Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
File: rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json)
Hash identifier: T0nbxjPadC5u+zNDiT19J8VYBguEU8j7AYN6lNGBNBY=
Subject key identifier: 14:05:A0:98:F0:EE:25:8A:E4:C1:CE:0A:82:61:D6:01:26:20:4F:17
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial: 0198481B897BD559CFC5E846B9E0563935C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
Manifest number: 0168
Signing time: Sat 26 Jul 2025 19:00:20 +0000
Manifest this update: Sat 26 Jul 2025 19:00:20 +0000
Manifest next update: Sun 27 Jul 2025 19:00:20 +0000
Files and hashes: 1: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (hash: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=)
2: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: p+Vymd+7Ocx0qYGxbolL8p3nUq+MVTS2F5+6iGnj88U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:89:7b:d5:59:cf:c5:e8:46:b9:e0:56:39:35:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
Validity
Not Before: Jul 26 19:00:20 2025 GMT
Not After : Jul 27 19:00:20 2025 GMT
Subject: CN=1405a098f0ee258ae4c1ce0a8261d60126204f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:24:25:a0:6f:18:fc:c4:53:6b:aa:0e:d0:
af:36:d0:d1:fe:b7:70:fe:19:94:22:07:02:d8:e1:
0e:ca:dd:18:bf:a2:38:ee:43:1b:25:e2:8f:19:8b:
47:33:e7:1c:fe:7a:7c:16:d7:f8:36:dc:d1:1b:4e:
49:47:d6:8f:d2:da:21:7c:c0:b4:95:bd:73:48:94:
c0:ed:79:37:51:ab:0c:52:ef:1c:d5:b7:42:47:b0:
e8:4c:a8:fe:3c:1a:e8:5f:ed:9c:f1:6e:99:3c:2e:
9f:e1:07:d0:cc:a3:80:a1:a4:c0:e5:92:84:f3:0b:
7f:e2:26:d7:93:08:47:45:b2:df:b7:a6:92:ae:59:
97:cb:6d:88:90:6c:c8:31:0e:f8:aa:e2:ca:c2:c6:
67:5c:b9:aa:4e:2a:a5:89:52:64:4f:6d:3e:5e:fa:
84:d5:e1:e0:66:0a:0b:0f:b6:bd:56:57:fd:d4:3e:
eb:a6:90:83:6a:44:13:60:e7:21:a2:38:59:74:55:
40:ba:7a:ed:a2:6d:4d:f8:11:c8:19:a6:65:a4:c7:
ea:90:f3:f0:b7:2d:f2:7d:44:07:00:51:81:32:fb:
28:ec:54:1e:c1:68:3e:37:4c:d2:57:79:c6:76:4a:
d8:8f:68:32:b7:dc:a5:2c:fa:d2:f6:77:e0:85:04:
b1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:05:A0:98:F0:EE:25:8A:E4:C1:CE:0A:82:61:D6:01:26:20:4F:17
X509v3 Authority Key Identifier:
keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1f:81:e5:21:f9:71:77:27:1a:ed:43:f4:bc:7e:ca:2a:56:
5f:0e:eb:ca:6a:bf:22:4f:be:36:3f:72:96:70:02:2b:7d:d6:
be:b6:c9:47:18:66:26:49:99:59:e2:61:01:64:03:ed:28:a8:
a8:77:4f:14:a1:10:40:a0:fa:76:76:3f:f7:56:42:ce:a0:98:
2a:8f:6c:46:4a:56:2d:53:e0:c8:e2:a2:ed:10:30:95:54:9b:
95:e5:a0:d6:97:bf:e4:44:23:cb:2d:18:ce:46:c5:fc:af:31:
09:78:0c:cc:8c:99:88:e0:9d:48:41:d2:74:1b:bf:b0:a4:a4:
c3:74:0a:b9:3d:ae:17:a6:9b:89:b5:16:28:e4:01:56:0a:cc:
a8:a7:f4:17:72:a1:56:c6:f4:f8:04:28:c4:40:11:01:5c:40:
44:61:4a:99:96:02:1d:d3:6a:14:cb:4d:6a:c9:3d:53:08:2e:
ad:fe:ae:0f:fa:19:87:f0:78:3e:97:43:b2:b1:bf:6b:09:96:
86:1b:dd:85:8e:07:b4:e6:c9:09:2b:9c:89:71:96:66:c3:e9:
4b:a4:bd:53:82:82:db:84:6f:80:5a:89:93:a4:7a:61:5f:ac:
88:e0:1e:2b:c9:79:34:34:46:90:9f:73:68:71:02:a4:93:fc:
1b:58:3b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG4l71VnPxehGueBWOTXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMDk4NzFjZmQ2MTY4MDA2NzdhYjIzMjllY2JhNjFkZTc3
NzU3ZTYwHhcNMjUwNzI2MTkwMDIwWhcNMjUwNzI3MTkwMDIwWjAzMTEwLwYDVQQD
EygxNDA1YTA5OGYwZWUyNThhZTRjMWNlMGE4MjYxZDYwMTI2MjA0ZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH8kJaBvGPzEU2uqDtCvNtDR/rdw
/hmUIgcC2OEOyt0Yv6I47kMbJeKPGYtHM+cc/np8Ftf4NtzRG05JR9aP0tohfMC0
lb1zSJTA7Xk3UasMUu8c1bdCR7DoTKj+PBroX+2c8W6ZPC6f4QfQzKOAoaTA5ZKE
8wt/4ibXkwhHRbLft6aSrlmXy22IkGzIMQ74quLKwsZnXLmqTiqliVJkT20+XvqE
1eHgZgoLD7a9Vlf91D7rppCDakQTYOchojhZdFVAunrtom1N+BHIGaZlpMfqkPPw
ty3yfUQHAFGBMvso7FQewWg+N0zSV3nGdkrYj2gyt9ylLPrS9nfghQSxKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQFoJjw7iWK5MHOCoJh1gEmIE8XMB8GA1UdIwQY
MBaAFK8Jhxz9YWgAZ3qyMp7Lph3nd1fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWIt
YjQzZGJmODk1Y2ZlLzEvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWItYjQzZGJmODk1Y2Zl
LzEvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgB+B5SH5
cXcnGu1D9Lx+yipWXw7rymq/Ik++Nj9ylnACK33WvrbJRxhmJkmZWeJhAWQD7Sio
qHdPFKEQQKD6dnY/91ZCzqCYKo9sRkpWLVPgyOKi7RAwlVSbleWg1pe/5EQjyy0Y
zkbF/K8xCXgMzIyZiOCdSEHSdBu/sKSkw3QKuT2uF6abibUWKOQBVgrMqKf0F3Kh
Vsb0+AQoxEARAVxARGFKmZYCHdNqFMtNask9Uwgurf6uD/oZh/B4PpdDsrG/awmW
hhvdhY4HtObJCSuciXGWZsPpS6S9U4KC24RvgFqJk6R6YV+siOAeK8l5NDRGkJ9z
aHECpJP8G1g7fA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:49:07 2025 by rpki-client