Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: xXFKACYwusKL4kt8Mk56sDYFOYeaeTaTwkWRQHP+HEE=
Subject key identifier: 66:88:7E:36:D3:39:6C:4B:7C:C7:9A:C4:2C:5B:9F:3A:B2:1B:BC:77
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 0198477818E3D315286C59C8C7417C11E74F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:01:49 +0000
Manifest this update: Sat 26 Jul 2025 16:01:49 +0000
Manifest next update: Sun 27 Jul 2025 16:01:49 +0000
Files and hashes: 1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: Lujda36EVK0VjhiSKRfMCJG+ljl567PRE9EFda869Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:78:18:e3:d3:15:28:6c:59:c8:c7:41:7c:11:e7:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Jul 26 16:01:49 2025 GMT
Not After : Jul 27 16:01:49 2025 GMT
Subject: CN=66887e36d3396c4b7cc79ac42c5b9f3ab21bbc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:29:fc:cd:1c:5b:c6:1e:a4:ef:68:f5:b6:
d1:df:ca:da:ac:3b:b9:a0:1e:ad:68:68:d4:4b:2e:
99:32:ea:d3:69:1f:6f:9e:9b:5d:d7:e1:fc:97:92:
8e:54:8c:63:26:d1:35:b9:14:76:8a:f8:a3:67:00:
c2:c8:94:db:d2:8a:2e:dd:90:2f:f0:53:f9:72:d2:
37:ba:4b:98:e7:f1:a1:31:7b:38:c9:de:73:b5:94:
2f:c9:a3:59:60:78:60:10:e8:2b:6f:6f:21:10:e9:
ac:bd:c4:81:9f:2b:a9:e6:32:f4:1a:54:a6:16:fb:
e9:82:f8:97:93:11:8e:d1:e5:54:c0:09:f6:d3:a1:
e7:e4:d8:28:32:b7:43:05:aa:a0:08:b2:40:2f:f1:
f1:c4:4b:cb:63:61:13:e7:61:7e:72:03:3b:66:c4:
24:ab:8e:66:69:ad:a5:cb:e8:d0:ae:50:7a:c8:c9:
1c:da:60:fa:cd:2d:19:55:eb:15:f0:ff:56:5d:c4:
a8:6a:91:ca:ca:ba:5b:d2:1c:25:27:da:b6:b1:17:
d2:fa:fe:91:c2:ef:1d:92:e5:bc:d7:29:ea:b2:70:
de:43:50:c7:9f:1b:3c:02:f9:77:09:05:97:64:f4:
07:36:0f:79:35:fa:77:f8:e6:ec:3a:d5:a0:ca:1e:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:88:7E:36:D3:39:6C:4B:7C:C7:9A:C4:2C:5B:9F:3A:B2:1B:BC:77
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c7:4e:09:9c:75:3a:ca:09:4a:0e:8e:15:71:2d:1d:64:06:
37:ab:f7:7a:90:c0:22:ef:ec:51:e3:52:84:ea:16:f1:57:32:
c2:9b:84:14:a0:f5:3b:a2:fd:e3:d4:59:39:bb:b8:da:dd:81:
08:d6:b5:89:57:88:04:bf:2f:43:35:b1:2d:fb:81:06:a3:00:
77:78:48:78:48:40:60:b4:38:7b:b9:c2:d5:42:61:b5:43:3d:
8f:24:d9:f5:84:7d:fc:5c:c8:a2:bc:3b:a5:40:a3:74:79:21:
db:67:0b:c7:6d:33:7c:98:74:79:73:e1:56:76:04:0e:a6:b1:
b1:9f:3d:29:4e:97:22:62:33:bd:23:d5:8c:1c:34:2d:83:a6:
87:2e:33:06:01:91:e2:30:b9:96:0f:58:08:ae:a1:46:7d:c4:
54:eb:b9:6d:20:9b:5f:60:3a:49:29:85:18:4d:67:fc:a6:29:
b4:25:ef:b7:4f:80:c3:7e:0f:a3:08:6e:53:35:09:eb:34:52:
6a:1b:9f:5a:31:68:ec:cf:dd:dc:4e:14:93:ff:e3:0a:f5:6c:
46:51:ab:2f:c0:9b:90:68:95:60:ac:12:64:16:6a:4b:04:b6:
fb:69:f1:55:3f:86:2e:36:e6:f8:42:44:17:c5:8b:dd:88:84:
46:a8:8d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:26:36 2025 by rpki-client