Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File: RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier: MIyyXQK+7ZIzuRVtcON4Yhmu65fAvcmoi8/XR6Z7AfE=
Subject key identifier: A1:BD:68:57:46:48:F9:30:37:CF:CF:F3:81:75:0C:F1:03:BC:80:1A
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer: /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial: 0198917E704E7E0C5AB8345481B19A3E50C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 01:00:39 +0000
Manifest this update: Sun 10 Aug 2025 01:00:39 +0000
Manifest next update: Mon 11 Aug 2025 01:00:39 +0000
Files and hashes: 1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=)
2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: B34/5oYSg26NNRByarQBr1kx4/gar6cRnUxqgSQniYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:7e:70:4e:7e:0c:5a:b8:34:54:81:b1:9a:3e:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
Validity
Not Before: Aug 10 01:00:39 2025 GMT
Not After : Aug 11 01:00:39 2025 GMT
Subject: CN=a1bd68574648f93037cfcff381750cf103bc801a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:79:c1:bb:02:aa:81:09:d9:7d:a2:dc:1d:
4a:6a:1a:29:79:84:c4:93:1e:8c:30:b2:96:0b:ef:
30:9a:6b:5f:94:d8:13:ef:42:b2:17:21:0b:9e:d1:
73:39:e9:62:a3:07:8a:a2:30:fb:bb:a6:2e:09:f4:
9e:08:aa:bf:1a:42:b1:1d:9d:2d:11:f2:e9:0e:5c:
8c:e1:7b:fc:5e:cc:28:e9:da:e6:80:ba:98:6b:ff:
e0:66:32:5e:90:64:88:99:32:f7:f9:0e:a8:7d:28:
74:32:26:21:ac:f8:83:7b:52:56:3a:c6:56:95:e9:
d4:2f:31:df:b8:06:fb:23:79:c6:09:7f:a0:bc:b3:
a4:f3:a6:f6:61:37:f6:f4:f3:96:08:11:b8:8a:a6:
62:45:e8:07:04:3e:6a:e1:7a:8e:e4:61:f7:b8:91:
9a:65:4a:3d:33:25:ff:86:7e:06:90:be:46:1c:2a:
5f:be:1f:ca:db:77:14:9e:84:24:ea:e9:48:4a:94:
f1:48:62:7e:35:61:97:3b:74:dd:8c:88:89:8d:38:
5c:77:f4:bc:b0:bd:4a:9d:c4:4d:6b:7c:c5:e8:9a:
0b:30:c8:9f:62:5f:93:a5:ad:99:b4:d9:80:88:ed:
b3:8b:68:6b:20:68:42:76:2b:57:2a:28:ab:9c:54:
97:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BD:68:57:46:48:F9:30:37:CF:CF:F3:81:75:0C:F1:03:BC:80:1A
X509v3 Authority Key Identifier:
keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e9:cf:0c:ca:a6:26:81:e2:28:69:e6:52:44:a3:88:b0:65:
85:1b:70:12:61:88:4b:7b:05:c0:46:29:67:9a:4d:77:f3:72:
7e:14:e4:2c:d9:b4:d5:8d:47:89:64:7d:2a:a1:28:c2:d0:8a:
81:7d:a3:38:44:de:07:06:05:a1:3d:81:4b:a7:58:a2:c6:77:
d3:5d:9f:26:13:c0:1a:39:97:8e:96:95:0d:c2:d1:2b:7f:34:
1f:dd:5a:56:d8:92:40:e8:60:0b:7f:f8:cf:b1:2f:f1:d2:84:
d9:8b:1a:cc:d3:a1:77:3e:f1:7d:d0:d6:62:f9:91:c8:ed:99:
54:34:1e:15:7f:4d:43:0a:d7:dd:47:d0:60:e8:f9:5b:b0:0f:
6a:86:1d:f4:e6:ad:64:bc:e5:92:51:0d:f9:40:44:3b:f9:0d:
76:48:87:95:d3:40:0a:89:84:c8:41:53:47:d8:cf:74:c5:bf:
30:d8:e0:6f:72:6f:4f:09:4c:b5:49:85:b3:61:68:2b:00:73:
0c:32:93:1b:ae:0c:b6:3f:52:19:16:1e:40:6f:25:76:fb:8e:
38:12:61:e7:7f:44:24:99:1b:00:cf:ac:12:af:05:ae:7a:4c:
49:e3:c9:74:a2:f8:30:96:f4:5e:aa:36:cb:6f:8e:02:4e:f9:
df:81:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:26:54 2025 by rpki-client