Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: Yje9W7BwTNszhZKOg+aXTB9hrCQatxjKIvxVY8ONvhE=
Subject key identifier: EA:44:27:75:A8:A1:FF:BD:B2:80:BA:58:20:A2:54:09:FA:B6:9D:19
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 019873E25416D4A2FA78D86314D559F54EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0840
Signing time: Mon 04 Aug 2025 07:01:09 +0000
Manifest this update: Mon 04 Aug 2025 07:01:09 +0000
Manifest next update: Tue 05 Aug 2025 07:01:09 +0000
Files and hashes: 1: Ht6Wd5Bw2md9CUATtRL2VX-XFlc.roa (hash: 6oTLBNPocrrlaUNBq/IOSo88GlYRhWvOfw5kea2nyRc=)
2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=)
3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: 6WDJ2D60wF58BFZlvMvG02GsWCsyPhIHFylLNjakvM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:54:16:d4:a2:fa:78:d8:63:14:d5:59:f5:4e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Aug 4 07:01:09 2025 GMT
Not After : Aug 5 07:01:09 2025 GMT
Subject: CN=ea442775a8a1ffbdb280ba5820a25409fab69d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:9c:4a:62:f4:06:fc:af:5f:97:e0:19:4d:
d1:92:74:88:b4:dc:c9:10:14:c6:15:b6:05:eb:19:
11:97:56:32:9c:e9:f0:3d:9a:e0:d5:6a:4a:e9:3e:
07:01:97:91:49:ac:3c:39:9f:8a:e1:74:73:e9:82:
d0:80:16:63:1e:08:84:b2:6b:55:55:16:