Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: 9Nd0pfBMj99vOtyyBiy+MG9lt+eO1QcBSKHrFHD29Ws=
Subject key identifier: 0B:C4:ED:30:C8:9E:48:4C:F1:AD:DC:24:62:B8:CD:60:8A:C9:CB:7C
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019848C07A09175ADF7875624DD043100B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 0103
Signing time: Sat 26 Jul 2025 22:00:30 +0000
Manifest this update: Sat 26 Jul 2025 22:00:30 +0000
Manifest next update: Sun 27 Jul 2025 22:00:30 +0000
Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=)
2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: P7w7tFGWRf+3xe7MwsHZ3FmW21KORdmunYMx+tv68To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:7a:09:17:5a:df:78:75:62:4d:d0:43:10:0b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Jul 26 22:00:30 2025 GMT
Not After : Jul 27 22:00:30 2025 GMT
Subject: CN=0bc4ed30c89e484cf1addc2462b8cd608ac9cb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:a6:01:6f:4e:08:34:cc:e4:b5:ad:3c:09:
1b:a1:0d:75:84:c3:32:24:c3:44:83:bf:d8:04:53:
d8:84:8d:1a:dd:3e:bc:9b:cd:3a:a1:42:19:90:e6:
fa:ce:94:b8:6c:5e:5a:de:cd:14:9a:12:31:06:a1:
3a:49:fe:57:bf:66:d8:96:03:60:e6:d6:ad:f8:24:
7c:7e:04:56:79:ce:ba:00:b3:53:d6:83:45:4b:b9:
7a:e5:70:ea:d5:78:7e:5d:48:c0:49:24:f2:28:d9:
ef:c9:b0:a8:9b:99:16:b4:28:e6:b9:31:b3:06:96:
1c:74:62:e6:0a:66:d4:6f:83:ff:13:44:2c:b4:c3:
87:7a:da:25:b8:48:51:dd:6e:b8:c5:78:2d:b5:b5:
0b:b7:11:4c:52:e4:d8:2a:51:56:bf:d9:e4:d5:83:
45:5c:87:12:71:58:0c:1d:01:7e:a9:42:9a:92:c3:
05:68:43:bb:c9:3e:78:51:49:be:7f:02:3f:22:e6:
32:68:00:52:6e:75:d4:01:c8:08:e9:4d:f8:38:d2:
16:36:c0:42:13:a9:d7:af:f1:fc:b4:a6:0f:d6:8c:
84:d5:3e:06:21:87:5b:75:74:6a:ef:7e:62:84:94:
1d:d6:f7:53:2a:fa:60:28:de:68:76:47:69:4c:5a:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C4:ED:30:C8:9E:48:4C:F1:AD:DC:24:62:B8:CD:60:8A:C9:CB:7C
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2b:c9:43:40:0b:05:78:55:6e:94:f3:dd:e1:55:00:08:8f:
e0:a6:9c:05:bf:fd:cc:96:34:5b:d7:5f:f5:66:22:7d:76:12:
5c:e2:e2:f7:91:8a:fb:87:b5:86:66:71:ca:ed:26:5f:ff:03:
fe:c9:f0:58:9a:c2:10:d6:9c:fb:52:57:ab:54:6f:62:81:0c:
cf:2b:ff:74:e0:0a:5f:48:34:6d:8f:36:9d:2e:ab:4c:c9:b1:
c2:98:07:b8:d1:b4:8a:e9:b2:96:c8:cb:15:2d:31:46:0d:3c:
85:a5:59:0b:50:ba:06:ce:86:f5:dd:e4:34:97:d3:c4:19:e0:
2e:12:09:28:bb:fd:66:6b:e1:62:66:ff:d2:2c:44:6e:d8:d1:
98:36:ab:15:b2:a7:04:09:cf:4d:73:43:fe:30:f7:79:2e:60:
ec:d1:18:03:25:1b:f2:07:8e:c6:2a:aa:af:7a:7b:31:d4:74:
5b:fd:6a:99:5c:33:44:37:d6:8d:c9:4f:72:63:f9:35:42:ad:
6f:5b:f9:cf:f6:8b:8a:c0:67:02:60:b3:67:af:f3:ed:cd:d8:
93:72:d5:30:b7:2f:79:07:3b:27:d8:3c:d3:96:56:30:54:96:
67:b3:87:0c:68:b5:27:90:9a:91:20:a0:f6:01:79:4f:3f:11:
ae:3f:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:34 2025 by rpki-client