:85:0d:d1:07:
1c:f6:49:e3:85:b4:d0:57:1c:23:05:d7:02:cb:ac:fe:55:36:
e7:d9:74:31:8c:9e:99:cc:95:00:6a:08:1f:5e:71:ef:12:49:
fc:4c:d2:3e:34:07:d5:50:a2:cc:68:61:8d:56:50:0d:3c:95:
e4:36:66:9c:82:39:28:c7:cf:e9:34:61:98:8b:38:aa:41:d8:
ba:fb:9b:1c:91:cd:68:78:94:1d:8c:7c:6e:35:c7:44:a6:7b:
64:1d:b2:0b:03:14:c4:3d:a2:65:7d:f7:45:b6:30:93:68:a6:
86:f4:ab:56:6c:4b:6c:e0:41:c4:44:ad:ee:b6:5d:65:51:3f:
97:71:55:1d:99:e4:59:ad:2a:51:82:7a:a5:d4:0b:c4:0e:a8:
a9:e7:1a:bb:d4:55:1a:c5:92:c3:e6:bb:60:17:35:ac:ee:e8:
52:16:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:16 2025 by rpki-client