Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: hLQbipenhTgAdyOwogca+MjrB11GeYeDt/EnUHTO3NQ=
Subject key identifier: 6C:89:FE:05:E8:73:EA:DF:E7:9B:56:01:C8:F4:99:50:DF:4E:45:73
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 01984AE5B53CFD54DBF7E96ED61D94DF3961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 08:00:24 +0000
Manifest this update: Sun 27 Jul 2025 08:00:24 +0000
Manifest next update: Mon 28 Jul 2025 08:00:24 +0000
Files and hashes: 1: 9Z5tAyPoNAUrhK3XQbPirY-i870.roa (hash: JYdT76bIYS9WiRnbn5ANGOhlwfQ42Z47wnU1M4quBe4=)
2: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: IFa/7pMPFEM8A6YjYUC0FHUxL7YmFGob+pCET6nf8N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b5:3c:fd:54:db:f7:e9:6e:d6:1d:94:df:39:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Jul 27 08:00:24 2025 GMT
Not After : Jul 28 08:00:24 2025 GMT
Subject: CN=6c89fe05e873eadfe79b5601c8f49950df4e4573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:0f:8d:fe:2b:16:1c:bd:a3:ca:76:b4:6e:
87:57:ba:70:97:d6:27:5e:90:96:cc:ad:68:d5:0a:
1a:7f:00:55:0f:b2:32:c1:fb:a2:ac:f0:d0:a7:a6:
78:47:20:1f:24:c8:76:77:e2:dd:26:67:0c:78:cc:
80:6b:87:5d:49:67:f3:78:39:79:be:89:ec:c3:d0:
6a:94:ab:97:50:45:a9:6d:e5:1c:3e:12:6e:14:ec:
2c:04:dd:e6:a5:3c:cf:51:93:c0:e8:e9:45:71:0d:
25:54:e4:0d:4b:a8:cd:e8:b6:87:fc:26:c9:9e:46:
f0:1b:92:02:d8:86:78:7a:a3:30:57:6c:ce:ce:7f:
c9:25:74:fe:08:fe:06:5c:4f:eb:bc:7f:c0:eb:2a:
be:a0:08:11:57:a2:39:0d:66:8b:04:4b:44:22:cc:
df:2c:f6:0d:87:cf:dd:41:cc:a7:5e:65:ee:bf:2e:
07:48:35:30:8b:12:7a:10:c9:37:cc:1b:74:4e:15:
ef:3c:0b:ed:0e:c2:67:8d:0f:0e:5d:41:3d:dd:4b:
d5:c5:3e:d4:28:ba:5d:81:0c:11:45:bc:8e:03:f4:
8b:41:01:df:66:6d:1a:d9:7c:4d:54:a5:f0:b0:45:
97:92:f4:8e:67:53:a5:d7:ad:c3:f9:70:af:c7:90:
fc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:89:FE:05:E8:73:EA:DF:E7:9B:56:01:C8:F4:99:50:DF:4E:45:73
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7a:6f:69:e9:7f:33:d4:24:f3:ba:79:46:7e:51:a6:f4:39:
3d:35:fa:fa:f0:bc:62:86:73:bf:47:ce:26:ae:d9:9c:90:32:
77:4b:ec:61:7b:f8:36:87:55:11:e8:95:b2:fa:32:59:a3:21:
ff:26:98:a1:01:55:08:de:4e:aa:2a:9a:5d:c3:d3:b2:8f:67:
af:c9:75:7a:17:02:1a:9e:cf:35:20:1f:93:67:fe:db:99:c2:
68:f6:b3:9e:0c:7b:03:9f:3d:8b:31:3b:fd:64:05:fe:71:5f:
cc:e5:a8:c5:5b:48:08:f5:4c:df:6e:2e:c4:36:57:7a:4d:20:
92:4a:c5:31:72:54:6d:c1:de:52:ed:0d:7a:85:8e:89:59:b1:
21:dd:08:a4:1f:50:51:73:66:05:f6:70:f2:05:02:a8:49:a9:
ea:5a:cf:10:49:4f:d6:2e:ca:2f:da:33:47:6c:b8:f4:60:2d:
29:2f:c1:d8:a0:2e:83:f2:12:39:34:10:7f:23:a8:55:a3:78:
5b:5d:b4:d5:7a:19:a2:de:97:4a:d3:14:41:2a:b6:d5:d0:43:
b9:b0:a8:50:67:02:eb:9e:26:ca:2c:b9:1c:fa:a9:3c:82:99:
af:7a:d8:09:ab:bc:28:4a:48:3a:45:a0:f9:20:65:60:fc:14:
42:a6:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:20:28 2025 by rpki-client