Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: bIaWXMkfowEJK8a+Fv92Iwmu9/eKXzSdbFWyF/46f5M=
Subject key identifier: 18:37:89:37:68:53:D4:AF:09:1E:B8:73:76:04:F7:26:6C:0B:D8:C3
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019853E8CCB04A1B87C58659E6DBE617348A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 1106
Signing time: Tue 29 Jul 2025 02:00:22 +0000
Manifest this update: Tue 29 Jul 2025 02:00:22 +0000
Manifest next update: Wed 30 Jul 2025 02:00:22 +0000
Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: EwzgGnorTMOKnuC8i2U8eYvQ7eRq4C8b/HiSbmqb98c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:cc:b0:4a:1b:87:c5:86:59:e6:db:e6:17:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Jul 29 02:00:22 2025 GMT
Not After : Jul 30 02:00:22 2025 GMT
Subject: CN=183789376853d4af091eb8737604f7266c0bd8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:3a:ed:3b:3f:b0:c2:76:1d:b2:d7:49:f5:
0f:98:bc:e5:b7:31:67:e2:e3:58:2a:c7:ba:47:f0:
3f:3f:34:a4:86:34:fb:91:ba:a2:bc:bf:5e:b9:ac:
bc:2b:44:63:81:aa:ab:c1:af:20:70:1e:78:24:17:
ed:0a:53:38:11:83:61:cc:28:15:cb:41:c4:ef:38:
40:f4:9e:6f:7f:86:fb:32:30:5a:fb:06:62:8e:c6:
7e:5e:85:b4:a0:bf:62:d1:89:0c:55:52:25:41:9d:
d8:a5:97:f4:08:39:5a:18:2c:61:f0:a5:81:ac:53:
2a:9a:97:df:6d:aa:2e:a0:8e:60:bf:e6:39:9c:79:
40:d7:b9:e6:32:54:b0:c9:a0:77:ea:ea:7d:5c:56:
82:31:cf:79:d8:6b:65:53:ae:d5:fc:7b:f1:51:ad:
dd:e1:08:72:69:da:a6:55:34:c3:dd:fe:8d:40:8b:
21:bd:39:91:5e:71:a3:47:ce:6b:f7:36:7f:8c:45:
7b:df:e4:12:89:6b:f5:60:f6:ff:c8:e8:80:10:41:
0e:6c:00:6c:8c:ab:01:64:ff:fc:cf:d4:87:68:8a:
63:d2:01:c9:5c:be:b3:18:b4:18:8e:4f:46:ff:69:
f7:6b:20:54:5e:a5:be:79:fd:08:95:25:a4:5d:61:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:37:89:37:68:53:D4:AF:09:1E:B8:73:76:04:F7:26:6C:0B:D8:C3
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e7:22:66:46:3b:fa:4c:ef:75:ff:6a:d1:14:65:c3:85:88:
22:6d:56:35:b0:f9:a7:1c:08:ed:cd:89:a7:70:e0:0a:28:89:
2b:cd:b0:9b:6d:b3:6d:48:69:87:53:f8:65:a6:6b:bb:86:61:
40:64:3b:c4:96:9a:70:76:b1:4b:a4:26:5e:55:95:e1:dd:63:
53:26:e9:07:55:34:1a:05:ef:60:a9:a1:24:ff:35:c9:65:34:
62:fb:c0:23:16:6b:d4:5f:3e:09:0b:47:65:61:46:a6:51:a1:
12:d9:9c:a6:0a:70:e1:65:a0:e1:40:32:77:4f:22:47:54:6d:
75:25:60:f7:88:b6:9b:68:e1:de:de:af:fd:91:9a:0d:59:dd:
9f:2a:66:03:7b:58:37:5e:f1:dc:84:75:82:06:b9:9f:3f:1d:
15:b7:ea:e2:1d:49:98:51:e3:31:c5:31:9b:fb:28:82:b4:a9:
ac:36:f3:04:46:2e:9f:ee:b9:0d:6b:1a:f4:b6:a0:43:b3:f4:
86:fb:a8:c1:74:eb:37:5f:84:13:19:26:13:a3:0b:28:df:59:
f8:3c:b9:ab:32:de:f8:c3:1b:8a:91:8b:82:37:c8:de:5a:9f:
b8:a6:09:5c:94:c4:a5:c6:5d:6e:b2:7e:86:ce:0a:ad:8c:24:
dd:2c:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:32:04 2025 by rpki-client