Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier: bqrY+I/fh3UY1ghlndtbQU+hf0vHPIsWSYeNGO6QiSo=
Subject key identifier: 77:9C:21:CB:96:8C:43:46:F7:66:AC:73:8B:31:2C:65:B2:88:BB:58
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial: 01975C1364AFADD5F110D1299793AA0D9F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number: 0A34
Signing time: Tue 10 Jun 2025 23:01:04 +0000
Manifest this update: Tue 10 Jun 2025 23:01:04 +0000
Manifest next update: Wed 11 Jun 2025 23:01:04 +0000
Files and hashes: 1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=)
2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: pnWzTHhjbhrSsH+Elnli10gyXcYwQnpLorD33sId4Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:64:af:ad:d5:f1:10:d1:29:97:93:aa:0d:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Validity
Not Before: Jun 10 23:01:04 2025 GMT
Not After : Jun 11 23:01:04 2025 GMT
Subject: CN=779c21cb968c4346f766ac738b312c65b288bb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:00:80:01:be:f4:1f:da:1b:6d:0e:6c:8d:
3e:a1:f0:fc:5b:8f:2c:c1:14:3e:39:49:9c:f3:2b:
e2:b7:1e:0f:14:4c:98:4e:71:91:c6:6f:c3:17:f3:
0f:a1:e2:72:f5:fa:0a:f6:45:34:0f:34:32:02:57:
96:36:5c:cc:fd:a3:5f:d8:ef:53:15:66:68:f1:76:
66:48:6b:16:ae:24:5e:9b:56:12:b0:93:79:b2:1c:
24:84:74:7a:5d:8b:a1:ac:22:f4:d8:26:15:01:9e:
89:e8:0c:27:21:4d:cd:0b:69:ba:7d:ae:ec:53:f7:
9f:09:f6:41:f9:f3:df:c5:f5:71:c8:c5:08:6b:a1:
1b:c0:32:c8:b5:ed:0e:70:6d:cf:a8:f0:81:ef:5b:
fd:e2:f1:08:5b:c4:f1:93:75:16:51:41:4a:a5:35:
48:9b:8d:f8:53:2b:9b:62:f5:20:00:5e:db:4a:46:
62:80:b0:22:79:77:f7:c6:4e:08:4f:07:6b:fb:c1:
83:9c:14:7b:94:f6:a7:20:a8:fa:68:47:39:0a:58:
c8:67:1c:28:86:7a:3a:8f:af:f4:f6:be:3f:87:7c:
10:04:67:82:f2:89:9b:43:1c:2e:cb:92:23:47:25:
73:f0:e2:a3:f1:35:3c:29:7f:7a:08:92:54:50:fb:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:21:CB:96:8C:43:46:F7:66:AC:73:8B:31:2C:65:B2:88:BB:58
X509v3 Authority Key Identifier:
keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:90:40:b7:5a:8e:a3:23:3c:93:15:f0:73:95:5e:97:73:bb:
32:ee:66:f5:06:4a:79:a6:05:c8:dd:3f:54:fd:41:de:6e:a1:
64:c4:77:27:11:d0:8e:35:49:fc:01:ca:bb:fc:9c:12:fe:ee:
51:e9:cc:a1:46:92:b7:2b:1d:e1:3a:18:b7:a3:28:31:38:7f:
72:f3:cf:44:51:2c:01:7e:0d:bf:67:f1:f9:a0:18:f4:32:61:
97:01:d5:83:4f:c3:ac:1c:75:af:42:ac:4e:9b:f5:96:fb:d3:
06:b1:f9:81:81:0e:41:5f:2b:cf:bc:07:86:04:7d:7c:4c:48:
86:65:0b:d9:2c:20:55:46:09:ac:90:d5:43:14:0b:e2:05:48:
e6:54:ba:20:7a:7f:57:26:20:30:21:09:ce:b6:0a:13:50:45:
a8:ee:71:15:5e:49:df:77:87:1d:de:71:dd:eb:2a:57:df:eb:
44:73:e8:71:5e:5f:71:6e:e4:1d:9a:23:86:88:30:ad:f2:31:
2f:81:ea:53:57:a9:50:3f:39:6b:cd:71:26:0d:0e:a0:e8:86:
de:c7:8a:20:47:a5:aa:39:b9:dd:83:bd:f2:78:4f:8e:b4:74:
ba:32:03:38:b2:92:3d:3b:70:30:fc:72:68:25:2e:5d:6c:fc:
c8:d0:9e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcE2SvrdXxENEpl5OqDZ9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZGYyZWYzNzAwN2Q1NGY4NmJiYTI3NTczZDMzYWQ2OTVj
OWVlNWMwHhcNMjUwNjEwMjMwMTA0WhcNMjUwNjExMjMwMTA0WjAzMTEwLwYDVQQD
Eyg3NzljMjFjYjk2OGM0MzQ2Zjc2NmFjNzM4YjMxMmM2NWIyODhiYjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHwAgAG+9B/aG20ObI0+ofD8W48s
wRQ+OUmc8yvitx4PFEyYTnGRxm/DF/MPoeJy9foK9kU0DzQyAleWNlzM/aNf2O9T
FWZo8XZmSGsWriRem1YSsJN5shwkhHR6XYuhrCL02CYVAZ6J6AwnIU3NC2m6fa7s
U/efCfZB+fPfxfVxyMUIa6EbwDLIte0OcG3PqPCB71v94vEIW8Txk3UWUUFKpTVI
m434UyubYvUgAF7bSkZigLAieXf3xk4ITwdr+8GDnBR7lPanIKj6aEc5CljIZxwo
hno6j6/09r4/h3wQBGeC8ombQxwuy5IjRyVz8OKj8TU8KX96CJJUUPuvNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHecIcuWjENG92asc4sxLGWyiLtYMB8GA1UdIwQY
MBaAFMPfLvNwB9VPhruidXPTOtaVye5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQt
MjNhMjc2YTQyOGFiLzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQtMjNhMjc2YTQyOGFi
LzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpBAt1qO
oyM8kxXwc5Vel3O7Mu5m9QZKeaYFyN0/VP1B3m6hZMR3JxHQjjVJ/AHKu/ycEv7u
UenMoUaStysd4ToYt6MoMTh/cvPPRFEsAX4Nv2fx+aAY9DJhlwHVg0/DrBx1r0Ks
Tpv1lvvTBrH5gYEOQV8rz7wHhgR9fExIhmUL2SwgVUYJrJDVQxQL4gVI5lS6IHp/
VyYgMCEJzrYKE1BFqO5xFV5J33eHHd5x3esqV9/rRHPocV5fcW7kHZojhogwrfIx
L4HqU1epUD85a81xJg0OoOiG3seKIEelqjm53YO98nhPjrR0ujIDOLKSPTtwMPxy
aCUuXWz8yNCetg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:25:23 2025 by rpki-client