Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
File: CjMvWtwEaVM7vdz86JV-ruWL_WA.mft (raw, json)
Hash identifier: VSNzm1JWLkdSpdzgjKY3gKU7xrp48YcPD1m9Ie1lhtc=
Subject key identifier: FA:06:7B:2B:90:D4:E3:CC:4A:D7:6A:66:AE:BF:64:07:17:0B:C8:FC
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Certificate issuer: /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial: 0198805480DC203F49776816347E71A74181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 17:01:18 +0000
Manifest this update: Wed 06 Aug 2025 17:01:18 +0000
Manifest next update: Thu 07 Aug 2025 17:01:18 +0000
Files and hashes: 1: CjMvWtwEaVM7vdz86JV-ruWL_WA.crl (hash: oHkKsUOa33khv/Q5s8OH9xj7HmYCcc4fWrMvpu6Jnrw=)
2: GONoBaS0nACGnEjc-yHuqDoDlew.roa (hash: eVcWG363H9IPwj/aWLR4h7Mq2fdRg0ul16LrmgLPOaU=)
3: kSa4_sqr5-NiqBRmmF4fkyu-chg.roa (hash: nw6nn6yk21XAzxXJuVEoChD6KrMH42rDNZdSGxHsW0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:80:dc:20:3f:49:77:68:16:34:7e:71:a7:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Validity
Not Before: Aug 6 17:01:18 2025 GMT
Not After : Aug 7 17:01:18 2025 GMT
Subject: CN=fa067b2b90d4e3cc4ad76a66aebf6407170bc8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:a7:64:fb:61:0f:35:3e:86:2a:ac:e4:46:
f2:7d:8d:7c:8e:6a:24:c3:79:ab:02:fd:70:c8:25:
6b:8e:85:08:a7:12:d0:73:20:29:da:16:49:71:36:
85:fc:65:dd:af:e4:93:7a:8d:f6:68:6d:81:30:0c:
37:f7:30:84:b1:6d:f2:54:e5:dc:4f:7a:4d:cd:e8:
57:1b:83:e1:e8:f3:0c:6a:e6:6c:f0:0d:ae:f9:02:
b0:d8:a4:b9:4f:7c:28:1d:2c:ef:63:43:c2:7b:68:
0e:10:81:3f:ab:e6:17:3f:97:51:f0:62:57:23:46:
30:b2:15:6c:43:23:e3:54:13:ce:c9:57:e1:10:e7:
27:39:94:cf:05:89:3f:a4:22:47:83:c2:a4:df:21:
63:43:bd:97:f4:e9:be:32:6d:ba:ee:fd:c9:df:7e:
16:60:2b:ac:70:0b:14:24:aa:43:d2:08:b2:40:c5:
55:0b:a8:de:8f:79:20:e7:6c:67:81:e5:22:67:d9:
b2:71:da:7a:9d:6d:89:2e:62:67:02:cb:a1:76:50:
32:52:b3:bc:00:14:65:dd:cf:40:04:2a:f3:d3:0d:
8c:6d:1a:2f:0f:a1:8b:9c:57:5d:70:69:43:b0:2b:
6d:77:a3:66:43:94:e8:7a:c4:11:2a:c2:ec:cb:c5:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:06:7B:2B:90:D4:E3:CC:4A:D7:6A:66:AE:BF:64:07:17:0B:C8:FC
X509v3 Authority Key Identifier:
keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:56:ab:be:09:3c:d9:23:28:c2:fd:c8:4a:5c:61:df:f7:08:
ea:67:c4:63:a9:22:1a:2a:3b:bc:80:77:7b:9d:31:8e:bc:89:
