Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: FPTcGYnEIfQDvxSV9R0rGGag6FOaywO5F+21LSiKeNw=
Subject key identifier: 07:22:B4:1D:45:28:B3:B2:42:C6:08:7C:FF:41:2D:AB:87:5E:94:5C
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 019849660A70ED208D85FF5BA8DD4FB43E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:20 +0000
Manifest this update: Sun 27 Jul 2025 01:01:20 +0000
Manifest next update: Mon 28 Jul 2025 01:01:20 +0000
Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: tLKdiQC5/wT7m7C8WPKerzpvQ4j9ELmE4SiWeTWDoMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:0a:70:ed:20:8d:85:ff:5b:a8:dd:4f:b4:3e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Jul 27 01:01:20 2025 GMT
Not After : Jul 28 01:01:20 2025 GMT
Subject: CN=0722b41d4528b3b242c6087cff412dab875e945c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:3f:58:81:76:1a:15:5c:70:47:9d:46:3a:
c6:c2:9c:ed:17:e8:fe:fd:b0:80:b1:20:1f:c1:5d:
ba:61:ca:19:cb:71:13:6f:1b:22:52:0f:d6:94:ae:
5e:3b:74:44:64:fd:01:be:36:68:2b:43:8f:97:b6:
bd:a6:8a:b2:b4:82:12:44:3a:47:40:2c:0d:fa:58:
d5:77:e2:4a:bd:93:e2:cd:79:9b:49:af:a8:b4:e4:
ec:be:f1:35:9e:91:81:8b:83:4f:40:cb:96:c5:28:
eb:38:a2:1a:53:6d:ea:54:79:14:eb:31:21:f2:40:
1a:03:0b:c0:f7:18:c7:c7:42:8e:71:f7:84:79:05:
12:3f:53:49:d8:1d:d0:0d:26:48:23:da:77:24:f2:
11:76:aa:17:1e:13:47:49:32:b4:98:e4:7c:0a:b9:
e3:d2:56:92:95:f2:e8:64:01:9a:ea:58:22:a5:d5:
5e:1c:a0:1a:f6:bd:86:8c:ca:31:a8:28:62:bc:0d:
63:91:0b:e9:60:a1:f3:b2:75:45:a9:1b:ca:7c:ce:
94:0b:8d:36:15:41:16:cc:b4:b6:3a:8f:68:1a:5f:
6e:e8:f7:d5:64:6f:ce:1d:14:68:6b:d0:66:21:f0:
f7:ef:26:2e:a3:ce:31:a7:e7:ea:37:0a:7d:c2:37:
79:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:22:B4:1D:45:28:B3:B2:42:C6:08:7C:FF:41:2D:AB:87:5E:94:5C
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:f9:33:3f:d5:ba:e6:c9:0b:0f:2f:4a:d7:1d:b8:c1:14:31:
d5:e7:36:e4:0b:4e:0d:a9:98:24:99:1a:ee:e1:83:9d:b4:25:
b6:be:42:8f:a6:4e:87:94:6d:46:1b:aa:5a:85:b9:98:82:14:
3a:ea:8d:af:c0:55:66:4c:3e:48:20:3c:7a:2d:59:22:6f:bd:
20:3c:e2:d0:dc:0e:aa:72:ef:fd:bf:6b:10:67:bb:ae:c6:62:
77:5a:16:63:51:c1:70:39:e6:c4:4f:4e:eb:98:ba:db:40:19:
5c:bc:2d:d9:c6:2d:03:3b:c5:3e:13:98:93:d3:01:78:63:76:
d3:4f:03:3c:b1:e9:4a:4b:90:64:89:0d:e2:6f:21:9e:5a:b3:
a8:37:99:74:d7:d8:5c:fc:ef:78:73:bd:3c:c6:45:d8:b6:b3:
13:cf:d0:dd:7d:4e:b8:6f:11:4d:45:23:1a:2c:0d:37:4d:8f:
f3:79:ec:46:a5:75:8e:f1:d2:aa:67:3c:54:6c:8a:1b:66:af:
97:94:7d:7c:fd:de:03:8c:47:3c:16:0a:0d:40:24:2a:d1:c7:
9d:97:b6:cf:51:02:4d:0a:f4:8b:9d:5c:41:27:5d:81:8d:e7:
82:36:eb:b6:70:ac:06:56:c3:e5:07:27:bb:3a:4d:4a:2b:0e:
68:22:25:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:28:22 2025 by rpki-client