Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
File: W-qBqpshl9kSe0QlJRAP-qNuDVI.mft (raw, json)
Hash identifier: IJUdav+PIaG+JpoKFdsLZlBBV7U6uN3Uh6CvoEp+7Uk=
Subject key identifier: 96:F7:99:2E:2A:73:DB:1B:4A:13:3D:61:47:A4:28:A5:33:09:D8:CB
Authority key identifier: 5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
Certificate issuer: /CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Certificate serial: 01974A43BB1B94325C22686E287B695F81C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
Manifest number: 1586
Signing time: Sat 07 Jun 2025 12:00:42 +0000
Manifest this update: Sat 07 Jun 2025 12:00:42 +0000
Manifest next update: Sun 08 Jun 2025 12:00:42 +0000
Files and hashes: 1: RErNlaOpDzrD6wSfbbH1rz1M530.roa (hash: wgBHw0Ti6lWp1Z64AKciY1+PcChXXuuN8WEU42REeQ4=)
2: W-qBqpshl9kSe0QlJRAP-qNuDVI.crl (hash: FphzUyXcpgde7SlzXchTsSXjC5ww19BtehMehBIu8Ls=)
3: b3SLe6B8RMqbliWDKav99vFdTek.roa (hash: iCQ5veiisd5iDOsW30aYP2ZsuL0olskVYr7vQwj4J8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:bb:1b:94:32:5c:22:68:6e:28:7b:69:5f:81:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea81aa9b2197d9127b442525100ffaa36e0d52
Validity
Not Before: Jun 7 12:00:42 2025 GMT
Not After : Jun 8 12:00:42 2025 GMT
Subject: CN=96f7992e2a73db1b4a133d6147a428a53309d8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:f0:e2:82:f3:42:fe:ca:80:e9:b3:26:97:
b6:0a:4e:64:aa:12:e6:7b:07:ba:80:b8:ca:eb:b3:
ff:a9:eb:68:a7:71:39:e5:6e:c2:33:de:5a:25:d6:
dc:e8:31:11:11:58:61:bc:b3:ae:10:02:fb:36:b1:
2a:f8:be:c1:e7:70:78:49:23:0e:bb:68:7a:d1:d8:
5b:11:83:14:ea:f7:da:0d:18:27:cd:b9:70:d1:1b:
cb:78:73:36:c0:e9:47:25:66:e4:60:f4:3d:21:35:
22:e4:58:63:b3:87:14:b1:7c:a0:29:1f:90:4f:9d:
16:0a:ca:c2:3d:d9:58:59:23:ac:dd:3e:cb:ed:1d:
a1:34:e8:f7:bd:d6:83:91:43:9e:cb:04:db:54:0b:
66:ae:3d:90:ce:eb:39:da:c3:df:30:c5:b1:54:55:
5c:0b:4e:83:21:94:2e:02:c3:db:a9:96:5d:a8:82:
79:47:44:2b:f4:0a:dc:c1:b4:d9:84:2f:f5:85:cb:
5d:47:27:d3:51:0b:16:43:fd:e4:d6:01:b7:4e:de:
6e:ad:7c:9a:a8:28:bd:d2:03:14:26:67:14:16:e3:
34:e1:a4:85:5e:f1:b5:14:10:d1:f2:6a:98:69:82:
d0:1d:00:56:be:73:ee:3a:3e:44:70:6b:64:b7:31:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:99:2E:2A:73:DB:1B:4A:13:3D:61:47:A4:28:A5:33:09:D8:CB
X509v3 Authority Key Identifier:
keyid:5B:EA:81:AA:9B:21:97:D9:12:7B:44:25:25:10:0F:FA:A3:6E:0D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-qBqpshl9kSe0QlJRAP-qNuDVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/224155-3ca4-4ff7-a964-fc0dd9252c9a/1/W-qBqpshl9kSe0QlJRAP-qNuDVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:66:e3:ef:cc:2d:43:89:38:67:62:94:48:f3:12:6f:fa:bd:
bc:cb:5d:d4:16:49:cd:39:2b:57:e3:b1:89:56:ec:23:99:59:
77:9a:07:a1:ed:1a:a7:ad:2f:e1:ec:03:11:5f:99:3f:0d:ce:
b8:2a:58:28:e7:b2:06:a8:b0:2a:4a:00:69:8b:14:13:cc:fe:
7b:6f:be:f3:90:b2:dc:96:49:3d:da:07:e7:49:18:5d:f2:3b:
a9:e8:d3:6b:41:e4:92:44:9e:26:d0:9b:a8:f7:6b:bd:67:1d:
ac:a7:45:8e:11:75:aa:ae:56:b8:34:9e:7f:50:04:1c:d7:ca:
f4:c8:f4:1e:00:d2:52:3f:88:c2:bf:5b:03:f8:04:ad:c9:ea:
b7:29:94:76:36:ac:43:cf:c7:55:05:d0:f2:2f:10:39:41:1f:
96:03:46:68:a6:5e:78:84:12:11:42:f9:03:3d:ee:81:94:2b:
ce:33:3b:d2:1f:17:6c:75:82:70:54:d8:82:77:bf:cd:67:3b:
06:ff:5a:20:64:da:5f:ef:61:75:a7:ec:08:4d:c2:bd:01:86:
d0:57:1a:e3:08:79:92:6d:43:23:9f:f7:3e:5e:e6:85:8f:8c:
f8:3b:85:1c:86:48:99:d0:51:96:9c:70:7b:82:6e:7a:8a:73:
0f:84:a0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:13:26 2025 by rpki-client