61:eb:dc:6a:3e:6a:9e:20:0b:12:e0:fa:7d:0f:f2:e1:31:22:
ba:99:59:53:c2:63:01:83:56:c5:6c:b1:7d:32:e9:f6:da:0f:
d7:92:f7:c9:34:8e:62:27:24:df:f5:00:33:7e:2d:ce:d1:2f:
bb:c1:f5:60:53:9e:8d:e4:fc:94:36:42:74:09:fb:d9:c0:a8:
8f:61:a1:a2:1a:4c:f0:ea:31:de:2a:a1:ac:4a:9e:3c:2a:95:
7a:14:23:b7:c1:c3:0b:72:8c:42:ed:be:a0:b7:a0:91:87:8a:
63:8d:73:c5:15:48:30:49:18:2d:69:8e:91:ce:f4:74:90:ad:
03:c1:64:06:e3:54:c4:ab:12:46:b0:5a:c8:ee:ba:48:40:0f:
39:2d:ec:79:f8:22:b2:8a:95:f9:b3:62:7a:8f:bb:a1:51:79:
e3:37:1d:24:91:b8:b4:67:90:d7:f9:1d:d5:e7:a1:20:b8:b2:
df:f6:a5:57:5f:b5:9f:65:a6:15:b3:7b:53:b6:7c:d8:9b:e8:
81:46:a8:c1:e7:ba:54:8b:0b:65:0d:32:05:ac:02:13:90:86:
dd:5a:ad:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAVIDcID9Jd2gWNH5xp0GBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzMyZjVhZGMwNDY5NTMzYmJkZGNmY2U4OTU3ZWFlZTU4
YmZkNjAwHhcNMjUwODA2MTcwMTE4WhcNMjUwODA3MTcwMTE4WjAzMTEwLwYDVQQD
EyhmYTA2N2IyYjkwZDRlM2NjNGFkNzZhNjZhZWJmNjQwNzE3MGJjOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0mnZPthDzU+hiqs5EbyfY18jmok
w3mrAv1wyCVrjoUIpxLQcyAp2hZJcTaF/GXdr+STeo32aG2BMAw39zCEsW3yVOXc
T3pNzehXG4Ph6PMMauZs8A2u+QKw2KS5T3woHSzvY0PCe2gOEIE/q+YXP5dR8GJX
I0YwshVsQyPjVBPOyVfhEOcnOZTPBYk/pCJHg8Kk3yFjQ72X9Om+Mm267v3J334W
YCuscAsUJKpD0giyQMVVC6jej3kg52xngeUiZ9mycdp6nW2JLmJnAsuhdlAyUrO8
ABRl3c9ABCrz0w2MbRovD6GLnFddcGlDsCttd6NmQ5ToesQRKsLsy8UzTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoGeyuQ1OPMStdqZq6/ZAcXC8j8MB8GA1UdIwQY
MBaAFAozL1rcBGlTO73c/OiVfq7li/1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pNdld0d0VhVk03dmR6ODZKVi1ydVdMX1dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmNjgtYzE2Zi00YTJmLTgwZjct
NDEzMGZhNDhiNTU5LzEvQ2pNdld0d0VhVk03dmR6ODZKVi1ydVdMX1dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNzhmNjgtYzE2Zi00YTJmLTgwZjctNDEzMGZhNDhiNTU5
LzEvQ2pNdld0d0VhVk03dmR6ODZKVi1ydVdMX1dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlarvgk8
2SMowv3ISlxh3/cI6mfEY6kiGio7vIB3e50xjryJYevcaj5qniALEuD6fQ/y4TEi
uplZU8JjAYNWxWyxfTLp9toP15L3yTSOYick3/UAM34tztEvu8H1YFOejeT8lDZC
dAn72cCoj2GhohpM8Oox3iqhrEqePCqVehQjt8HDC3KMQu2+oLegkYeKY41zxRVI
MEkYLWmOkc70dJCtA8FkBuNUxKsSRrBayO66SEAPOS3sefgisoqV+bNieo+7oVF5
4zcdJJG4tGeQ1/kd1eehILiy3/alV1+1n2WmFbN7U7Z82JvogUaowee6VIsLZQ0y
BawCE5CG3Vqtcw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 18:48:06 2025 by rpki-client