Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: sOhFJNUnBLdDn8LXzlm4u8FHaRxEdQ9Ry7W68jmN+YA=
Subject key identifier: F4:56:EB:4D:7F:65:02:53:1A:C5:16:05:51:8E:1C:60:18:EE:A9:43
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 0198443ED022DFF4356DCEE88ACDFED724B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 1591
Signing time: Sat 26 Jul 2025 01:00:23 +0000
Manifest this update: Sat 26 Jul 2025 01:00:23 +0000
Manifest next update: Sun 27 Jul 2025 01:00:23 +0000
Files and hashes: 1: bI5hqVT8m0qS2JmySaAVyieiKDc.roa (hash: Ur47592mLsTtDVQWZDc8e3eMtHnqyDHoxs3kpjL/ez4=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: fj1ry9UMvgmvIuBqAKFqGRI9aRRQqo2Nh8YqHgli19c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:3e:d0:22:df:f4:35:6d:ce:e8:8a:cd:fe:d7:24:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Jul 26 01:00:23 2025 GMT
Not After : Jul 27 01:00:23 2025 GMT
Subject: CN=f456eb4d7f6502531ac51605518e1c6018eea943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:cd:cc:1e:73:53:57:5e:b3:f8:30:49:8a:
39:a6:cd:f5:f2:dd:fd:3f:31:2f:35:24:2c:f8:67:
0a:c6:d7:36:b2:87:87:d0:97:92:c1:4c:fc:84:93:
d2:4e:f0:b2:c1:39:5f:0d:34:98:b3:82:36:6a:9e:
35:98:38:e4:16:e3:ae:71:a1:71:8a:3d:a1:42:1a:
1e:50:64:b2:d3:53:e6:fa:c1:6f:66:d7:8b:d3:01:
5f:2b:5f:78:42:03:47:7d:d7:31:fb:10:68:df:46:
1e:dd:87:1a:b7:e4:f1:a4:8d:cc:ab:8a:77:41:4b:
32:fc:e6:80:e0:9a:01:ce:63:7d:76:01:10:05:86:
72:92:4b:62:2e:57:d4:29:ca:a0:11:0f:ec:0b:fa:
1e:6a:9d:b7:e6:d5:02:9d:07:02:a0:72:6c:f8:d1:
f6:cb:38:48:81:60:0c:19:8f:7a:13:a9:0a:d0:3a:
4e:5c:f1:1b:be:24:b5:67:2c:93:1a:a4:5c:9b:1d:
60:df:11:d2:de:ce:34:d4:e6:2e:33:25:5d:5e:e3:
17:f2:76:57:56:ac:de:b6:a2:8e:83:d8:73:e3:4f:
3f:89:4a:d6:a3:55:c1:fd:bc:00:56:06:f6:67:15:
3e:0d:d0:ff:dc:92:aa:d2:3b:c7:3c:c2:dc:cc:05:
fc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:EB:4D:7F:65:02:53:1A:C5:16:05:51:8E:1C:60:18:EE:A9:43
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:18:c3:8f:c5:00:34:93:ab:fd:10:fb:5a:42:e4:84:93:38:
cc:b3:b2:7e:10:3f:9e:d7:9b:80:74:57:b5:07:9e:5b:37:95:
d9:fe:c5:0a:06:20:19:a8:40:4f:e9:ec:fc:f1:be:07:54:22:
88:6b:f8:f7:b1:71:07:6f:0b:6f:48:0b:33:03:f8:9a:e2:50:
32:6d:a7:21:5d:f0:e7:43:0b:0f:a7:8e:44:9a:43:31:cb:10:
03:4e:f1:ab:41:7d:83:de:4e:48:fa:e0:03:d5:22:1b:a9:bc:
ab:5c:51:50:ee:f0:f2:30:1a:61:ea:c3:6e:3f:8b:52:7a:14:
dc:28:eb:40:89:c6:7a:bc:ed:c1:4e:69:85:06:c5:4e:2d:40:
eb:df:68:a9:4b:a1:13:b6:1d:c0:66:db:27:32:4b:da:7e:22:
f9:aa:92:29:07:62:be:bb:e3:a3:d8:bb:23:a0:1b:c1:11:7c:
2e:ea:d2:7f:0f:6f:c7:1a:86:53:54:ab:eb:a3:2c:a5:1b:4e:
87:43:e9:80:db:17:f9:91:39:71:3e:2b:d8:5a:a8:78:89:a6:
44:fd:b8:4d:9a:22:e8:2b:d7:e0:b4:f3:7c:8b:ea:46:af:45:
35:66:9e:c0:cc:25:3b:8d:cf:e3:fa:88:c5:7f:a2:f1:c1:61:
78:6b:be:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:33:04 2025 by rpki-client