
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: TZ2iWMbxgc6RqRRW68E5RADJbB7S/BYzjQPurYDdwEw=
Subject key identifier: DF:26:AB:C8:8E:15:D5:BF:9F:70:1B:C6:99:F9:C3:D9:5A:30:2F:3D
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 019835712FDA89CFF3E222EA49E6F4317601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1601
Signing time: Wed 23 Jul 2025 04:01:06 +0000
Manifest this update: Wed 23 Jul 2025 04:01:06 +0000
Manifest next update: Thu 24 Jul 2025 04:01:06 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: nYxgkEM/bZiXCv5NTVq9alF1PwVi77I3le90uCX6PJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:71:2f:da:89:cf:f3:e2:22:ea:49:e6:f4:31:76:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Jul 23 04:01:06 2025 GMT
Not After : Jul 24 04:01:06 2025 GMT
Subject: CN=df26abc88e15d5bf9f701bc699f9c3d95a302f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:54:1d:dd:f7:c4:a7:01:6d:41:db:9a:a6:ab:
3c:8d:e4:50:5f:44:5f:fd:58:fe:5f:16:60:c3:38:
50:e7:5f:a4:e1:82:d3:7f:0f:b5:c6:77:ab:b6:dc:
f1:f4:f1:fd:b2:15:51:6b:85:16:2a:e4:10:b1:3f:
a7:7e:55:2a:2d:e9:87:da:6c:e1:29:88:56:d1:46:
c7:3b:dc:78:35:cd:6d:bc:a8:12:4e:77:d6:df:53:
d6:44:b9:0b:cd:41:08:f2:55:fd:d0:67:dc:4d:68:
f1:90:1f:fe:b4:92:21:12:d2:7c:f0:01:b7:9e:13:
49:7a:45:02:b5:7a:09:7d:c1:6a:ae:71:d5:63:47:
3e:d8:74:bb:53:76:f7:d5:e6:c9:00:a1:6c:3f:b3:
9f:db:d3:5e:49:70:68:e4:9f:08:08:8b:70:d1:18:
2c:a6:30:ba:ab:d1:2c:d7:c2:af:4f:ea:96:0c:92:
e1:ef:0d:bc:40:18:1e:42:58:5d:fb:f9:01:4c:62:
c3:af:4b:3f:9e:e8:39:bc:7e:33:d5:47:d3:cd:2d:
b6:25:75:5a:45:fc:cf:a4:e1:75:76:c3:88:92:4a:
20:30:bf:24:f4:ce:e1:27:9e:af:74:3f:3c:0b:c8:
7c:c9:7e:3b:32:e1:67:73:fa:3a:1b:84:31:d6:0f:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:26:AB:C8:8E:15:D5:BF:9F:70:1B:C6:99:F9:C3:D9:5A:30:2F:3D
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2e:36:a2:84:f0:db:b6:74:50:60:ae:8c:1f:c5:bc:f9:21:
70:e3:c4:60:a0:7f:8d:72:18:95:fc:25:96:35:c8:07:a6:47:
47:8d:c9:ab:f9:21:d2:98:e1:ad:97:a8:77:0b:0c:2d:00:1b:
b7:d7:61:3a:08:9c:d9:02:3d:27:bd:82:80:c8:f5:01:8d:b9:
f9:1b:50:35:b2:43:3a:ee:85:c6:b6:11:3f:69:1d:73:5b:c7:
63:67:95:28:e3:34:9a:c1:43:a4:0e:7a:4b:ec:49:2c:f3:50:
9c:02:ff:39:8c:4f:ab:f5:ce:20:1a:d5:1e:55:cd:d4:6c:d1:
cd:23:b3:58:3d:89:8f:2c:82:05:14:6e:bd:f9:b1:c7:c3:cf:
cc:98:0c:ad:f0:c9:1b:92:2b:c0:43:67:43:6a:e2:46:31:33:
48:c4:3a:17:2e:53:f3:20:5f:29:da:f1:d8:db:34:b8:0e:ff:
64:ab:bb:b9:db:7d:d3:0c:21:9f:eb:8a:43:7f:38:cf:1e:9e:
7e:ff:e2:ce:65:1b:24:6f:a0:b2:95:5d:a7:2c:64:f1:17:0c:
1b:78:d2:9a:7f:97:ef:91:b0:24:82:3f:5d:78:91:0f:66:8b:
d4:11:aa:62:7f:85:8d:2a:80:5a:b1:92:2a:d7:5a:03:6f:0e:
2d:03:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:21:08 2025 by rpki-client