Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
File: mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft (raw, json)
Hash identifier: 52xobxaMvjsuHc3mOnHYTZg0IOBpejFbdZh46ea4vtM=
Subject key identifier: 82:8E:CD:80:B9:A2:35:65:8D:3E:5B:3B:86:EC:00:49:C6:2E:40:48
Authority key identifier: 99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
Certificate issuer: /CN=996f903f91a85a60c546ee1141348cc3c8036927
Certificate serial: 01985231475B2245CEB944E401F880FBEC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
Manifest number: 1298
Signing time: Mon 28 Jul 2025 18:00:17 +0000
Manifest this update: Mon 28 Jul 2025 18:00:17 +0000
Manifest next update: Tue 29 Jul 2025 18:00:17 +0000
Files and hashes: 1: mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl (hash: pnlpQVv4h0XExjn5eYCeo7cxoqvJA8UlNNAcOGa9sNg=)
2: oGPLcgnT5_jMQFeXtQh3bXaXriM.roa (hash: QUvCaj08Q2TK+WnTDqsu5pyPq9XzMOcObz9WAotvcYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:47:5b:22:45:ce:b9:44:e4:01:f8:80:fb:ec:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996f903f91a85a60c546ee1141348cc3c8036927
Validity
Not Before: Jul 28 18:00:17 2025 GMT
Not After : Jul 29 18:00:17 2025 GMT
Subject: CN=828ecd80b9a235658d3e5b3b86ec0049c62e4048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:fc:fd:b5:bb:c3:62:5f:11:7e:03:67:8e:
00:29:2e:ec:1b:08:d7:56:14:c3:dc:93:4d:4f:a4:
ea:f4:1e:64:03:f4:96:4c:9e:3b:ed:19:64:78:d2:
35:75:33:ab:45:77:99:01:1f:3e:0c:f2:09:d7:23:
e2:c0:37:a8:6f:b7:3e:8f:eb:de:39:7c:b6:76:8c:
e9:bc:fb:75:3b:1c:07:f9:2f:a4:a1:8a:4d:15:11:
90:30:c6:6d:bb:5c:0b:71:8f:98:f7:08:08:74:14:
95:3c:91:db:51:1e:db:59:13:74:b8:b8:92:78:a7:
25:15:c4:94:b8:95:85:b1:3a:54:ec:c0:9d:57:63:
ee:fb:d0:cb:25:d4:72:dc:92:38:98:b4:78:0e:18:
fb:ed:ec:c0:e8:6c:e6:26:91:a5:cb:07:77:ef:4c:
63:31:5d:f7:c4:75:55:d1:2a:ba:12:5f:d2:84:81:
b8:70:68:73:21:a3:ce:50:ed:3c:e0:40:de:84:6c:
a7:9f:82:79:d1:af:97:ca:7d:7e:05:a7:d0:45:e0:
00:62:7a:25:e5:7f:7f:8c:93:32:25:b9:13:26:64:
74:b0:d2:d7:27:37:d9:7d:e0:a5:61:5d:fe:39:6a:
78:aa:31:40:f0:5b:16:2e:d2:88:0c:55:1e:ff:d9:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8E:CD:80:B9:A2:35:65:8D:3E:5B:3B:86:EC:00:49:C6:2E:40:48
X509v3 Authority Key Identifier:
keyid:99:6F:90:3F:91:A8:5A:60:C5:46:EE:11:41:34:8C:C3:C8:03:69:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mW-QP5GoWmDFRu4RQTSMw8gDaSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a20101-1c9f-44c5-8077-5190f7869a7f/1/mW-QP5GoWmDFRu4RQTSMw8gDaSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f8:fa:9e:df:d1:db:ce:55:25:1a:41:88:5d:13:37:d7:7f:
21:cf:53:ee:2e:30:87:c0:14:67:2a:d4:ea:37:1a:47:ff:50:
a7:53:ef:e7:e4:70:c2:9a:d0:6e:d8:a8:52:f0:56:b2:5f:97:
ad:76:22:3e:75:7d:93:fe:98:48:ae:0a:39:08:19:d1:7a:aa:
a7:24:fd:1e:95:b7:4b:23:b2:e5:86:86:9f:f4:6a:3a:c9:1c:
d4:23:37:15:fe:fd:34:89:0f:15:06:c2:88:f6:0b:de:ec:45:
8b:2d:f6:d4:6e:21:0e:f5:fb:eb:5c:30:53:4f:07:3a:d1:f9:
ec:86:49:aa:07:f9:03:65:76:8f:d9:dd:77:3f:d2:2b:e3:0c:
1a:8c:f2:4a:4b:25:1d:ed:10:55:e7:a3:2b:44:10:c2:c9:c8:
c0:08:98:d9:4d:e1:cd:6e:63:19:c3:0b:7f:e8:dc:2c:61:c8:
a9:e7:2a:34:0b:46:ac:6e:b6:e0:e2:b8:0f:58:c7:cc:0a:5c:
7a:54:c5:a5:cb:0e:44:85:d7:50:64:10:a9:61:85:0e:be:c5:
8c:9c:01:5e:f5:2f:b3:1e:3c:2c:dc:c1:ea:3d:e1:3a:43:f2:
10:ac:e6:e9:6a:c4:b8:c9:bf:df:05:78:60:95:4e:75:26:de:
82:bf:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:59:51 2025 by rpki-client