Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: QiewB2sDV1a2CRfUUfdYJc8tdzTdlggJxmd14bDXfpk=
Subject key identifier: 98:17:0E:C5:E6:5C:10:80:1E:42:5F:DA:41:C9:AB:18:0D:60:A4:CF
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 019952D3B20C76D78B50000B313DBB170519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 118A
Signing time: Tue 16 Sep 2025 14:00:29 +0000
Manifest this update: Tue 16 Sep 2025 14:00:29 +0000
Manifest next update: Wed 17 Sep 2025 14:00:29 +0000
Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: eu2GJjegeQBbxJH4X5VzWqyfGGAgmkPxKGxIJHa2s5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:52:d3:b2:0c:76:d7:8b:50:00:0b:31:3d:bb:17:05:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: Sep 16 14:00:29 2025 GMT
Not After : Sep 17 14:00:29 2025 GMT
Subject: CN=98170ec5e65c10801e425fda41c9ab180d60a4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:49:51:ca:ea:eb:bc:9a:70:b0:9a:ea:3d:
32:05:55:7a:e8:71:84:78:fd:98:e9:40:96:28:92:
da:4f:f7:e1:dc:05:49:74:58:08:88:a8:18:2d:86:
bb:a7:b2:e7:c2:58:ad:dc:52:1a:49:bc:22:f6:98:
02:26:1e:bd:36:5b:39:aa:05:60:48:a6:0c:30:85:
c0:09:33:50:b0:58:eb:39:87:61:70:f4:50:54:43:
07:bc:2e:22:3a:1e:6b:61:88:db:9d:9c:a3:16:2d:
42:e8:7c:3d:17:28:57:3d:c3:9b:cf:1c:2e:8f:44:
b8:1f:b4:90:63:c7:d6:88:6a:79:2f:b1:03:52:1e:
20:04:93:6a:d7:0e:fe:b8:6b:94:60:71:d9:eb:72:
21:48:e6:93:ca:76:9e:96:7f:69:5f:51:9f:18:83:
7a:ac:4c:e1:83:5b:7c:6e:f8:13:cf:dc:6d:0c:6b:
8a:b8:db:8f:f0:97:83:48:e2:a5:60:20:69:0c:34:
92:40:65:3d:01:5e:3e:0f:ae:2e:e4:d8:51:f6:a4:
0f:bf:e5:4d:88:3d:46:83:f0:96:70:90:b3:2a:5e:
04:ff:9f:b4:6c:83:90:ee:80:1b:b4:9e:d3:e6:ad:
04:ee:6e:f5:38:92:65:18:54:54:3e:91:c6:80:06:
d9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:17:0E:C5:E6:5C:10:80:1E:42:5F:DA:41:C9:AB:18:0D:60:A4:CF
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:32:91:99:50:e6:cb:23:87:b7:f2:f4:1e:af:95:49:8d:73:
60:76:9e:1d:01:85:54:69:d2:07:aa:cb:3a:1a:02:bf:b7:85:
84:c5:8f:16:80:3b:75:2a:d9:88:39:87:41:ec:29:48:3f:84:
9e:b8:8d:e5:c5:e1:58:99:0e:14:c6:e8:47:87:4a:e3:45:b0:
db:a9:59:8f:f8:0d:b0:fa:98:71:c1:28:16:76:d8:eb:7a:04:
f3:de:7f:07:8a:d5:2d:0b:55:2a:2c:b5:60:d1:ee:11:d4:80:
e4:46:0f:d3:44:42:ed:80:62:cf:14:36:90:c9:59:73:b7:49:
7d:2a:39:14:5a:cd:f5:f7:4d:20:e5:55:6e:32:fb:37:c9:95:
d1:c7:12:35:fa:d6:42:26:76:60:8c:1f:7a:2c:40:86:4c:99:
08:cf:0d:bd:65:1f:d0:3c:eb:45:d4:8e:d4:87:55:fc:22:a4:
3e:25:b4:6e:31:68:f7:27:7d:47:3c:36:4e:83:4e:33:bc:2a:
d9:32:e5:15:98:ee:79:18:9b:cd:1f:5e:df:89:12:15:55:ad:
9d:92:f3:6e:64:b5:61:80:50:7e:30:7d:b8:a4:09:1b:89:22:
0b:9a:0f:a8:6d:55:38:9e:e6:3c:c8:20:7e:80:5c:6b:7a:83:
80:34:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 19:44:14 2025 by rpki-client