Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
File: _0ywnegmUO5MxDJ-q2dwt6sUfvs.mft (raw, json)
Hash identifier: mNELQqDi8CSB7AfUQ8XkztaIZ5oW+FTaiTMx1VjFZz8=
Subject key identifier: 94:A8:8C:4E:B0:9E:A1:CB:28:6C:5E:6A:B1:61:AA:2A:24:EC:5E:22
Authority key identifier: FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
Certificate issuer: /CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Certificate serial: 01987C777D8B99978E6C17609E571458A1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 23:01:02 +0000
Manifest this update: Tue 05 Aug 2025 23:01:02 +0000
Manifest next update: Wed 06 Aug 2025 23:01:02 +0000
Files and hashes: 1: RcUeax2IJNxx-VLzmeCKMxA0SJU.roa (hash: vene8siI5AmwNR1jjMXzcgVgONNVdoSDnnxQWvu3CqU=)
2: _0ywnegmUO5MxDJ-q2dwt6sUfvs.crl (hash: m9QAsiacWDcthf/3xUiQ9Oo+K+QVHOrjAa/LgHnfiyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:7d:8b:99:97:8e:6c:17:60:9e:57:14:58:a1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4cb09de82650ee4cc4327eab6770b7ab147efb
Validity
Not Before: Aug 5 23:01:02 2025 GMT
Not After : Aug 6 23:01:02 2025 GMT
Subject: CN=94a88c4eb09ea1cb286c5e6ab161aa2a24ec5e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:00:63:8d:9c:09:a7:a7:5a:0f:93:56:c2:
15:6e:44:26:f7:06:80:7d:8a:a6:77:04:22:a6:aa:
07:29:b5:a4:68:99:e9:9e:13:42:78:ec:8f:a3:3a:
aa:6a:2d:7d:46:21:2b:0b:e9:45:3e:2d:de:78:6f:
c7:af:83:3f:f8:0a:9d:2d:e9:3a:fe:5e:15:8b:7c:
f3:be:4b:18:46:5f:29:a6:15:0c:2f:27:90:90:95:
56:72:74:6f:c1:73:87:83:39:33:cc:41:03:75:51:
bb:af:94:64:1d:b8:c5:e9:81:10:f0:37:e8:f7:48:
89:a9:2b:24:2e:bd:91:16:b5:08:11:ed:d1:3c:e4:
4b:2c:94:7c:e4:d4:bb:95:8d:9c:a3:f7:83:7e:09:
7f:b4:68:7a:1c:94:40:82:92:c7:a2:9a:b5:fe:f8:
ba:45:ce:1f:7e:18:9b:df:78:8d:f4:9f:21:d2:3c:
bf:a4:5b:33:62:62:60:c8:51:d9:3b:cc:d8:38:35:
18:6e:7e:5b:ac:24:cd:7c:59:59:e2:8b:03:ff:ba:
35:81:11:df:69:97:b6:9d:31:31:71:07:1a:75:94:
b6:c5:80:b0:e9:f2:f0:e2:74:80:f8:a0:97:34:68:
b5:e4:a9:f6:b5:d8:4c:8d:ed:03:66:ea:bc:fa:23:
7d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A8:8C:4E:B0:9E:A1:CB:28:6C:5E:6A:B1:61:AA:2A:24:EC:5E:22
X509v3 Authority Key Identifier:
keyid:FF:4C:B0:9D:E8:26:50:EE:4C:C4:32:7E:AB:67:70:B7:AB:14:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0ywnegmUO5MxDJ-q2dwt6sUfvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aed946-9efa-48b7-a8c7-1465a4b52136/1/_0ywnegmUO5MxDJ-q2dwt6sUfvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e0:b1:11:56:fc:45:ad:1a:9e:44:d6:6e:e8:9e:45:87:da:
70:38:bc:32:60:9a:44:20:03:3e:37:94:e0:3c:23:02:77:53:
49:d9:d0:e8:95:c7:e7:69:a1:76:a9:9e:38:cf:cd:b1:70:c7:
22:5e:68:6d:34:8e:6e:36:62:ff:d3:59:a7:0c:92:67:8f:9f:
45:02:ba:e2:27:c3:4e:59:8e:aa:7e:fa:6b:e6:43:cf:c1:e3:
0a:b0:df:b6:fc:3f:83:56:27:f3:54:fe:c3:be:9b:86:c1:b7:
a7:a4:83:1d:a2:09:84:07:b5:3f:88:d6:a5:84:a7:ac:89:54:
54:a3:21:15:ed:30:ce:95:5d:7f:bd:87:48:18:8f:04:da:b9:
42:60:51:cd:03:e0:c2:0c:fc:7b:6b:97:a6:70:4a:f1:d3:77:
ed:4c:28:df:6c:9f:77:e9:fd:bd:c9:fa:f4:26:8d:87:af:0f:
a0:42:af:97:78:49:e9:b3:31:35:ae:1c:09:b7:5d:dd:38:48:
25:d6:63:ac:0e:24:26:68:9c:83:27:92:88:10:7d:16:5d:92:
cb:87:53:2a:2f:b1:48:1f:57:c2:be:a8:0b:26:8c:ec:e0:dd:
6c:ad:3c:5b:16:d8:da:3f:a4:e4:46:a1:8c:4b:74:1c:b0:d1:
af:a4:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:04:28 2025 by rpki-client