Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
File: waGQUEttntnBgJaEBCWxHXsi3_Q.mft (raw, json)
Hash identifier: teActIebjMu/0YA0Uyn5K7VJqL+pQoaJXqXl2q2amfA=
Subject key identifier: 29:45:39:68:B1:11:FA:CD:50:83:11:62:50:1D:45:11:BA:6F:D6:A2
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial: 0198530E6F520F79D3DD004E801E8B11DAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 22:01:51 +0000
Manifest this update: Mon 28 Jul 2025 22:01:51 +0000
Manifest next update: Tue 29 Jul 2025 22:01:51 +0000
Files and hashes: 1: A9fopaXO-fVQpKdJ8LHIGXii_SU.roa (hash: 8zkX8M3Fk6VQlJpwJIcZtNmfIBhTghba03PireQiTxw=)
2: waGQUEttntnBgJaEBCWxHXsi3_Q.crl (hash: GVCXkcaCgE3ivn25sImOhRaAx0Wcd+747KcAJZhXXH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:6f:52:0f:79:d3:dd:00:4e:80:1e:8b:11:da:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Validity
Not Before: Jul 28 22:01:51 2025 GMT
Not After : Jul 29 22:01:51 2025 GMT
Subject: CN=29453968b111facd50831162501d4511ba6fd6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:df:4b:70:8c:7a:ac:95:fe:16:ae:39:4c:eb:
32:46:68:dd:a3:ba:7c:41:82:b1:37:fe:bd:31:45:
0c:e2:1d:ac:07:63:a2:bd:bf:46:cf:66:d2:e8:fc:
05:de:24:8a:f7:b5:ee:1b:7d:a4:1f:6d:50:80:02:
2c:a1:44:3f:e7:aa:7c:44:89:84:3c:5c:6a:7e:86:
fc:97:68:3a:ff:46:7e:c2:dc:b9:11:c7:70:df:89:
ee:ef:c7:0c:6d:6a:cb:28:cd:99:d9:24:b0:31:02:
f9:0e:0e:8a:68:ee:c0:3b:c1:d3:bc:e8:73:30:e5:
da:b1:67:81:1b:3c:d2:56:3d:65:44:c0:c7:94:74:
e1:a3:81:7f:c5:6c:ae:c1:ab:d5:d3:8d:fc:f7:5f:
dd:fd:24:34:93:99:da:73:7c:10:3e:b1:de:8e:15:
e7:65:af:9f:eb:f2:17:d2:4f:6a:c2:3d:16:21:6b:
9a:fb:fa:1f:e6:96:60:da:1a:1e:4c:6f:03:5d:53:
16:f1:d8:ca:76:b7:b5:74:57:7a:56:4b:d4:c8:d2:
bf:da:e7:d0:89:60:c0:89:62:bc:4b:2f:84:8c:f1:
53:f1:db:bb:9a:85:01:1e:9b:0d:a0:00:95:fb:84:
eb:f1:f2:66:31:6e:4e:fd:cc:87:83:14:2f:10:a9:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:45:39:68:B1:11:FA:CD:50:83:11:62:50:1D:45:11:BA:6F:D6:A2
X509v3 Authority Key Identifier:
keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4d:27:84:79:2c:b6:93:28:60:fe:95:b9:bf:10:53:dd:c6:
f9:99:2b:e2:62:f2:9f:34:e0:4d:80:d3:18:9d:11:a9:6d:00:
21:11:2a:f8:7d:2a:da:5d:65:f2:27:22:63:82:a1:6d:96:be:
54:e7:6a:a7:0b:1a:36:32:8a:7d:5b:3e:5b:8a:91:49:f0:74:
5a:67:ee:bc:6f:d9:27:2b:ea:11:57:e0:a0:85:62:2e:ee:26:
9d:e1:70:e7:bb:a1:ea:86:13:e4:8c:ca:2f:6a:0d:7b:e8:cf:
f9:73:0f:46:bf:02:3a:e7:75:89:d9:80:22:c1:b5:ab:8b:cb:
3c:7c:aa:d9:75:43:ba:e7:7b:43:a9:1c:57:ad:a2:8e:dd:45:
b3:c2:9f:fc:51:b0:00:c6:50:43:62:69:a5:f8:f1:15:ea:cb:
31:ca:1e:7e:a1:5c:00:ac:20:0a:d6:b3:69:ff:c1:2f:eb:c3:
6c:48:b7:ec:ed:22:54:79:71:75:ad:46:7d:2e:6c:a2:cf:fb:
d3:1a:2e:f6:ac:2f:61:a2:87:ce:3f:8b:81:45:44:fd:57:3a:
58:9c:cc:83:8e:8c:28:00:37:8a:5f:33:a4:ec:58:b1:ac:15:
0b:d2:07:9d:81:e9:f2:91:e8:f5:22:2f:fa:d3:16:8a:68:4d:
48:c6:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:53:58 2025 by rpki-client