Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
File: CWw-hlT-h72rRxHXduRLTwzRtkc.mft (raw, json)
Hash identifier: 5/Q1XMWqGd4OT7K/eJKXuQLKB9EA5+6unXwzv6BV1zs=
Subject key identifier: 7E:C9:EC:43:BE:9D:DF:CF:B6:E1:3D:B5:1F:CD:FF:C8:03:AD:DE:45
Authority key identifier: 09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
Certificate issuer: /CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Certificate serial: 01987450830E7B8F1A2D2EFDE3992BB553F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
Manifest number: 79
Signing time: Mon 04 Aug 2025 09:01:29 +0000
Manifest this update: Mon 04 Aug 2025 09:01:29 +0000
Manifest next update: Tue 05 Aug 2025 09:01:29 +0000
Files and hashes: 1: CWw-hlT-h72rRxHXduRLTwzRtkc.crl (hash: KG8N9mxAkj8SgTaJC5A1HEhjmJCBsMyykQVGZ3wR+WE=)
2: mS5T_cqTnts2Ow3HYiSE22YiT8g.roa (hash: sSwxiZE98c89qQIhPm+kPgJf9ui8k5AIvLj+CG+uA/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:83:0e:7b:8f:1a:2d:2e:fd:e3:99:2b:b5:53:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096c3e8654fe87bdab4711d776e44b4f0cd1b647
Validity
Not Before: Aug 4 09:01:29 2025 GMT
Not After : Aug 5 09:01:29 2025 GMT
Subject: CN=7ec9ec43be9ddfcfb6e13db51fcdffc803adde45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:7e:1e:3f:c9:23:a4:bb:ca:c2:dd:49:89:
25:26:cd:63:97:c6:de:7b:a7:4d:54:a3:d0:d6:96:
d3:bd:62:7b:a3:0f:89:b2:2c:a1:45:e8:48:0c:59:
99:90:13:e1:72:09:5e:74:54:57:8f:a1:61:38:0c:
64:63:8f:f8:34:af:7e:63:bb:31:76:70:f5:4e:c2:
23:cc:75:77:aa:4c:14:33:9b:9d:a9:89:8c:0e:4d:
0e:a7:f7:b7:dc:86:36:d8:74:5d:c3:ba:f6:c2:b7:
0d:e1:75:25:37:b8:7b:b9:98:5c:d0:97:b9:1b:1d:
33:fb:4d:b9:35:68:8b:3e:bb:58:99:01:71:78:51:
ba:7d:ce:e7:ec:a9:06:c9:76:6c:08:cb:b6:18:3b:
ee:77:0b:cb:10:c0:5d:07:a8:97:3c:52:41:dc:f8:
4f:13:26:06:c9:70:cf:32:e9:70:25:7d:64:f5:a3:
83:3b:bc:b5:3a:1e:fb:81:3c:bd:2f:47:4a:9e:7c:
35:cc:10:12:f9:c6:a4:35:c5:cc:9a:bb:ad:db:d5:
1c:45:66:d1:c1:cf:2d:8e:b5:c7:b5:89:d7:cf:57:
e0:09:c5:c3:1d:70:2a:87:a2:f2:b5:7a:34:52:5b:
c6:ce:59:13:2e:31:8b:1e:eb:67:d8:12:ae:c2:7f:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C9:EC:43:BE:9D:DF:CF:B6:E1:3D:B5:1F:CD:FF:C8:03:AD:DE:45
X509v3 Authority Key Identifier:
keyid:09:6C:3E:86:54:FE:87:BD:AB:47:11:D7:76:E4:4B:4F:0C:D1:B6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWw-hlT-h72rRxHXduRLTwzRtkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/625e0e-eba8-4e88-a021-4e7d5848de00/1/CWw-hlT-h72rRxHXduRLTwzRtkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:03:af:9a:59:53:ec:6a:29:f3:26:30:15:ef:ef:3b:0f:6b:
c2:ac:eb:ad:ee:db:90:e7:ad:6d:57:cc:87:cb:82:5e:a0:c5:
22:98:1b:78:71:95:48:55:f1:95:7c:58:c4:44:89:bb:68:2f:
0f:80:58:43:b4:d3:c2:a1:ef:2c:4b:1c:5a:be:82:b4:53:95:
91:5c:85:2c:14:e2:00:6f:73:2d:b1:31:c0:65:16:3a:98:c9:
84:1e:42:6d:92:bd:12:48:34:4c:6b:5e:f1:31:33:84:94:27:
48:ed:f7:52:95:4d:e0:02:e3:09:c8:62:d8:85:a4:0c:a7:91:
8e:13:81:09:58:74:c0:bc:b6:35:e7:53:7f:f6:4d:b3:96:b9:
19:69:73:77:c5:da:e8:b2:d6:c6:3a:89:c0:6f:c7:f7:7d:e2:
91:9c:48:9f:ba:0f:fe:27:50:42:60:e5:67:76:3c:4a:d9:77:
9c:bd:6f:98:69:cb:b3:b2:00:e4:6e:cd:13:cc:43:a9:31:90:
1d:bc:26:68:25:53:0d:2e:f3:eb:c5:00:17:9f:0b:c6:d3:59:
c1:0b:8b:d6:b0:1d:7e:d3:d6:99:68:0e:49:a5:f3:73:f5:10:
72:f1:a5:c0:80:f7:7d:26:3d:1b:0a:6a:d4:00:63:25:db:bf:
ca:fe:a1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:42 2025 by rpki-client