
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: 4DiAmS6+mBI52bRyGZRnqegRQOpCFBKSxhMcMkbelQ8=
Subject key identifier: 0C:73:BE:ED:EF:36:CE:37:01:3E:C3:44:3A:1F:41:78:56:CA:03:A2
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 01984777EBBF45655506E8A22C49AC2D9F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 16:01:37 +0000
Manifest this update: Sat 26 Jul 2025 16:01:37 +0000
Manifest next update: Sun 27 Jul 2025 16:01:37 +0000
Files and hashes: 1: HJuvWWI1qAqft10oKlJtZleuo2g.roa (hash: u8HfwrfCCFHcB5jvs7dyE9ffRxdRXb4g1HqA18Sf8YE=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: AfDt1ddUowmlf1CV3AU3dv3uhgipT787a89Spr7kkHQ=)
3: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (hash: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:eb:bf:45:65:55:06:e8:a2:2c:49:ac:2d:9f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Jul 26 16:01:37 2025 GMT
Not After : Jul 27 16:01:37 2025 GMT
Subject: CN=0c73beedef36ce37013ec3443a1f417856ca03a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:cf:6e:37:9d:a4:3d:08:12:11:e7:c4:96:
70:fe:a4:db:d9:2a:3f:b5:cf:18:24:a9:bf:b1:a5:
5c:93:94:a7:4a:9f:d8:8b:71:24:a7:65:96:ee:e7:
7a:52:46:69:44:15:13:be:c5:13:76:56:5c:75:b9:
13:c3:3f:6a:c8:0a:30:49:68:a6:38:7f:3a:be:48:
a3:97:c2:2d:5b:2e:2f:a1:d0:6c:08:43:0c:38:45:
9f:c3:d6:c2:68:dd:7a:c2:db:2c:35:cc:e0:46:46:
5d:ad:06:55:74:d7:e5:be:5f:d5:80:d3:96:f1:47:
9f:d9:7f:bd:ae:53:67:16:f2:be:f0:ab:83:00:f2:
65:74:bb:93:ed:4d:5e:2f:f8:40:63:45:0c:18:6b:
9e:91:ca:7b:4d:b9:2f:6d:ee:fc:0b:ff:9a:f6:b8:
0b:38:39:a6:bd:8b:11:ab:17:ed:cc:f5:5c:01:62:
73:e5:b3:cd:e1:80:7c:0c:9f:29:d3:df:f3:06:58:
c3:2f:78:cc:81:ac:bf:37:d5:c6:9b:92:52:73:c0:
0b:d4:8c:a8:bd:29:97:bb:75:cd:fd:16:5f:56:0f:
0b:8d:39:ac:25:08:42:e4:e0:d2:43:e9:f1:c2:51:
95:2c:06:b0:81:48:ae:1c:d8:fd:3d:49:49:46:32:
01:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:73:BE:ED:EF:36:CE:37:01:3E:C3:44:3A:1F:41:78:56:CA:03:A2
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6a:79:23:aa:05:0d:c4:69:9a:b3:e1:31:56:6a:6f:1c:1b:
2b:b9:4c:0d:26:61:ca:2a:c0:d6:97:ab:9e:1d:30:fe:25:ae:
21:3c:a1:89:2a:ca:40:50:a5:53:00:eb:89:c2:4e:4c:5c:fd:
83:7e:7a:50:bd:1b:77:6e:b4:fe:5a:4a:10:00:e8:1f:cf:e4:
1c:ee:69:a2:19:63:a0:51:4c:31:24:e9:4c:52:ac:20:0d:44:
67:7e:57:f6:14:ca:43:37:3a:e5:f0:9d:bc:8d:b7:67:a5:0b:
6e:08:18:42:32:ff:7b:9a:1e:25:10:58:d0:e6:f2:99:c8:0f:
31:92:2e:52:e5:6a:d7:81:c4:9f:83:0b:39:41:94:24:d4:3d:
02:ed:0f:3e:e5:24:a4:87:ee:f4:7f:4d:1c:54:7e:e5:80:8f:
a1:76:6c:53:e0:6f:31:83:94:b8:fe:d5:b2:bc:a3:2b:49:9f:
c2:4e:a3:75:7d:2d:f8:f5:b6:d0:24:d0:48:99:59:e7:3c:7e:
33:ff:3a:3d:6b:4c:f2:16:97:57:93:56:37:d6:e8:38:f2:f3:
26:d1:4e:0d:11:82:b7:69:03:a6:1c:e7:91:d0:28:9a:69:be:
9c:5a:7f:74:cf:c9:8a:c9:cf:bc:25:88:08:9d:96:2e:52:83:
62:49:24:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd+u/RWVVBuiiLEmsLZ8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NmVjYjNiZTEwNjVlMWU3MTU4OTUwOGJlYzZkNzRiNWE3
YjFlZDcwHhcNMjUwNzI2MTYwMTM3WhcNMjUwNzI3MTYwMTM3WjAzMTEwLwYDVQQD
EygwYzczYmVlZGVmMzZjZTM3MDEzZWMzNDQzYTFmNDE3ODU2Y2EwM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NLPbjedpD0IEhHnxJZw/qTb2So/
tc8YJKm/saVck5SnSp/Yi3Ekp2WW7ud6UkZpRBUTvsUTdlZcdbkTwz9qyAowSWim
OH86vkijl8ItWy4vodBsCEMMOEWfw9bCaN16wtssNczgRkZdrQZVdNflvl/VgNOW
8Uef2X+9rlNnFvK+8KuDAPJldLuT7U1eL/hAY0UMGGuekcp7Tbkvbe78C/+a9rgL
ODmmvYsRqxftzPVcAWJz5bPN4YB8DJ8p09/zBljDL3jMgay/N9XGm5JSc8AL1Iyo
vSmXu3XN/RZfVg8LjTmsJQhC5ODSQ+nxwlGVLAawgUiuHNj9PUlJRjIBYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxzvu3vNs43AT7DRDofQXhWygOiMB8GA1UdIwQY
MBaAFEVuyzvhBl4ecViVCL7G10taex7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1Nzct
NWFjNzRkYmExN2I4LzEvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1NzctNWFjNzRkYmExN2I4
LzEvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGp5I6oF
DcRpmrPhMVZqbxwbK7lMDSZhyirA1pernh0w/iWuITyhiSrKQFClUwDricJOTFz9
g356UL0bd260/lpKEADoH8/kHO5pohljoFFMMSTpTFKsIA1EZ35X9hTKQzc65fCd
vI23Z6ULbggYQjL/e5oeJRBY0ObymcgPMZIuUuVq14HEn4MLOUGUJNQ9Au0PPuUk
pIfu9H9NHFR+5YCPoXZsU+BvMYOUuP7VsryjK0mfwk6jdX0t+PW20CTQSJlZ5zx+
M/86PWtM8haXV5NWN9boOPLzJtFODRGCt2kDphznkdAommm+nFp/dM/JisnPvCWI
CJ2WLlKDYkkkwQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:01 2025 by rpki-client