Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: HOGNdObUpZe5hy1m5wQ0VBcNsPRTlGYNI75QEMEZmF8=
Subject key identifier: 56:41:FA:D3:2D:E0:E4:EE:65:0C:E3:9E:FF:6E:83:9F:C1:75:DB:38
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 0197D774DCB324CDFF41500835D209852329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 15C8
Signing time: Fri 04 Jul 2025 22:00:49 +0000
Manifest this update: Fri 04 Jul 2025 22:00:49 +0000
Manifest next update: Sat 05 Jul 2025 22:00:49 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: jbiJfvCtCzKXz6rfHXBcxTHTwE7y3zSbkdvQjBthThA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:74:dc:b3:24:cd:ff:41:50:08:35:d2:09:85:23:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Jul 4 22:00:49 2025 GMT
Not After : Jul 5 22:00:49 2025 GMT
Subject: CN=5641fad32de0e4ee650ce39eff6e839fc175db38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a6:ab:05:90:5a:73:40:3f:2f:69:a9:ea:dc:
31:a9:d5:74:69:1e:42:dc:7f:71:0a:6d:ed:61:69:
e0:a8:b0:94:ca:f1:60:d7:03:32:de:bb:3e:4f:3c:
9b:30:bd:fa:81:20:48:7d:c4:e0:a7:dd:f8:cf:f4:
cd:1c:85:cf:20:8c:fb:5c:17:41:46:e9:61:7a:38:
d8:1a:55:b5:d9:3f:f8:66:f9:6a:51:35:98:aa:74:
51:1e:41:e4:7a:6d:bf:22:c2:db:97:7c:72:c0:46:
e8:bc:6a:80:b3:b4:4f:e2:f0:22:05:d9:86:3a:c1:
0c:78:96:24:f0:bc:0d:e3:a0:93:73:90:a3:02:da:
d2:92:fa:91:6c:40:7e:dc:01:d3:7f:df:6f:2e:01:
8e:42:0c:7e:84:00:dc:97:9e:19:98:55:db:f6:84:
95:be:32:bf:14:b1:77:1d:b7:af:d8:1d:a5:fb:49:
85:c4:33:22:d0:77:90:e9:29:3b:bd:83:99:f6:04:
a5:37:9b:b5:6e:6c:ba:c2:c6:fd:b2:7e:0d:a9:4e:
09:bf:d3:b9:9f:9a:9d:85:f4:19:79:e4:df:79:f8:
a4:b5:62:43:1d:0c:60:5e:11:40:a5:17:76:b5:f6:
ba:e6:2c:17:42:ab:a6:36:92:f9:4b:85:1f:cf:e8:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:FA:D3:2D:E0:E4:EE:65:0C:E3:9E:FF:6E:83:9F:C1:75:DB:38
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:79:94:d1:4e:4f:49:7d:bd:ba:dc:3c:6f:51:6c:dd:46:13:
01:12:d5:33:a7:d1:0b:c8:71:90:77:da:4a:97:63:8b:34:f3:
7b:20:81:77:99:9c:32:79:9a:ee:f1:e0:3d:ee:5c:28:25:30:
5e:9a:85:70:63:f3:1d:90:9a:23:ef:c1:3b:6b:cc:63:b0:1b:
9a:0c:3a:3b:cd:90:79:ec:ac:2b:b4:09:9c:88:3b:c6:a0:b0:
a4:a2:70:57:0f:8c:a1:3b:05:69:34:0e:b5:0a:56:2a:87:8b:
b9:1d:66:fa:6c:ff:ee:3c:6a:14:23:0d:37:3b:03:be:ac:45:
b7:2e:b7:5c:59:35:19:c9:03:0c:e7:de:94:1f:68:a8:8e:a8:
b5:97:f3:c0:b9:50:f6:74:ff:c7:05:11:77:50:4e:59:f0:7f:
28:82:e3:8e:e2:e0:26:22:b9:50:94:f4:e3:b1:d6:70:7c:be:
40:6c:96:5b:7f:4b:c1:98:57:13:89:fc:f5:e4:8c:f6:01:d3:
5d:d6:a2:e1:7a:16:c2:33:20:06:d8:36:9f:ae:0c:9b:34:77:
cc:cc:72:97:71:01:8a:f2:0a:a8:dc:ea:0e:38:86:00:cf:2a:
63:77:25:3d:bc:65:82:87:6c:4f:f5:22:a1:5e:c0:84:7b:ce:
08:20:c2:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfXdNyzJM3/QVAINdIJhSMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjQzNTFlMGE0OTVjMjZlZmRjNmU0MTVmMGJiMTg5ZmJi
ZDZlZGYwHhcNMjUwNzA0MjIwMDQ5WhcNMjUwNzA1MjIwMDQ5WjAzMTEwLwYDVQQD
Eyg1NjQxZmFkMzJkZTBlNGVlNjUwY2UzOWVmZjZlODM5ZmMxNzVkYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6arBZBac0A/L2mp6twxqdV0aR5C
3H9xCm3tYWngqLCUyvFg1wMy3rs+TzybML36gSBIfcTgp934z/TNHIXPIIz7XBdB
RulhejjYGlW12T/4ZvlqUTWYqnRRHkHkem2/IsLbl3xywEbovGqAs7RP4vAiBdmG
OsEMeJYk8LwN46CTc5CjAtrSkvqRbEB+3AHTf99vLgGOQgx+hADcl54ZmFXb9oSV
vjK/FLF3Hbev2B2l+0mFxDMi0HeQ6Sk7vYOZ9gSlN5u1bmy6wsb9sn4NqU4Jv9O5
n5qdhfQZeeTfefiktWJDHQxgXhFApRd2tfa65iwXQqumNpL5S4Ufz+iSsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZB+tMt4OTuZQzjnv9ug5/Bdds4MB8GA1UdIwQY
MBaAFMO0NR4KSVwm79xuQV8LsYn7vW7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTIt
MGVmMWNhYzc0MThkLzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zN2UzNjMtODRkMS00NzBlLTk2YTItMGVmMWNhYzc0MThk
LzEvdzdRMUhncEpYQ2J2M0c1Qlh3dXhpZnU5YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsXmU0U5P
SX29utw8b1Fs3UYTARLVM6fRC8hxkHfaSpdjizTzeyCBd5mcMnma7vHgPe5cKCUw
XpqFcGPzHZCaI+/BO2vMY7Abmgw6O82QeeysK7QJnIg7xqCwpKJwVw+MoTsFaTQO
tQpWKoeLuR1m+mz/7jxqFCMNNzsDvqxFty63XFk1GckDDOfelB9oqI6otZfzwLlQ
9nT/xwURd1BOWfB/KILjjuLgJiK5UJT047HWcHy+QGyWW39LwZhXE4n89eSM9gHT
Xdai4XoWwjMgBtg2n64MmzR3zMxyl3EBivIKqNzqDjiGAM8qY3clPbxlgodsT/Ui
oV7AhHvOCCDCpQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 02:11:44 2025 by rpki-client