Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
File: w1k5CyF0quIpYaDzwp_EAvH-I8g.mft (raw, json)
Hash identifier: +nvHMcbZsGfw8wNNVLMB1J/BoYK6U6KhQNAgfcvN82Y=
Subject key identifier: 75:9D:F8:1F:78:58:00:9D:AC:59:AE:01:FA:48:29:9F:DA:77:65:F9
Authority key identifier: C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
Certificate issuer: /CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Certificate serial: 0198744F97159AF8EC5A1C1BE29FE8785E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
Manifest number: 0285
Signing time: Mon 04 Aug 2025 09:00:29 +0000
Manifest this update: Mon 04 Aug 2025 09:00:29 +0000
Manifest next update: Tue 05 Aug 2025 09:00:29 +0000
Files and hashes: 1: roRpX3bRKDuocHxusV0WH0MjbWo.roa (hash: P8a5SzApQjB4G+3G1+p+RkD68unIbIu33oid4GIMvlk=)
2: w1k5CyF0quIpYaDzwp_EAvH-I8g.crl (hash: bRmsgRKd0/sysC00gRsY4crxJ27lw3i8b4+SfOGq+Ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:97:15:9a:f8:ec:5a:1c:1b:e2:9f:e8:78:5e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c359390b2174aae22961a0f3c29fc402f1fe23c8
Validity
Not Before: Aug 4 09:00:29 2025 GMT
Not After : Aug 5 09:00:29 2025 GMT
Subject: CN=759df81f7858009dac59ae01fa48299fda7765f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:49:b7:19:1d:e0:7b:8b:f5:fb:94:91:1c:c4:
6c:e3:f4:a8:96:3c:90:26:14:31:73:42:4d:44:24:
35:1a:0f:6b:c9:2e:2f:b8:73:95:05:82:ed:2f:99:
5e:64:b4:73:0f:ce:dd:4b:42:d4:bd:95:8b:e2:fa:
0c:76:eb:2f:7a:56:ff:fd:a4:51:8f:82:48:ea:64:
29:7d:1b:63:99:c9:c5:29:9d:37:74:d3:2b:f0:f2:
61:9d:11:fa:e7:b5:bf:f1:46:fb:05:a7:75:b1:27:
88:59:b8:03:a9:19:fe:50:3c:85:60:1a:b0:fc:64:
08:2a:8e:8a:74:0a:05:e9:dd:5a:fb:8e:75:03:5a:
a8:4b:0b:2e:75:39:25:b6:fd:be:db:c5:0c:df:2a:
74:0a:ef:9c:da:93:c1:a0:84:e5:fb:d4:cf:a9:71:
d0:db:76:c7:03:b0:5a:18:d7:70:33:40:bd:a4:38:
4c:b8:61:e8:65:61:69:d6:00:a2:f1:c7:f9:3a:17:
f2:66:32:ae:c0:03:ac:b2:ac:de:c0:f7:30:d0:24:
42:ef:1a:21:fe:9d:2e:8e:da:4c:6b:6f:d2:3f:56:
3f:f9:79:93:1c:8c:5e:0b:f6:4e:1b:4b:fa:74:e6:
52:5a:02:05:5d:7e:a7:fe:d1:e7:b1:8d:76:10:fb:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:F8:1F:78:58:00:9D:AC:59:AE:01:FA:48:29:9F:DA:77:65:F9
X509v3 Authority Key Identifier:
keyid:C3:59:39:0B:21:74:AA:E2:29:61:A0:F3:C2:9F:C4:02:F1:FE:23:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k5CyF0quIpYaDzwp_EAvH-I8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5bba7b-daa7-4432-9270-ec5c7de7aae1/1/w1k5CyF0quIpYaDzwp_EAvH-I8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6b:6c:59:e0:1b:3e:f7:c1:9b:6f:3c:ba:84:2b:15:13:01:
f6:90:b1:5e:56:c7:b5:fc:74:43:6c:a9:e4:1e:4d:f2:0c:a7:
dc:65:d3:fe:18:0a:d0:f7:ce:a5:aa:7a:a1:96:60:8a:a4:b6:
bf:14:45:62:58:a6:d5:da:b2:f0:50:a5:c3:af:57:4e:0a:41:
fe:70:64:15:84:ba:0a:29:b5:62:bc:d3:d3:20:48:72:fc:72:
90:2a:3b:53:0c:71:0b:eb:d0:ed:98:ae:ff:e1:74:f9:85:e3:
35:eb:d3:dc:45:0a:41:35:59:34:16:90:19:5b:53:dc:3e:15:
32:9e:2d:46:f1:1c:cd:10:bb:c2:fc:a8:65:6a:e7:8d:2e:78:
03:23:68:09:cb:17:ea:62:45:5c:31:31:0f:9b:54:8a:15:73:
87:2f:d4:41:e7:7d:08:3c:f2:a0:ec:a6:a1:1d:1a:18:bd:20:
33:57:78:1f:99:da:ba:eb:38:16:cd:dc:48:1e:4e:4d:cd:9e:
2f:57:d1:b8:fe:8a:39:69:67:69:aa:0d:3f:ab:02:05:f4:79:
87:db:26:48:a6:36:91:13:40:a8:72:11:d6:34:21:5a:3f:76:
ac:69:bf:9c:4c:b7:6d:18:15:38:95:2f:e4:c3:35:fa:06:85:
8b:47:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:04 2025 by rpki-client