Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: Pnk1HZEpdFATK+XMofugeUq7R1otSYaxNUVng3N2Nfo=
Subject key identifier: 7D:AB:D7:C7:33:F2:C0:9D:2B:6F:6F:FC:8F:41:5E:70:DB:10:AD:B3
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 01974C322A18A90BACC1235A4CEC213B5A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 147D
Signing time: Sat 07 Jun 2025 21:00:45 +0000
Manifest this update: Sat 07 Jun 2025 21:00:45 +0000
Manifest next update: Sun 08 Jun 2025 21:00:45 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: cCxN2jz1Id2A7fa1Bstllqk82k/KK1Tu7xkixMYuMeQ=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:2a:18:a9:0b:ac:c1:23:5a:4c:ec:21:3b:5a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Jun 7 21:00:45 2025 GMT
Not After : Jun 8 21:00:45 2025 GMT
Subject: CN=7dabd7c733f2c09d2b6f6ffc8f415e70db10adb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:ca:93:66:46:a7:54:f4:48:07:9e:93:d6:
3f:d3:7c:29:a2:df:99:5b:3f:05:fe:e3:9c:84:2d:
4b:ce:82:f7:f3:69:ae:9d:00:0d:0d:73:c5:67:a3:
06:2c:8e:06:e2:6d:28:78:a6:23:42:4e:6d:0f:8a:
ca:77:02:fc:23:1f:3c:c5:46:ad:a0:71:63:7d:92:
a4:b3:58:d4:68:7c:f0:c7:6e:07:fb:5d:7a:5f:41:
b0:22:2b:82:b9:9d:b1:f4:3a:07:60:77:ca:96:d4:
89:8f:63:be:df:1c:fe:3b:e7:70:55:4e:b7:c7:d8:
02:67:ff:ac:c4:e8:de:66:e6:ee:be:d6:bb:12:21:
76:d4:cf:2f:ab:48:45:d7:86:79:b3:d6:7f:ad:b1:
02:0c:22:0f:fc:17:b9:29:3d:b8:96:1a:8e:96:b1:
92:98:2c:35:2d:a7:3e:b2:77:40:13:f2:9a:ae:ba:
c2:7d:f0:62:47:d5:5a:5d:7d:51:61:41:75:32:9d:
64:f9:74:40:ac:b0:df:b8:24:2b:29:f2:eb:bf:ce:
88:b3:07:18:78:4e:f7:d4:52:76:10:e1:13:90:20:
65:a1:97:6e:3c:b5:09:e4:3f:14:4a:dd:43:38:ec:
83:22:0d:57:31:ac:c8:fa:28:45:96:30:d9:50:3a:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AB:D7:C7:33:F2:C0:9D:2B:6F:6F:FC:8F:41:5E:70:DB:10:AD:B3
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:76:2c:69:5f:80:db:12:09:50:ca:3f:53:da:f6:af:b1:85:
56:b1:3a:af:91:be:44:82:0e:c9:a6:5a:3d:3c:b1:44:46:50:
1f:17:d4:91:1e:76:b4:07:e8:0e:9a:b8:a1:e5:cd:92:d1:17:
71:6b:a5:e6:cf:72:56:00:f4:94:5d:39:5e:32:ff:5c:0c:dd:
83:86:62:d3:55:7c:06:91:42:6c:c4:42:d9:cd:3f:d2:d3:c1:
53:59:58:69:d1:1c:fb:25:5d:d3:bc:3e:45:c0:6d:17:52:15:
c7:e4:ab:93:dc:0a:96:39:5e:9a:aa:5c:1c:a9:52:fd:97:21:
6f:92:67:0c:a1:cd:f2:84:3b:1a:de:1f:56:49:84:cc:5c:d6:
81:c6:71:33:32:23:2f:40:0d:89:ca:a1:8f:75:4d:fb:5d:08:
ea:52:04:61:c3:12:82:7c:44:9b:d9:eb:f8:6b:89:fa:94:fc:
e1:79:4d:9f:2d:71:66:a7:57:37:6a:94:cd:9f:f4:c1:1f:fb:
35:50:6e:04:4e:19:80:26:cc:8c:bd:3b:14:ec:36:1e:79:3c:
aa:92:fe:26:cb:87:d2:24:26:1d:a4:c9:10:62:e2:31:1b:53:
f6:88:96:f9:13:11:82:25:a3:84:01:36:04:2b:39:46:03:ad:
5a:2e:0e:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMioYqQuswSNaTOwhO1ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViN2E5MDVlMjVhNGQ1Y2NjYjJlZWJlNGUyZDVjMzkyMDgx
OTc1OGUwHhcNMjUwNjA3MjEwMDQ1WhcNMjUwNjA4MjEwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZGFiZDdjNzMzZjJjMDlkMmI2ZjZmZmM4ZjQxNWU3MGRiMTBhZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdTKk2ZGp1T0SAeek9Y/03wpot+Z
Wz8F/uOchC1LzoL382munQANDXPFZ6MGLI4G4m0oeKYjQk5tD4rKdwL8Ix88xUat
oHFjfZKks1jUaHzwx24H+116X0GwIiuCuZ2x9DoHYHfKltSJj2O+3xz+O+dwVU63
x9gCZ/+sxOjeZubuvta7EiF21M8vq0hF14Z5s9Z/rbECDCIP/Be5KT24lhqOlrGS
mCw1Lac+sndAE/KarrrCffBiR9VaXX1RYUF1Mp1k+XRArLDfuCQrKfLrv86IswcY
eE731FJ2EOETkCBloZduPLUJ5D8USt1DOOyDIg1XMazI+ihFljDZUDrjPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2r18cz8sCdK29v/I9BXnDbEK2zMB8GA1UdIwQY
MBaAFFt6kF4lpNXMyy7r5OLVw5IIGXWOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jMTIzOTUtYzBmOC00ZTA1LThjYjEt
NzNhM2QwN2QyYzMxLzEvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9jMTIzOTUtYzBmOC00ZTA1LThjYjEtNzNhM2QwN2QyYzMx
LzEvVzNxUVhpV2sxY3pMTHV2azR0WERrZ2daZFk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3YsaV+A
2xIJUMo/U9r2r7GFVrE6r5G+RIIOyaZaPTyxREZQHxfUkR52tAfoDpq4oeXNktEX
cWul5s9yVgD0lF05XjL/XAzdg4Zi01V8BpFCbMRC2c0/0tPBU1lYadEc+yVd07w+
RcBtF1IVx+Srk9wKljlemqpcHKlS/Zchb5JnDKHN8oQ7Gt4fVkmEzFzWgcZxMzIj
L0ANicqhj3VN+10I6lIEYcMSgnxEm9nr+GuJ+pT84XlNny1xZqdXN2qUzZ/0wR/7
NVBuBE4ZgCbMjL07FOw2Hnk8qpL+JsuH0iQmHaTJEGLiMRtT9oiW+RMRgiWjhAE2
BCs5RgOtWi4Oug==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:34:49 2025 by rpki-client