Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: F4ekvMbjF7eeU2Jx13DL6Rlw4JCN1jv+8EpZ/VTzs58=
Subject key identifier: EB:E3:60:65:78:96:E9:24:69:9B:9A:71:67:DD:9E:C6:64:6D:8D:9B
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019A1CBF37A2F2816C527A4C556CD081FD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 15F2
Signing time: Sat 25 Oct 2025 19:01:24 +0000
Manifest this update: Sat 25 Oct 2025 19:01:24 +0000
Manifest next update: Sun 26 Oct 2025 19:01:24 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: O6Oze5OT59Kl3XfuRHdeLJtFZeI+x3oGD4iRjdSEzpA=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:bf:37:a2:f2:81:6c:52:7a:4c:55:6c:d0:81:fd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Oct 25 19:01:24 2025 GMT
Not After : Oct 26 19:01:24 2025 GMT
Subject: CN=ebe360657896e924699b9a7167dd9ec6646d8d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:8e:a8:48:a5:d2:74:56:8c:6e:d2:9f:21:
3b:d2:b4:61:66:8e:b4:24:0f:b4:fc:ae:db:f3:03:
c9:ce:93:1a:5d:13:e9:17:0e:33:d0:27:cd:c2:1f:
2f:b0:bb:66:40:2f:65:28:d2:f9:9f:f0:67:c4:c3:
d7:0a:19:e3:7c:56:f8:2a:da:52:15:1c:c9:55:ca:
71:3b:ba:9d:f2:11:37:17:d5:30:b9:46:bd:8d:83:
3e:5f:3a:ea:9e:99:e4:a9:fd:ac:3f:66:7f:7b:4a:
0a:08:09:49:71:20:03:59:e7:01:53:71:45:e1:2b:
41:45:9c:5a:35:17:77:1c:d5:59:53:a2:bd:4b:e1:
bc:0c:35:3c:6a:c1:a6:2a:aa:e1:2c:99:e2:1a:c4:
22:93:cc:e6:f4:cf:bc:b1:d1:4f:f1:d5:e5:6b:1f:
6f:d4:e5:a2:3a:35:6e:4c:aa:fd:0e:61:eb:3b:fa:
59:0a:cd:a6:6c:8e:80:b0:68:1f:02:68:e6:33:fa:
3f:cd:01:38:a4:ba:15:bb:a3:44:cf:61:82:cd:bf:
4e:84:fc:f3:cd:f9:d2:3d:8b:ea:cc:33:91:79:98:
a4:ce:3f:ad:cf:cb:8b:34:07:d9:30:87:59:ec:d8:
50:86:ed:82:c5:4a:0f:c3:c6:7e:a0:37:f2:1d:b1:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E3:60:65:78:96:E9:24:69:9B:9A:71:67:DD:9E:C6:64:6D:8D:9B
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c4:b1:10:4c:90:1b:6a:4b:4d:b0:bc:03:2b:4d:c8:f3:46:
03:4f:4b:9d:cd:3f:a4:1a:b3:55:f5:ce:9b:4b:9a:b7:6d:32:
5e:8b:1e:72:18:a0:fb:8b:24:34:30:03:9a:d4:3c:c5:43:07:
cc:cc:54:ed:ef:fc:1a:ca:95:1d:f3:9e:07:c5:8c:be:cf:d7:
58:57:43:0c:26:c8:6f:e2:61:01:76:6f:d5:17:b2:e0:1a:37:
47:c4:27:43:0d:07:d7:eb:87:00:b6:1b:a6:ac:9f:4e:b2:e8:
55:bb:12:d7:6b:b3:4d:5b:34:78:50:99:ad:fb:5b:2d:d9:1b:
1c:f8:63:eb:2e:a5:c8:29:ae:98:5d:40:87:69:bb:a5:1b:80:
a9:bc:b5:01:8a:82:ba:6c:6f:40:d1:87:b0:5c:02:d5:67:98:
98:4c:30:70:00:d5:c6:bd:1a:f3:00:5b:9d:a8:9b:5e:33:69:
c9:d5:f2:b8:e1:18:9a:c7:87:98:95:cb:50:2b:d4:d9:38:56:
9c:bf:57:33:29:82:ac:41:5f:b3:34:89:ce:e8:e5:4b:50:55:
be:e6:7c:9f:a7:80:fd:b6:24:6a:7a:f2:c4:ce:88:d0:53:ba:
aa:65:31:84:33:cd:c5:b9:82:e2:d1:72:56:c3:9f:33:d2:70:
a4:19:15:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:16:40 2025 by rpki-client