Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: B4hcbO1K1MfkunJC2avXlgHnPVGRbfMkrlNsvUdw/00=
Subject key identifier: AA:F2:A1:E5:19:34:84:0B:EB:6A:29:9C:71:0D:2B:D6:28:46:90:01
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 01991B7754BDE1912B5F07B2405BD8F7D797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 1300
Signing time: Fri 05 Sep 2025 20:00:29 +0000
Manifest this update: Fri 05 Sep 2025 20:00:29 +0000
Manifest next update: Sat 06 Sep 2025 20:00:29 +0000
Files and hashes: 1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: h9iI6XRE/L5Cz8bh71iyYDoFARbLoODYHjlhkn8VCHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:77:54:bd:e1:91:2b:5f:07:b2:40:5b:d8:f7:d7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Sep 5 20:00:29 2025 GMT
Not After : Sep 6 20:00:29 2025 GMT
Subject: CN=aaf2a1e51934840beb6a299c710d2bd628469001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:6d:8d:a6:6a:a8:a7:0c:93:63:8d:10:78:
cc:fc:1f:10:da:38:7e:2b:cb:0a:ac:36:d0:94:a6:
93:ac:4a:fc:ca:b3:11:01:db:9b:e9:75:3e:52:09:
bf:84:85:11:de:fc:78:19:a4:36:90:69:16:1b:48:
54:66:6a:55:77:e7:7c:b3:54:3c:0d:70:ab:f4:ba:
c7:ea:15:95:76:e9:ee:a1:2e:bf:16:40:05:41:a6:
56:a5:01:fe:a7:c1:71:c4:48:22:40:c0:c9:27:bb:
ad:ec:72:c6:d7:61:a4:c4:54:68:44:c1:ff:1b:9c:
82:11:ef:30:85:b7:ea:22:c6:46:39:8f:9f:8a:3f:
fe:4f:39:c2:37:e2:a7:a2:a9:ef:b9:38:75:da:ea:
fd:2b:e0:e7:70:db:73:1d:c7:da:bb:dd:81:75:7d:
2a:2c:6a:18:da:91:7f:51:80:6c:c7:f9:3c:91:c3:
57:e8:06:4b:f2:9b:f2:9c:37:df:f0:b2:d7:30:76:
1a:36:f6:ee:0e:0f:d6:e6:59:3d:70:a7:6d:99:8d:
ad:25:25:ad:38:70:5a:e3:66:75:c7:29:8f:8b:43:
bd:7a:7a:7d:3a:78:3b:c7:01:14:d4:c0:a4:45:57:
1b:12:44:48:86:39:74:4b:70:29:da:48:66:46:b3:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F2:A1:E5:19:34:84:0B:EB:6A:29:9C:71:0D:2B:D6:28:46:90:01
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:11:fb:dd:e2:4b:89:88:04:f7:ad:08:a4:0a:b3:9e:0c:
71:6b:f8:d5:a6:01:1f:44:f5:69:79:63:9f:74:77:29:84:a7:
84:a0:cf:1b:eb:53:a6:14:3f:57:cc:bb:4b:b0:5c:78:8c:f4:
fc:5b:8e:6b:87:e0:e9:29:55:ed:11:46:d2:a7:d3:8d:5e:0a:
53:19:73:19:f2:d0:eb:39:18:f6:c6:58:75:53:cd:96:26:e2:
fd:37:62:4e:e6:25:1e:1b:82:b5:e7:5b:e8:d5:07:ea:b7:ec:
15:80:97:92:f5:16:1a:b0:bb:13:01:a9:c5:8d:4c:89:76:17:
59:20:59:74:ec:59:f3:45:18:45:23:85:6f:4d:42:3c:61:cb:
71:51:b3:c3:cc:f8:2b:56:05:7f:e9:b7:bb:0f:6d:15:ed:11:
44:0e:3c:78:31:da:ed:9b:5f:6c:a5:62:66:fd:e2:c3:57:e7:
dc:f8:db:97:20:bc:37:f1:bd:88:aa:01:d8:e0:b0:ca:3b:15:
b6:71:b6:39:0f:f4:56:82:b2:84:49:d3:cc:ac:7e:58:f0:98:
b5:39:4d:2d:b3:70:c6:bf:71:c3:85:a1:cf:da:03:81:51:e6:
93:05:6c:2b:19:e2:ba:95:4b:d5:bd:a4:3b:35:7a:ea:75:41:
be:20:de:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkbd1S94ZErXweyQFvY99eXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDA5MDlhZWMzMjBhOGMyZWUxY2FiY2UxMzAyY2JiN2Q0
ZTA0ODYwHhcNMjUwOTA1MjAwMDI5WhcNMjUwOTA2MjAwMDI5WjAzMTEwLwYDVQQD
EyhhYWYyYTFlNTE5MzQ4NDBiZWI2YTI5OWM3MTBkMmJkNjI4NDY5MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6ZtjaZqqKcMk2ONEHjM/B8Q2jh+
K8sKrDbQlKaTrEr8yrMRAdub6XU+Ugm/hIUR3vx4GaQ2kGkWG0hUZmpVd+d8s1Q8
DXCr9LrH6hWVdunuoS6/FkAFQaZWpQH+p8FxxEgiQMDJJ7ut7HLG12GkxFRoRMH/
G5yCEe8whbfqIsZGOY+fij/+TznCN+KnoqnvuTh12ur9K+DncNtzHcfau92BdX0q
LGoY2pF/UYBsx/k8kcNX6AZL8pvynDff8LLXMHYaNvbuDg/W5lk9cKdtmY2tJSWt
OHBa42Z1xymPi0O9enp9Ong7xwEU1MCkRVcbEkRIhjl0S3Ap2khmRrNLgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKryoeUZNIQL62opnHENK9YoRpABMB8GA1UdIwQY
MBaAFMNAkJrsMgqMLuHKvOEwLLt9TgSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYt
YmNhMGE4ZjJmNzhjLzEvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYtYmNhMGE4ZjJmNzhj
LzEvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3kR+93i
S4mIBPetCKQKs54McWv41aYBH0T1aXljn3R3KYSnhKDPG+tTphQ/V8y7S7BceIz0
/FuOa4fg6SlV7RFG0qfTjV4KUxlzGfLQ6zkY9sZYdVPNlibi/TdiTuYlHhuCtedb
6NUH6rfsFYCXkvUWGrC7EwGpxY1MiXYXWSBZdOxZ80UYRSOFb01CPGHLcVGzw8z4
K1YFf+m3uw9tFe0RRA48eDHa7ZtfbKViZv3iw1fn3PjblyC8N/G9iKoB2OCwyjsV
tnG2OQ/0VoKyhEnTzKx+WPCYtTlNLbNwxr9xw4Whz9oDgVHmkwVsKxniupVL1b2k
OzV66nVBviDehg==
-----END CERTIFICATE-----
Generated at Sat Sep 6 06:15:22 2025 by rpki-client