Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
File: Ip-w-z0njhsoCnd94gDvvQi6rDA.mft (raw, json)
Hash identifier: WalO7PlmNAPeGZ1OqlrWdPGd0e2/FdcIKvcZhwVwIBA=
Subject key identifier: 46:43:CF:0C:4F:DA:27:F9:49:24:C6:EA:FE:F3:E7:B8:E7:4B:30:1E
Authority key identifier: 22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
Certificate issuer: /CN=229fb0fb3d278e1b280a777de200efbd08baac30
Certificate serial: 019848894D033DDF7B98F03A1586F90AC115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
Manifest number: 0877
Signing time: Sat 26 Jul 2025 21:00:14 +0000
Manifest this update: Sat 26 Jul 2025 21:00:14 +0000
Manifest next update: Sun 27 Jul 2025 21:00:14 +0000
Files and hashes: 1: EdKpa32IZ9Dnd3k-vmeHaMU23Tw.roa (hash: WGOFdfPIgmzQx9aGUgM6u6XYxnkTJOLa0M2Z4HLrsFA=)
2: Ip-w-z0njhsoCnd94gDvvQi6rDA.crl (hash: J0itaby+Y2Bv0id32I6eHcWttuT1xRe2afrNi+t9uCQ=)
3: TaMd7DA-6NrsYwAIJaSvClB4fpo.roa (hash: dkRPf4s5CoCdHNuMtPMADul0c0mdFRvVK8/5OUkpYlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:4d:03:3d:df:7b:98:f0:3a:15:86:f9:0a:c1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229fb0fb3d278e1b280a777de200efbd08baac30
Validity
Not Before: Jul 26 21:00:14 2025 GMT
Not After : Jul 27 21:00:14 2025 GMT
Subject: CN=4643cf0c4fda27f94924c6eafef3e7b8e74b301e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f5:30:8a:7d:a1:31:1a:d2:a4:49:66:6a:af:
0e:60:3b:bb:e3:23:4e:43:59:03:8d:f4:19:f8:2d:
3c:64:5a:2f:cd:48:ff:b3:d2:eb:75:7d:2d:e7:05:
03:cc:ca:5d:9f:6d:c8:8d:36:86:bc:2c:52:02:54:
86:47:fa:29:26:61:d6:83:c8:69:40:eb:ff:47:6e:
13:28:e6:24:94:09:78:01:c4:33:cb:62:b8:17:a2:
71:f4:41:25:62:0d:15:1e:ab:4e:2c:07:b0:75:84:
7f:59:72:e3:d8:bb:1d:e8:4a:58:2f:a0:38:55:71:
68:01:3a:32:27:e6:ad:92:44:fc:de:64:51:bd:61:
48:a5:8f:33:a4:45:d6:d8:90:55:31:9e:d5:dc:cc:
09:28:46:5a:19:a5:8f:2c:14:1b:8a:09:c8:99:5a:
da:8f:36:b6:67:ed:0a:cf:df:db:73:4c:21:c9:2e:
37:22:38:3e:06:ee:d8:9a:f2:37:58:35:86:d5:ce:
27:6e:4d:f3:cd:ab:b4:39:1f:ed:c5:b1:16:af:dd:
46:d6:1b:d8:cc:d5:11:59:23:62:97:a1:18:a4:90:
c8:59:cd:b2:dd:92:75:62:1a:a2:76:35:c1:78:1f:
30:e8:0f:d8:cb:27:2a:09:43:ac:f2:dc:c0:9a:32:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:43:CF:0C:4F:DA:27:F9:49:24:C6:EA:FE:F3:E7:B8:E7:4B:30:1E
X509v3 Authority Key Identifier:
keyid:22:9F:B0:FB:3D:27:8E:1B:28:0A:77:7D:E2:00:EF:BD:08:BA:AC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ip-w-z0njhsoCnd94gDvvQi6rDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/6c54a9-9fe5-4893-9da7-7b986633ac5e/1/Ip-w-z0njhsoCnd94gDvvQi6rDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:30:6b:9a:d5:d1:de:17:db:78:ca:33:e2:7c:9c:5d:00:
1d:86:f3:ef:f1:39:65:55:79:88:2c:bb:5f:a7:2f:8d:a9:2b:
e3:d0:e3:8e:a8:4e:76:49:e9:37:30:32:c1:ea:f7:c7:62:bc:
27:81:29:84:a5:e1:9f:c3:68:db:36:cb:8a:ab:9d:35:65:88:
f4:47:25:34:3a:f5:d2:3f:da:2d:0d:b5:40:ea:bd:6d:2a:0f:
a2:d6:db:2f:50:7a:dc:38:8f:4d:04:38:9f:e7:d4:96:d9:49:
81:55:cd:f9:da:33:03:73:ea:a5:64:6b:43:1c:6f:1f:bf:bd:
99:2b:6c:1c:fd:e3:23:d4:73:44:6d:1a:cd:71:76:a3:91:9f:
4e:bb:5c:b8:8a:27:d7:25:32:65:72:b5:c0:5e:13:e9:b9:02:
c6:e0:5f:a8:9c:0a:b8:89:43:e6:da:28:e1:5f:cf:15:cd:1b:
ab:4d:b8:7f:84:d6:af:69:26:40:74:fb:a8:a0:7e:dd:5b:73:
13:d1:14:63:9c:5f:53:ea:d5:d2:a7:9e:cc:d9:3d:1d:3c:97:
14:86:c2:1e:9b:3e:c3:a7:88:cf:37:b8:5c:7f:6a:f5:b2:e0:
bc:53:3c:11:ec:16:15:6a:f4:22:e5:fc:a2:2d:f9:87:ff:62:
67:42:a0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:13 2025 by rpki-client