Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
File: rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json)
Hash identifier: iXYdCq4iXXnRbsK3voaSZHWYh8MseLzNmkvoIGkzpXI=
Subject key identifier: 23:57:B2:17:34:B6:AD:90:9E:51:3A:90:57:D1:26:CE:19:8E:02:83
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial: 0198820C2EF578E7AF3F8DD0F41110E7E831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
Manifest number: 0186
Signing time: Thu 07 Aug 2025 01:01:33 +0000
Manifest this update: Thu 07 Aug 2025 01:01:33 +0000
Manifest next update: Fri 08 Aug 2025 01:01:33 +0000
Files and hashes: 1: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (hash: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=)
2: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: lQCsN31MUX2T4+KlmEOUDhiixx3VkZVYHSJ1NjRMoDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:2e:f5:78:e7:af:3f:8d:d0:f4:11:10:e7:e8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
Validity
Not Before: Aug 7 01:01:33 2025 GMT
Not After : Aug 8 01:01:33 2025 GMT
Subject: CN=2357b21734b6ad909e513a9057d126ce198e0283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:d2:40:8f:b8:2e:2e:bc:86:7d:a2:89:7b:
0a:43:a9:19:50:4e:6c:b6:b3:79:05:ae:60:88:db:
17:3e:dd:36:3d:fc:d3:5d:19:45:6e:a5:93:d1:f7:
a4:9f:8c:09:86:01:d7:e6:4f:ff:3e:e4:22:1d:dd:
9f:f5:8b:f4:98:54:9e:36:9b:47:b1:95:7d:93:c1:
92:d6:87:35:15:b0:7a:41:0c:55:33:2d:ec:e7:9c:
c0:a9:9f:72:fa:9d:f5:f6:9a:5d:6d:84:23:cb:e7:
64:a0:a7:83:9b:6b:26:c1:6c:47:65:54:0f:1f:bb:
e0:e6:d5:8a:37:54:f1:98:d1:a8:66:1d:52:e7:ea:
e7:05:5c:52:ec:0b:45:c2:e0:a2:09:a2:4b:36:72:
d1:6e:7b:ba:b5:ea:18:eb:3c:4e:cc:fd:13:66:6b:
ba:32:9a:6a:25:ae:87:13:fd:8e:16:9e:00:e0:26:
fc:83:a3:75:e3:cb:21:5d:6d:54:3b:51:73:96:c2:
3f:66:67:86:c5:b6:bd:e0:be:99:4b:ea:67:51:de:
4a:22:b5:1f:3b:19:c8:3d:eb:0c:4c:1a:66:e9:f8:
49:fc:2d:2d:16:9b:ee:84:f1:24:d5:0c:71:80:58:
55:90:f1:ad:e9:9e:26:8a:ce:7b:2d:15:42:02:ea:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:57:B2:17:34:B6:AD:90:9E:51:3A:90:57:D1:26:CE:19:8E:02:83
X509v3 Authority Key Identifier:
keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b5:13:8e:45:dd:7d:d5:16:ff:e5:d5:8c:9d:b6:1e:b9:fc:
f7:89:c5:36:ba:d2:ab:a5:9e:5d:91:38:2d:80:04:d6:97:33:
34:8a:50:28:48:b6:05:79:c4:78:f8:d4:ee:cf:8b:ae:02:40:
bf:d6:d8:30:1b:42:56:84:a1:f0:b1:35:ba:e5:67:34:d6:16:
04:28:72:94:8d:5a:c8:11:b1:92:7d:46:16:a3:93:ed:f3:58:
17:64:14:27:3e:83:bf:64:f5:d9:a6:cd:21:89:f8:63:71:c8:
a9:6f:ac:85:29:fd:df:ff:f3:9d:4d:d0:57:ac:a5:12:87:45:
bc:55:29:27:c4:ad:33:32:01:2c:cf:12:9d:56:8c:30:78:51:
c7:56:97:22:6a:12:91:ae:54:c8:57:d1:5a:46:f9:44:39:ce:
9d:26:17:7f:02:e2:ed:50:e5:92:1f:61:bd:cb:e1:cf:ca:20:
0d:07:41:ec:4c:18:35:70:a1:32:eb:53:f4:6b:82:59:62:d7:
cd:41:17:49:46:6e:bf:3c:4e:cd:d2:01:f3:7d:f0:ea:40:0e:
80:9d:3e:a1:c1:0e:c4:fe:75:fa:d5:4e:25:9c:2e:35:54:c8:
db:95:6c:25:ad:e0:66:14:10:68:f2:11:35:af:fb:a7:90:70:
bd:df:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:18 2025 by rpki-client