Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: dHhb+tJsvLTXtVbqoUUO+1SZsLUEyrT+6luIsPw//Ko=
Subject key identifier: 6B:42:08:E2:8B:AE:D7:63:6C:E6:D2:47:A2:C6:16:6B:42:83:09:3A
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 019A05919DFB376605A839AF5462A378BDE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 1708
Signing time: Tue 21 Oct 2025 07:00:20 +0000
Manifest this update: Tue 21 Oct 2025 07:00:20 +0000
Manifest next update: Wed 22 Oct 2025 07:00:20 +0000
Files and hashes: 1: 4D3wEAaKaO-VNYMegevp2dIDiZA.roa (hash: Pboeq/VEw/fEiNcfqVmPGeRB5EfnZp8myD9JUVRtoS4=)
2: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
3: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
4: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
5: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
6: HQ5pk500M9r_ovoVxF0QEcohnog.roa (hash: ww8oMO4jWUVQ6/eBdnQNu3m8JDu+2hsoI9UHwgt7uPk=)
7: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
8: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: 4A+J1vdSadjDipjTJEE0QEhmKPtyR55j0Z8OTewEbDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:91:9d:fb:37:66:05:a8:39:af:54:62:a3:78:bd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Oct 21 07:00:20 2025 GMT
Not After : Oct 22 07:00:20 2025 GMT
Subject: CN=6b4208e28baed7636ce6d247a2c6166b4283093a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:9e:61:ea:14:13:cf:b1:cc:6d:6e:79:27:
cd:45:3c:28:32:41:52:a7:ae:b4:f1:dd:e2:28:3f:
3a:52:37:da:ef:3c:88:e7:c0:9c:ba:0d:72:00:80:
c1:00:3d:2e:f2:17:19:67:18:37:2e:bc:77:a4:d1:
49:cd:49:65:bb:eb:5c:77:82:f9:ab:5a:9a:f8:f4:
87:17:21:a8:f4:ac:27:90:dc:a5:a9:19:74:bd:04:
0e:47:94:10:0a:75:05:e8:80:ac:d4:82:ff:b6:3e:
da:28:a9:1a:7c:f2:78:29:32:4b:cf:fb:5f:1f:8a:
a0:61:46:38:21:b7:ee:20:d2:47:ad:2b:e9:e8:46:
bc:cd:e9:47:4d:57:0e:ba:b0:b4:2f:e9:66:39:1e:
fd:de:80:91:63:fd:a6:0c:e8:58:f9:55:46:41:2a:
83:ea:d7:8e:0e:2b:46:81:94:9c:4a:58:6a:03:3b:
b6:31:c4:3f:49:5a:3a:13:4c:08:be:70:2c:9b:5b:
4e:76:0d:20:96:fa:7a:ac:a5:74:1b:cc:4a:92:ed:
fe:84:0f:27:69:fe:96:23:1d:10:91:6e:f2:d5:64:
56:76:63:f1:94:56:f7:78:80:05:1d:5d:ae:83:e3:
25:8d:f4:44:55:ea:79:72:00:20:96:64:1c:74:36:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:42:08:E2:8B:AE:D7:63:6C:E6:D2:47:A2:C6:16:6B:42:83:09:3A
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0a:bf:20:e2:ad:c7:79:b3:0f:6d:8f:98:95:06:d6:50:e2:
47:b4:3e:2e:26:8e:23:f2:90:96:a7:5d:e8:52:c5:31:34:1c:
42:05:f1:dc:af:af:a3:4c:bc:d0:68:04:c0:ac:f4:43:82:eb:
39:12:a2:cc:c7:bd:c2:b9:a5:a9:19:d0:20:f2:cd:04:91:35:
dc:f4:34:3f:71:b5:2a:17:85:1e:aa:57:c3:8b:3a:e5:8f:7b:
fd:28:99:f5:f7:ee:77:7c:b7:6e:3c:d7:98:52:0d:e3:c6:68:
9c:c5:c7:1f:a2:f7:84:89:a2:9b:1c:b3:0f:b8:68:7f:ff:9b:
df:10:ce:9e:bb:6a:08:57:31:4e:8b:d0:fa:5a:27:46:49:b9:
2d:6e:49:9a:9b:5a:55:44:6f:21:4c:39:9f:e1:4f:88:5d:66:
f2:e9:2b:25:08:40:ee:42:0e:d8:03:49:58:36:b6:03:08:a8:
51:33:42:fc:8f:a7:85:3e:73:ba:fc:39:5c:84:f4:cd:49:32:
e8:6f:e2:a0:86:05:51:ee:24:94:b0:24:96:87:50:19:a7:17:
7d:30:26:ea:7f:8d:5f:46:bf:74:85:e0:b7:94:1a:ac:9e:ac:
5a:82:09:ef:e0:6d:57:56:28:e3:cd:34:bd:b3:87:cb:88:77:
ba:15:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:16:14 2025 by rpki-client