Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: KCDhBNZOMlumk7E2roq/ymwOxZVgati+c4nMnOnsB7Q=
Subject key identifier: 40:17:53:BA:18:09:13:C5:41:A5:AC:E7:51:09:88:6D:E1:FC:82:DB
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 01984966937E65F598FE946688BFE7B905AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:01:55 +0000
Manifest this update: Sun 27 Jul 2025 01:01:55 +0000
Manifest next update: Mon 28 Jul 2025 01:01:55 +0000
Files and hashes: 1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: 6pFEUcra9k96Kk+jYEOLQ7py9tC+n7SxjZS4s2OghJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:93:7e:65:f5:98:fe:94:66:88:bf:e7:b9:05:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Jul 27 01:01:55 2025 GMT
Not After : Jul 28 01:01:55 2025 GMT
Subject: CN=401753ba180913c541a5ace75109886de1fc82db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b8:14:b4:8d:43:95:c5:d0:91:3d:78:86:17:
10:50:67:d2:84:e1:0e:97:96:35:4a:dc:51:cb:da:
74:48:0e:b8:41:29:b5:e7:bf:ad:9c:8a:f2:0e:01:
55:32:79:8c:5e:4e:88:9c:9d:5b:20:f7:c0:50:23:
77:08:be:c8:83:c4:2a:e8:32:f0:bc:bb:60:8c:ce:
3c:9b:10:e5:37:1e:83:62:2a:32:0a:0a:15:66:a2:
e0:04:b1:11:3a:6a:ad:e0:dc:6b:b7:25:a8:0e:62:
2d:01:66:e2:49:5c:71:27:d0:e9:8a:43:e5:23:5d:
26:09:98:11:b5:7c:4e:1b:28:fc:ca:63:a8:a5:e4:
39:e5:af:a6:b2:fb:1e:ae:45:d9:01:df:3c:08:e2:
a4:92:74:36:77:d2:9a:45:1e:34:a7:72:91:3c:2d:
0a:bb:ae:e9:78:d4:fe:e0:06:0a:e4:bf:90:00:44:
cf:36:23:10:9a:bc:3c:fd:58:bf:14:32:d9:f4:7a:
61:8b:21:de:f3:3f:39:86:86:14:15:99:28:95:b7:
9b:5a:1e:9c:e5:97:72:78:68:d5:5d:82:0b:74:50:
c6:bc:ed:3c:de:98:da:c1:07:a4:7e:56:e1:05:fc:
a3:7a:f6:c1:e8:c7:8b:3d:16:91:7b:6e:e7:31:ef:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:53:BA:18:09:13:C5:41:A5:AC:E7:51:09:88:6D:E1:FC:82:DB
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:80:e6:c8:4f:4d:05:2f:84:22:8d:05:12:c1:32:e4:65:44:
dc:da:43:e7:dd:8d:52:8c:53:ad:64:b8:5d:d7:8d:fe:ee:0b:
a5:2b:28:24:c6:bb:db:36:4e:cb:c4:32:14:ed:c1:76:9a:56:
ab:9c:69:19:e5:50:f8:2d:52:44:16:60:14:66:f9:c6:8b:e3:
d1:bb:f3:18:e0:f0:aa:ca:63:2a:02:10:92:8e:7b:a7:9e:99:
10:4c:57:b8:f0:8d:4d:a5:82:0f:a1:d2:8e:fe:1a:37:c6:ef:
75:7d:ae:4a:54:e3:7c:4c:60:6a:90:1c:19:fa:69:39:64:8c:
b2:ea:2b:71:be:81:87:82:c7:d7:0c:68:ab:32:eb:f5:06:7a:
1f:38:f6:10:1a:37:de:ca:33:4f:ca:c6:ef:9a:a5:0a:ad:42:
8d:63:9d:f5:91:86:9d:b0:6b:cd:4c:8f:c4:f4:32:6b:c4:3b:
23:6c:07:5c:ca:c4:35:1b:98:eb:ce:70:b8:d5:f3:a0:be:52:
91:f9:98:57:9f:43:59:32:d5:46:6a:49:8c:91:e9:ba:e2:51:
9e:3e:c8:ec:93:79:09:8a:78:52:ed:45:0f:7f:ae:7b:62:09:
70:32:54:a4:04:c2:9a:95:fa:c9:d5:aa:76:32:1f:4b:6d:98:
da:97:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:25:05 2025 by rpki-client