Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
File: W3qQXiWk1czLLuvk4tXDkggZdY4.mft (raw, json)
Hash identifier: /jRyw0TLKDUlI8T7TSZqqZ0x1QV7doyD4+VCL69dlBM=
Subject key identifier: 49:97:5F:66:FE:8B:BC:75:9A:D6:21:4E:DB:B9:6B:6A:91:6D:B2:CF
Authority key identifier: 5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
Certificate issuer: /CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Certificate serial: 019933126922E659A95125BF7D0C8948E45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
Manifest number: 1579
Signing time: Wed 10 Sep 2025 10:01:08 +0000
Manifest this update: Wed 10 Sep 2025 10:01:08 +0000
Manifest next update: Thu 11 Sep 2025 10:01:08 +0000
Files and hashes: 1: 4wGntNc85Yvx0ypR88J1OukuDr4.roa (hash: pBVnEWBMMIGiHwfDW8kLnJrA2UUG/riqaCBWB/OBtY4=)
2: W3qQXiWk1czLLuvk4tXDkggZdY4.crl (hash: WgG565+h2P6Ti+frQzHP2AYx4sN7Vxl1ghMfxk/UV14=)
3: e7uWgt7T0lZJq9oaz7pgmz5YCU0.roa (hash: vlPlcyroUG1L25J38Irl5ZjN6BImmzz1Gl5tGlK8/3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:69:22:e6:59:a9:51:25:bf:7d:0c:89:48:e4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7a905e25a4d5cccb2eebe4e2d5c3920819758e
Validity
Not Before: Sep 10 10:01:08 2025 GMT
Not After : Sep 11 10:01:08 2025 GMT
Subject: CN=49975f66fe8bbc759ad6214edbb96b6a916db2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:a4:e3:c8:41:20:ef:60:d9:75:1d:bd:27:
ec:5c:e5:96:9f:5c:d5:61:32:46:b0:24:b2:a6:e4:
af:f8:7f:7c:39:fa:ab:c8:46:21:a7:39:3b:cc:ca:
fc:9b:26:14:c7:d0:d8:d0:e6:b7:46:9c:23:04:f4:
95:3b:41:07:06:88:e0:5a:f3:d6:da:17:61:3a:60:
e4:8f:41:2b:55:10:ff:14:a5:c2:2f:1b:16:ca:0e:
0e:02:0c:58:5c:de:e9:af:9a:7b:fc:17:25:61:a3:
9d:10:8b:38:44:98:97:36:a3:61:26:71:2f:ba:cb:
2b:09:56:82:4b:35:dc:ac:b4:06:b4:06:4c:26:26:
67:fd:56:88:46:21:d9:9f:b9:80:00:06:cb:bb:9c:
69:a1:c0:d9:b7:24:c7:97:50:e7:86:89:eb:b5:1c:
cd:ed:92:d2:fb:4c:33:ed:4a:1b:6f:78:13:aa:be:
a9:bc:b3:58:ab:c9:07:6e:d5:c6:7b:5c:d5:0d:61:
e0:7f:f5:c4:b7:1f:18:33:f4:2b:0a:cd:a4:2c:c4:
f0:e5:42:38:47:9f:5e:e4:94:a6:73:b3:95:02:69:
91:21:b5:6c:2e:7e:17:03:84:4e:cd:33:ab:62:21:
b1:05:53:e8:fb:2f:c6:4a:0d:38:02:ea:a3:39:07:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:5F:66:FE:8B:BC:75:9A:D6:21:4E:DB:B9:6B:6A:91:6D:B2:CF
X509v3 Authority Key Identifier:
keyid:5B:7A:90:5E:25:A4:D5:CC:CB:2E:EB:E4:E2:D5:C3:92:08:19:75:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3qQXiWk1czLLuvk4tXDkggZdY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/c12395-c0f8-4e05-8cb1-73a3d07d2c31/1/W3qQXiWk1czLLuvk4tXDkggZdY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a7:0f:81:4e:5b:83:bf:7a:e1:fb:d0:c5:38:58:0e:4f:93:
19:cd:a2:99:3e:5f:1e:fe:73:ad:25:43:24:21:43:33:2b:74:
53:b4:9b:f6:99:e1:6d:b8:c0:8a:8d:fb:8c:a3:61:04:41:b3:
92:84:66:b8:84:c8:20:7a:9e:78:d5:26:f8:87:11:a3:cc:71:
3b:ab:f8:98:95:ec:f6:02:97:c2:f6:67:d1:3f:e0:28:ff:f8:
36:dc:a1:93:e1:37:72:d0:1d:9b:9f:0b:89:f9:9a:a7:40:0e:
1f:c8:80:7a:a2:f5:99:e7:f5:e4:1c:87:b0:1c:d1:62:19:72:
05:2a:4f:4c:5d:9c:1e:22:f9:02:3f:91:f6:ea:30:b6:06:c5:
09:95:eb:45:59:68:f5:95:bc:a6:bd:c7:62:6a:47:85:f5:e7:
8d:28:78:8c:0c:28:52:e1:8b:2e:8e:c8:d0:e3:fa:ba:c2:77:
de:f0:0d:9f:f3:1d:23:67:50:f7:d5:a3:fc:27:bb:88:08:79:
b7:ab:4c:2b:fc:4d:d1:5b:d8:1d:5f:37:a0:dd:67:c2:a5:6d:
37:b0:55:2a:81:6f:76:46:6b:99:a8:72:5d:a2:4b:49:cc:27:
42:b7:31:b2:22:ff:3e:c1:ff:39:4d:dd:a7:b3:1f:03:cd:12:
52:19:4e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:20:00 2025 by rpki-client