Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json)
Hash identifier: rNwq74JFbMk11RQ1JBuVjcMyFC4mhIyutosOMR2FuRM=
Subject key identifier: 66:3A:E0:02:46:00:6C:68:37:79:C2:0C:E2:69:CD:15:E3:E6:DD:BB
Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Certificate serial: 0198499C6B580402D67715BC33878C0882B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 02:00:44 +0000
Manifest this update: Sun 27 Jul 2025 02:00:44 +0000
Manifest next update: Mon 28 Jul 2025 02:00:44 +0000
Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: bW4sLftK3qFng9deyCUMDRsCUb4LudoE6OKMlHXS/FY=)
2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6b:58:04:02:d6:77:15:bc:33:87:8c:08:82:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Validity
Not Before: Jul 27 02:00:44 2025 GMT
Not After : Jul 28 02:00:44 2025 GMT
Subject: CN=663ae00246006c683779c20ce269cd15e3e6ddbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:1c:e8:c4:4e:db:62:b9:73:54:fa:e7:72:
12:3a:29:b6:ed:34:f2:e1:df:4a:2e:5a:81:19:a8:
7b:0d:bc:30:97:b5:76:bf:d4:63:48:e6:10:99:70:
3f:64:3f:1e:ec:d9:89:f7:a8:d3:9a:ed:62:06:44:
5b:c1:1e:ca:e0:c7:71:34:3e:8f:08:71:f1:4d:48:
b5:2c:0a:98:57:6c:87:9b:4a:3c:b8:52:22:17:f0:
cc:52:1d:a8:f4:1d:b6:87:ea:f7:47:d1:de:f3:18:
9a:be:46:b3:85:f3:bd:a9:48:cd:77:21:e5:7f:2d:
96:67:99:52:de:84:76:95:ab:76:18:81:0c:dc:4e:
42:26:cc:2c:e2:85:8f:35:3b:15:86:3f:b3:c3:b3:
30:6c:fa:5b:d1:c4:f7:bf:43:91:8c:90:c3:98:c1:
30:ea:b1:7f:72:47:44:35:9f:c5:e0:42:d9:58:b6:
9a:4c:ab:c2:7c:e2:13:c7:26:77:cc:a6:76:76:ec:
25:c5:a0:85:f2:b3:aa:bf:b4:60:cd:a2:ae:da:d9:
1f:57:66:47:a4:ee:0b:d0:70:d6:d6:e6:b9:6b:07:
bd:db:ab:8f:99:f8:fb:69:42:46:3b:da:71:38:d0:
98:8f:21:95:90:50:55:b1:82:21:83:05:b2:d1:f8:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3A:E0:02:46:00:6C:68:37:79:C2:0C:E2:69:CD:15:E3:E6:DD:BB
X509v3 Authority Key Identifier:
keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b3:d3:83:d8:a2:d1:e2:00:50:2c:a3:16:43:04:6c:7a:3e:
65:ba:0a:d9:22:3f:f8:10:33:86:91:45:8b:e7:0d:9d:b9:d4:
5d:dd:01:2d:0f:a3:db:1d:e1:01:25:bc:c7:0c:0b:45:df:31:
7b:bb:5b:11:53:c6:07:e9:ca:c3:45:c9:59:0e:14:5b:a6:7b:
04:c4:d5:7e:c3:44:2b:27:60:01:07:74:8a:16:f5:09:86:c1:
15:14:9c:f0:08:34:e9:7e:6e:1d:57:20:86:69:90:48:74:60:
6a:57:f3:a0:4a:03:bc:d2:43:1d:72:61:d3:a7:d1:04:08:9f:
f9:d1:b0:92:f5:7b:93:39:f9:01:3e:23:c1:8f:c2:36:04:c5:
45:6a:ab:bb:69:6f:04:72:40:aa:35:0b:36:f2:ad:c8:05:2e:
75:9d:e0:9a:56:9f:65:5c:04:1d:4a:da:b1:17:d4:26:03:4e:
0c:ee:2f:05:7c:5d:a7:c4:ef:d7:fc:00:d1:9c:95:f1:45:2e:
20:e1:70:ed:2b:22:56:df:33:26:91:2b:18:7d:6d:5c:ed:67:
ac:fa:b5:eb:64:59:f8:f6:a0:81:68:f1:af:d4:31:bf:40:09:
a2:01:b4:f0:70:e1:35:01:ca:c8:18:84:70:18:ff:cd:5a:7c:
3d:ac:ce:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnGtYBALWdxW8M4eMCIKyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MGIwNzQ1OWUyZjExNmZiNWE5N2YxMWJhZTc1YzBkYjQ5
MWMxOTYwHhcNMjUwNzI3MDIwMDQ0WhcNMjUwNzI4MDIwMDQ0WjAzMTEwLwYDVQQD
Eyg2NjNhZTAwMjQ2MDA2YzY4Mzc3OWMyMGNlMjY5Y2QxNWUzZTZkZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC0c6MRO22K5c1T653ISOim27TTy
4d9KLlqBGah7Dbwwl7V2v9RjSOYQmXA/ZD8e7NmJ96jTmu1iBkRbwR7K4MdxND6P
CHHxTUi1LAqYV2yHm0o8uFIiF/DMUh2o9B22h+r3R9He8xiavkazhfO9qUjNdyHl
fy2WZ5lS3oR2lat2GIEM3E5CJsws4oWPNTsVhj+zw7MwbPpb0cT3v0ORjJDDmMEw
6rF/ckdENZ/F4ELZWLaaTKvCfOITxyZ3zKZ2duwlxaCF8rOqv7RgzaKu2tkfV2ZH
pO4L0HDW1ua5awe926uPmfj7aUJGO9pxONCYjyGVkFBVsYIhgwWy0fjVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY64AJGAGxoN3nCDOJpzRXj5t27MB8GA1UdIwQY
MBaAFNcLB0WeLxFvtal/EbrnXA20kcGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEt
YWFjZTcwYWJjNmEwLzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEtYWFjZTcwYWJjNmEw
LzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrPTg9ii
0eIAUCyjFkMEbHo+ZboK2SI/+BAzhpFFi+cNnbnUXd0BLQ+j2x3hASW8xwwLRd8x
e7tbEVPGB+nKw0XJWQ4UW6Z7BMTVfsNEKydgAQd0ihb1CYbBFRSc8Ag06X5uHVcg
hmmQSHRgalfzoEoDvNJDHXJh06fRBAif+dGwkvV7kzn5AT4jwY/CNgTFRWqru2lv
BHJAqjULNvKtyAUudZ3gmlafZVwEHUrasRfUJgNODO4vBXxdp8Tv1/wA0ZyV8UUu
IOFw7SsiVt8zJpErGH1tXO1nrPq162RZ+PaggWjxr9Qxv0AJogG08HDhNQHKyBiE
cBj/zVp8PazO+A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:03:05 2025 by rpki-client