Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier: aRAgzWshueLMC3r4RL9u296BI3Re9bmMtt+Ha0tcyu0=
Subject key identifier: BE:C6:63:F9:0F:CB:E5:36:37:17:F1:78:2B:36:97:BD:1F:90:2C:3E
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 01988B0ECA18C57D300FDB12F65AC45267CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 19:00:58 +0000
Manifest this update: Fri 08 Aug 2025 19:00:58 +0000
Manifest next update: Sat 09 Aug 2025 19:00:58 +0000
Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: av9rusaRM4HOAo1R8k86EDAtrBft7oftRmj14dNwE0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:ca:18:c5:7d:30:0f:db:12:f6:5a:c4:52:67:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Aug 8 19:00:58 2025 GMT
Not After : Aug 9 19:00:58 2025 GMT
Subject: CN=bec663f90fcbe5363717f1782b3697bd1f902c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:75:24:ea:4b:eb:31:3e:a2:09:6f:3f:b8:
23:4f:cb:30:cc:97:de:1c:e6:60:72:c1:33:07:4c:
a7:69:93:ea:29:b1:e7:72:fc:c1:3f:2d:cf:46:31:
cf:c2:95:7d:41:66:ff:d5:3f:9e:b7:f2:39:fd:27:
b0:74:b6:a1:71:31:5b:f0:95:f1:a0:01:9c:b0:1c:
2c:63:42:bf:5b:ef:6d:b3:ca:2a:63:29:66:0e:df:
ad:c6:4a:87:6c:3c:92:72:d9:ec:bd:ca:1e:c5:38:
90:cb:46:d3:27:08:f7:3e:5d:5e:47:40:ff:c2:c6:
c5:a0:40:f3:0b:ef:1c:2c:df:71:1e:10:8b:95:76:
fc:81:6b:98:e1:c5:ab:f2:2d:27:bb:48:ac:37:ea:
0d:c5:70:fb:af:aa:97:7f:45:46:d8:1d:b6:21:36:
d3:ac:0a:a0:ad:91:6d:84:9a:a9:45:66:7c:8f:1b:
b1:64:78:2a:0a:7d:bc:e3:1d:dc:ac:b3:1e:7a:f0:
28:da:56:21:cd:9a:bd:12:66:90:ab:35:75:22:67:
8d:0e:97:31:ec:2a:50:eb:29:95:21:c2:54:fe:0a:
42:6b:fc:3d:16:1a:16:66:fd:5d:5b:19:cf:2e:02:
2f:ee:18:e1:91:0c:c9:13:bd:e9:ec:15:af:87:af:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C6:63:F9:0F:CB:E5:36:37:17:F1:78:2B:36:97:BD:1F:90:2C:3E
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:b8:1c:a3:dc:d2:0b:6c:77:7a:42:1d:02:38:ea:26:1e:
24:59:c9:11:98:aa:21:b3:e8:ed:39:42:30:41:83:8b:2a:4f:
57:a9:f5:82:69:79:6b:bf:52:d5:4c:a7:35:4c:1e:8d:d7:92:
9e:ab:92:45:16:8a:32:e1:ef:80:44:63:81:c4:dc:56:f5:e3:
e3:ef:86:a9:bf:2c:e3:33:74:6c:0c:b3:c3:2e:b2:e0:8f:4c:
fe:be:42:30:f8:8b:54:20:25:54:46:9e:fb:24:6c:32:cd:f1:
f5:20:cb:c2:9c:dc:b9:98:68:d0:42:87:f3:4c:65:f8:19:38:
1e:a8:1d:a5:1e:fa:8e:2a:94:1d:30:a1:dd:02:0f:5f:96:8f:
16:00:14:40:66:bb:a8:a1:dc:95:62:d8:17:40:d0:c4:73:a3:
bc:34:5e:3d:e6:dc:a8:1c:ad:74:ca:c9:eb:e3:d2:51:30:c7:
71:b1:b6:5a:81:d8:32:98:76:63:5e:83:ce:f5:9b:76:fd:db:
8d:2a:fb:84:0e:58:3e:d3:7e:42:f6:a8:95:0b:f2:f0:a6:ad:
4f:e2:d8:3e:da:41:7f:b1:3d:57:09:f1:9e:ee:bb:e6:be:1f:
ad:8e:0a:8b:d0:30:20:4c:b4:92:de:32:f9:96:4c:bb:af:27:
60:66:cb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:52:13 2025 by rpki-client