
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: KSaB1Db50ppNeaKaNmG3dfEBURFztbxudWwzuLZRhSk=
Subject key identifier: F2:8D:F7:5B:B0:19:B0:BA:40:C1:81:09:35:BD:4F:8F:F3:8D:73:8E
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 019845F62215D347FD9BD3C5B1EA2963DD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 1127
Signing time: Sat 26 Jul 2025 09:00:15 +0000
Manifest this update: Sat 26 Jul 2025 09:00:15 +0000
Manifest next update: Sun 27 Jul 2025 09:00:15 +0000
Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: sGwlPav8bgfP91HWXZ9cKAXkZNDPvqg7BvHLAgPP0aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:22:15:d3:47:fd:9b:d3:c5:b1:ea:29:63:dd:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Jul 26 09:00:15 2025 GMT
Not After : Jul 27 09:00:15 2025 GMT
Subject: CN=f28df75bb019b0ba40c1810935bd4f8ff38d738e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:4c:a0:93:00:11:da:da:4d:a4:52:be:0a:
4b:6f:36:cd:a1:87:d2:a2:32:b1:b7:b3:ee:78:15:
45:fa:43:d9:65:bc:f3:57:3a:ff:43:90:81:ef:e2:
e0:46:15:da:d0:ee:d1:f1:db:ba:b9:73:97:00:d6:
b3:de:9e:8d:16:4a:29:ea:32:7b:e2:62:08:66:10:
21:47:a1:84:c9:73:68:6e:49:f6:8e:40:4f:99:03:
e5:56:44:93:fd:df:ba:fd:67:b7:ec:a2:08:24:af:
c2:f3:9e:ab:5a:dc:c9:50:35:4d:a9:d8:03:38:cc:
c5:ea:25:d1:2e:04:b8:08:c0:ad:5f:57:31:98:5e:
b5:81:0f:32:51:21:35:70:3c:01:7a:e4:cc:5a:c6:
66:65:0f:8c:30:48:7b:c4:ad:e6:c8:d9:a6:21:6e:
26:a1:d1:eb:98:6d:3e:3d:55:98:95:ba:a3:b5:d8:
75:2a:71:ab:47:ce:fc:83:f4:78:7a:e1:0a:4e:cc:
76:da:fb:59:f0:6b:46:5e:2a:3f:29:c2:9e:dc:41:
c2:b8:11:b3:8c:b1:cd:cc:55:e0:0e:af:e8:1f:d3:
71:c0:02:60:94:e8:df:02:02:d1:f4:d5:fd:7a:ac:
b6:16:60:3a:7b:b5:07:38:32:db:72:05:83:b0:20:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:F7:5B:B0:19:B0:BA:40:C1:81:09:35:BD:4F:8F:F3:8D:73:8E
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:02:52:58:10:9d:03:2d:0b:e2:97:09:f5:11:3c:cc:ed:af:
71:e1:44:82:33:dc:9c:b6:20:85:62:79:6b:8e:51:4f:1c:0a:
d8:2a:7c:ef:68:0c:e4:40:a6:f2:6d:dc:db:0a:01:95:f8:ac:
19:68:43:c1:96:89:e3:8e:cb:07:82:ab:54:c1:2e:10:69:ee:
63:7f:a0:1b:b6:b1:6c:d6:27:fe:33:b4:1b:86:fc:c3:9c:bb:
1c:25:6a:93:c2:96:c3:1f:ad:0e:f5:71:d7:fc:43:d5:f5:b3:
98:06:ff:a6:84:08:57:79:45:b2:1b:1d:63:02:03:bf:ad:d1:
6f:ec:d0:f1:36:5a:62:45:92:c6:72:fd:fd:06:b2:3c:a8:19:
85:9d:32:87:8e:03:8c:c6:ec:a8:43:4d:ef:ee:26:d8:ec:35:
4b:33:0a:a9:25:0a:82:d3:55:44:32:55:87:c1:ef:84:aa:53:
5d:da:84:5e:fa:04:57:e5:73:24:12:4b:60:10:31:73:a9:5c:
f1:c8:71:11:f9:0a:84:a4:3f:c6:12:66:4b:cb:0e:af:58:8e:
f4:02:25:0b:d8:78:97:58:5c:46:36:40:b7:55:8d:76:0d:2d:
f5:4b:14:48:fa:08:13:3d:36:61:5c:c0:4b:ec:00:fd:e3:89:
2f:e2:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:19:27 2025 by rpki-client