Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
File: RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft (raw, json)
Hash identifier: jl27EJM9BpaliJJpJJdiJb5hCG8QWKxugkmybXd1gH8=
Subject key identifier: CE:5D:41:45:06:E2:C5:F1:17:70:50:2E:60:CA:0E:EF:A0:16:47:E0
Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Certificate serial: 019936EE8639B927A2C2C7121C704CEA6C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
Manifest number: 1680
Signing time: Thu 11 Sep 2025 04:00:25 +0000
Manifest this update: Thu 11 Sep 2025 04:00:25 +0000
Manifest next update: Fri 12 Sep 2025 04:00:25 +0000
Files and hashes: 1: HJuvWWI1qAqft10oKlJtZleuo2g.roa (hash: u8HfwrfCCFHcB5jvs7dyE9ffRxdRXb4g1HqA18Sf8YE=)
2: RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl (hash: 7tlRSYJY+sqwFQDZYI56eYUTw8DwbtocCO22NOWlQOI=)
3: wtjN78Y_d1b6O6UDtSU2B1I3v9Y.roa (hash: ReqT7jsHEoa7AvfRGw7Yv2wPcS9GQjwhHtVeUywingA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:86:39:b9:27:a2:c2:c7:12:1c:70:4c:ea:6c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7
Validity
Not Before: Sep 11 04:00:25 2025 GMT
Not After : Sep 12 04:00:25 2025 GMT
Subject: CN=ce5d414506e2c5f11770502e60ca0eefa01647e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:c9:d6:51:96:43:32:9c:d2:64:d1:0c:28:
93:eb:46:33:75:45:f5:ac:9f:31:a1:6e:85:23:2b:
8c:4b:8f:b2:72:cd:1e:8a:60:c6:77:0b:4d:46:62:
63:3a:cb:d7:b2:3a:63:49:75:a8:86:e4:80:5b:7a:
ca:f9:a4:05:b9:9d:d7:2e:88:4a:44:89:ac:4b:4b:
e9:16:98:ea:c5:09:36:79:08:1a:48:9b:8b:bb:9a:
01:1e:5e:92:ee:18:30:8c:b3:0d:bd:43:ba:a1:17:
ad:07:cd:95:4a:7d:86:1d:98:88:65:cf:2f:1a:15:
e9:3f:70:a1:cc:b4:55:e7:d3:45:9a:ef:f8:aa:44:
86:2f:1d:ae:53:4d:71:4d:fe:2d:b8:bc:fb:28:48:
20:87:85:34:1a:80:7f:8c:8f:61:0b:c7:f6:f2:87:
8a:49:3c:33:22:5f:d1:be:4f:8f:b7:90:b6:de:cd:
a9:9b:a0:d8:ec:b1:ab:c0:c1:6a:92:c5:87:2c:10:
06:7a:4a:7f:2c:dd:cd:34:0c:13:5c:b6:4e:7b:5e:
d3:6d:40:fb:46:74:d9:23:8a:8f:07:5c:c2:86:f6:
fd:d6:2e:44:e3:38:c7:3b:65:76:07:48:61:e3:eb:
d3:b1:6c:1f:11:7c:eb:65:fe:97:fb:60:bf:7c:44:
17:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5D:41:45:06:E2:C5:F1:17:70:50:2E:60:CA:0E:EF:A0:16:47:E0
X509v3 Authority Key Identifier:
keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bb:ae:08:95:44:91:55:29:eb:0a:06:01:09:50:e0:d6:55:
4c:40:3c:0d:81:55:9d:52:eb:c1:1f:b6:1f:b3:ee:43:5b:3d:
8d:1f:40:d6:1f:7a:cf:88:58:ce:4e:11:f2:ea:05:cf:c7:b7:
6b:88:20:bd:0d:13:28:5e:5f:74:5f:21:3c:cd:d9:a4:3d:32:
30:17:78:e5:5b:0c:64:c7:12:c8:6c:39:2f:1b:63:39:c6:2a:
61:4d:a7:12:47:6d:56:70:70:b8:7c:ff:6d:b3:c5:0c:63:92:
e8:d9:da:21:49:71:e7:6a:65:fe:6d:cb:79:e6:3f:d7:55:ca:
f2:6b:d3:e2:84:82:e1:fe:3c:ab:91:02:ad:83:50:2d:5a:97:
9b:b5:6d:9b:30:a0:56:7e:10:b0:51:af:0e:f2:1e:a8:7c:bc:
ad:e9:9a:ce:b2:7b:44:52:f5:46:97:49:f4:50:79:44:9a:83:
4c:e5:c9:6a:5f:92:7c:25:e8:5a:c9:57:c7:38:3f:f4:c1:24:
0a:e4:2c:a3:4c:95:95:ce:a8:a5:9e:61:6b:53:53:0e:76:d3:
cb:e8:6e:04:bf:f2:eb:30:fb:5f:e1:88:67:e4:54:07:89:67:
a3:c9:6a:32:62:f8:0e:b6:76:fa:0d:3d:d6:af:1f:91:c9:37:
b0:05:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:31:05 2025 by rpki-client