Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: s6CuKRC0Y1ExWqT4S2vqrAQfBF/lla1BZEd+Ux9GGOg=
Subject key identifier: 30:B5:A8:7D:A0:A5:65:8A:78:36:66:A3:6E:2C:2C:09:60:E0:51:DE
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 019841E2A5D222BA5965D94373E94C4B00E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 1590
Signing time: Fri 25 Jul 2025 14:00:29 +0000
Manifest this update: Fri 25 Jul 2025 14:00:29 +0000
Manifest next update: Sat 26 Jul 2025 14:00:29 +0000
Files and hashes: 1: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (hash: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: BZj085Swq8mVg8g5bVhJ04WTXd3L2n3dmVVTqJlirrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:e2:a5:d2:22:ba:59:65:d9:43:73:e9:4c:4b:00:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: Jul 25 14:00:29 2025 GMT
Not After : Jul 26 14:00:29 2025 GMT
Subject: CN=30b5a87da0a5658a783666a36e2c2c0960e051de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2c:03:32:a9:b0:23:c0:1e:d7:bb:a2:f5:8b:
09:54:d3:79:58:0c:c2:c3:5f:c2:58:1b:f8:18:13:
98:3a:99:39:8a:31:c2:7c:c6:30:50:75:a9:cd:e4:
02:ce:f6:5a:cf:b6:5c:1f:b9:f2:ee:cf:2b:14:46:
08:02:2c:a6:9e:03:7f:d2:fd:40:06:30:c3:c3:be:
92:d7:72:80:85:5c:5b:91:43:9d:9b:35:4f:18:dd:
ae:c2:b6:63:20:95:59:fc:95:7d:f4:c9:04:14:33:
31:39:a4:e7:3e:f2:6e:9d:91:a5:34:4e:ae:ba:b1:
a5:89:88:d8:40:0b:ab:c8:df:0d:04:20:aa:44:aa:
17:ad:3e:16:8e:49:59:7b:87:43:01:2f:c8:fa:64:
6d:fb:6e:6e:57:ef:e2:9f:14:62:1c:b5:7a:49:87:
de:a8:81:ab:52:a0:7e:6b:0d:42:61:44:a7:a8:93:
03:48:3c:8a:78:57:03:85:2d:f8:98:4a:70:f2:1a:
50:9d:f6:db:95:91:4e:fa:02:1a:58:c9:60:38:0f:
54:dc:25:b0:1c:b7:a7:ea:ff:f5:2e:86:25:d3:58:
8f:5f:ac:db:14:e6:b4:79:d7:1b:b7:5e:2f:8c:48:
eb:c9:3b:79:76:a9:10:7b:46:56:04:9d:00:67:59:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B5:A8:7D:A0:A5:65:8A:78:36:66:A3:6E:2C:2C:09:60:E0:51:DE
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5b:12:ca:a9:ee:3c:40:c5:e4:8a:94:5f:93:9f:83:44:e8:
ee:e8:82:b9:3c:0d:76:45:c2:59:33:5c:66:93:86:39:b4:24:
e8:27:7e:42:1f:43:88:44:29:c1:7a:67:56:b4:70:0c:8a:dc:
f9:47:bb:3a:3c:76:9e:0f:c5:79:41:e8:5e:44:aa:88:4a:0f:
2a:8f:d2:4c:fb:5e:35:a9:0c:3c:68:7d:de:41:bb:85:b4:93:
7b:8b:c2:88:52:92:b2:17:7b:bd:c9:10:f5:5f:4b:71:60:1f:
92:32:14:dd:4e:9f:d2:92:2f:b0:1b:e7:33:ef:20:9d:a8:07:
b4:e0:92:b0:d8:3c:b3:b0:53:cd:80:4e:1b:33:de:69:f8:5e:
ac:9c:fb:ee:e0:0f:e3:f0:94:04:ec:bc:eb:51:d8:ea:6c:6f:
1d:66:f3:f0:34:a3:e9:75:e8:51:d8:93:1c:b4:cc:87:0e:ba:
a7:96:02:a7:4f:d7:4b:97:85:53:c1:db:a5:30:5b:59:26:0c:
f3:fd:3c:e0:42:36:42:2b:a2:1b:14:46:59:41:f8:08:e3:ca:
56:6d:84:1a:f3:d1:6d:27:c0:5f:b2:a6:15:c2:c2:72:e8:ae:
9c:72:70:73:46:94:04:d1:1c:dc:4c:6a:ca:ff:07:af:b2:20:
57:58:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 22:51:36 2025 by rpki-client