Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier: SP2Fok0XpkEVuTPvj9g8qpphFBg/5fAxI6FXCZZWjSI=
Subject key identifier: 89:3D:9F:EA:4E:58:BE:76:EB:AE:8E:7F:40:26:94:CB:BD:A0:F0:0B
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 0197824511BE494D379287DD8F4128A093B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 09:00:53 +0000
Manifest this update: Wed 18 Jun 2025 09:00:53 +0000
Manifest next update: Thu 19 Jun 2025 09:00:53 +0000
Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: y5DdgfLbtwkts/yPK8hNUXEL6f6K+klmDN7yBeFfif4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:45:11:be:49:4d:37:92:87:dd:8f:41:28:a0:93:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Jun 18 09:00:53 2025 GMT
Not After : Jun 19 09:00:53 2025 GMT
Subject: CN=893d9fea4e58be76ebae8e7f402694cbbda0f00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bf:5b:f9:85:73:77:e1:d2:ba:9a:31:da:86:
78:99:82:74:fe:4b:b4:60:1c:b3:af:75:e8:05:ab:
ce:f9:52:ee:cd:78:be:32:1c:a4:37:21:16:c1:49:
52:72:0c:59:8f:32:9c:c3:69:5c:93:f0:73:c7:a3:
62:fa:63:4c:21:db:3c:f8:10:52:a6:cc:b8:d3:99:
dc:6c:64:ea:2b:6e:13:e5:4b:ee:45:da:f3:e2:1d:
2e:c5:35:75:0c:c8:01:7d:0c:12:85:ed:0c:6e:e8:
a1:01:37:a0:14:5b:51:65:67:26:c4:db:d8:f1:2b:
6a:7c:58:4d:ef:55:87:f8:12:e0:ee:7e:f4:91:51:
98:0f:bd:31:26:18:86:7e:ca:8f:24:0e:9c:25:88:
98:0a:90:8a:de:c0:31:da:a9:95:53:17:ce:97:5d:
f8:24:e7:1f:f3:f3:a1:2c:e1:cc:12:ad:e1:c4:97:
8b:e1:0e:cc:1d:fc:d0:6e:76:55:72:5f:06:8a:0b:
ff:d3:79:7c:05:a5:de:f6:2c:e2:85:fd:2f:80:b6:
06:05:50:95:5f:11:0c:47:f5:c6:50:ca:59:51:89:
34:1b:95:b2:a0:19:6e:d7:ad:86:28:98:20:3f:59:
ad:69:2c:2c:72:1a:e4:b1:1c:a6:35:62:5b:d2:0d:
39:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:9F:EA:4E:58:BE:76:EB:AE:8E:7F:40:26:94:CB:BD:A0:F0:0B
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:37:88:77:1d:5e:2a:d8:a4:59:7e:bf:10:35:df:86:da:ee:
ef:50:dd:66:19:73:46:a5:c3:50:f0:4f:3f:e7:bc:35:0d:15:
fc:cc:84:c0:26:91:9c:0b:26:f5:0c:e7:11:11:7a:2f:71:2f:
bd:7a:d8:73:c3:dc:7b:ee:22:d7:b0:11:5c:7b:b1:7c:36:6a:
5b:8b:3d:c9:29:14:08:7e:6b:ee:09:9e:2f:03:6f:36:d5:96:
23:67:25:ce:9e:e7:23:21:f2:4b:64:fd:ae:e0:53:43:9e:9c:
13:6d:c5:8f:1f:0e:10:ab:31:f2:b3:bb:28:0d:12:dc:57:bc:
57:c3:97:49:fa:c6:7d:27:88:79:7d:09:f2:a2:aa:ea:48:fe:
ca:60:ce:72:54:6c:f1:99:e5:e8:3b:25:c9:1a:d4:f4:61:4c:
5e:f1:a2:ad:76:f4:ce:e7:f7:d9:50:4a:44:22:57:f5:20:3a:
56:85:af:62:11:cf:f3:61:a0:95:05:a6:65:bd:b1:72:e9:cc:
03:c0:e2:78:ec:a7:fb:cc:04:da:61:93:c0:a3:43:12:f5:0d:
be:83:78:d2:97:1e:af:ab:d8:ab:e8:63:2b:21:6a:e7:1f:20:
36:ca:b8:cc:f6:da:91:9c:80:1e:aa:11:d0:2d:4d:ab:28:ad:
ce:6f:1d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:53:27 2025 by rpki-client