Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File: iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier: mCyss8NcyQCbhH6MiULAXkXQO7wkvEEDopkt8fQvs3E=
Subject key identifier: A5:E8:6E:1A:EA:D0:6F:00:A2:A6:A8:5C:E2:FF:76:49:04:80:0B:78
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer: /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial: 0198959221F487E8B454C3A2B46EA2175A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 20:00:38 +0000
Manifest this update: Sun 10 Aug 2025 20:00:38 +0000
Manifest next update: Mon 11 Aug 2025 20:00:38 +0000
Files and hashes: 1: 1-6XFLoPOdCVTnXJMZNU0hBiKubk.roa (hash: OxkphaRHymUnb8SN18Gdla2SO6vLVqs5y/4vbMpFmm4=)
2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: GdW49ASd7sP8Sb3q0Or4BO5bNHNQs/m0LkY5e8iRGyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:21:f4:87:e8:b4:54:c3:a2:b4:6e:a2:17:5a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
Validity
Not Before: Aug 10 20:00:38 2025 GMT
Not After : Aug 11 20:00:38 2025 GMT
Subject: CN=a5e86e1aead06f00a2a6a85ce2ff764904800b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a1:c4:d7:1a:fd:df:6d:08:c8:c0:61:72:d3:
ba:61:8e:19:6a:0b:9e:32:1c:4d:94:4c:f6:5b:dd:
37:0c:bc:f9:27:ab:cb:56:30:7b:18:07:3e:1e:0b:
ee:03:ff:aa:49:ca:29:fd:6b:e1:43:fa:db:e6:e5:
7c:60:78:9d:12:ae:f4:a9:0d:5d:0c:6c:3d:06:96:
06:f8:4b:2f:5a:18:55:1f:d7:08:82:44:d4:95:f9:
fb:cc:0b:49:96:2d:36:b4:49:ad:67:1d:c7:45:b7:
fc:fe:b2:bc:86:3e:0f:73:f3:73:10:a4:00:4c:4a:
d0:b9:11:07:42:09:e2:00:b2:ae:cf:1a:c2:4a:e2:
79:b3:d7:16:db:6e:15:fb:dc:73:f0:f3:b9:47:71:
5d:c0:e4:c3:50:d4:54:6d:f2:e0:33:9f:8c:f2:39:
d1:b2:d4:76:6c:56:59:78:bd:c6:af:ce:93:47:f8:
20:32:25:05:38:9d:2e:f1:a5:39:d7:d0:a4:03:59:
8d:a5:f9:c6:80:ea:df:1d:9d:c6:82:f1:ef:14:14:
c1:52:55:62:d5:d9:b3:0c:89:ae:7c:fc:87:84:4f:
58:d5:bb:32:32:87:32:56:22:fc:4a:50:d4:4a:09:
f2:e6:77:20:11:3b:0d:fe:85:31:7b:c1:55:4d:7a:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E8:6E:1A:EA:D0:6F:00:A2:A6:A8:5C:E2:FF:76:49:04:80:0B:78
X509v3 Authority Key Identifier:
keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:68:e7:4c:ff:b5:9d:5d:f5:46:9f:cc:9d:d9:53:5c:30:
56:ff:08:e2:b0:a3:e0:f7:c4:62:ba:48:1a:27:b6:77:7d:f2:
d8:8e:1c:0f:ea:61:4d:26:0f:02:2d:f8:8d:f6:cc:55:2f:90:
d1:bb:59:fe:b9:5c:91:c6:e6:29:08:8f:c6:de:0b:71:33:09:
1b:c3:ee:d4:b9:e7:e7:c5:6b:fe:b7:1f:b8:69:2b:e2:47:16:
14:94:d1:c0:b3:14:35:71:cc:46:29:3c:45:b8:00:bf:c7:f3:
4b:3b:0f:70:05:45:c9:a8:98:3d:39:56:8d:a0:00:a3:55:25:
c3:7a:d9:ce:83:14:86:b7:0d:b5:10:06:05:04:99:75:5a:1d:
f3:c5:a2:97:4c:9d:b4:46:b3:3b:6a:f6:b1:85:67:5a:7e:ca:
38:c4:33:40:8d:13:ff:5b:86:ae:54:bb:9d:73:3b:aa:fa:a8:
92:a9:8d:3c:5b:95:22:6a:ce:9e:14:71:cf:9e:69:df:37:ad:
f0:76:4d:12:25:7a:0f:03:f3:f2:0d:3b:96:64:5e:46:e0:e3:
c0:b7:30:22:77:ea:c1:0d:aa:3e:85:92:bd:8f:cb:94:1d:49:
c8:e8:11:cf:09:19:ca:b2:ba:a9:16:2e:67:a1:c1:a8:1d:c4:
89:24:ab:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVkiH0h+i0VMOitG6iF1paMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MzFkNjIxZDE5MmY5MmRiMDkzZDkzMzA5MmMxZTIzNmI0
ZDQ5N2IwHhcNMjUwODEwMjAwMDM4WhcNMjUwODExMjAwMDM4WjAzMTEwLwYDVQQD
EyhhNWU4NmUxYWVhZDA2ZjAwYTJhNmE4NWNlMmZmNzY0OTA0ODAwYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKHE1xr9320IyMBhctO6YY4Zague
MhxNlEz2W903DLz5J6vLVjB7GAc+HgvuA/+qScop/WvhQ/rb5uV8YHidEq70qQ1d
DGw9BpYG+EsvWhhVH9cIgkTUlfn7zAtJli02tEmtZx3HRbf8/rK8hj4Pc/NzEKQA
TErQuREHQgniALKuzxrCSuJ5s9cW224V+9xz8PO5R3FdwOTDUNRUbfLgM5+M8jnR
stR2bFZZeL3Gr86TR/ggMiUFOJ0u8aU519CkA1mNpfnGgOrfHZ3GgvHvFBTBUlVi
1dmzDImufPyHhE9Y1bsyMocyViL8SlDUSgny5ncgETsN/oUxe8FVTXoM0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXobhrq0G8AoqaoXOL/dkkEgAt4MB8GA1UdIwQY
MBaAFIgx1iHRkvktsJPZMwksHiNrTUl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80NDA3ODEtZjYxNC00NTBkLTlkOWYt
MmI4NzYxZDhhMTM3LzEvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS80NDA3ODEtZjYxNC00NTBkLTlkOWYtMmI4NzYxZDhhMTM3
LzEvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNxo50z/
tZ1d9UafzJ3ZU1wwVv8I4rCj4PfEYrpIGie2d33y2I4cD+phTSYPAi34jfbMVS+Q
0btZ/rlckcbmKQiPxt4LcTMJG8Pu1Lnn58Vr/rcfuGkr4kcWFJTRwLMUNXHMRik8
RbgAv8fzSzsPcAVFyaiYPTlWjaAAo1Ulw3rZzoMUhrcNtRAGBQSZdVod88Wil0yd
tEazO2r2sYVnWn7KOMQzQI0T/1uGrlS7nXM7qvqokqmNPFuVImrOnhRxz55p3zet
8HZNEiV6DwPz8g07lmReRuDjwLcwInfqwQ2qPoWSvY/LlB1JyOgRzwkZyrK6qRYu
Z6HBqB3EiSSrrA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:43 2025 by rpki-client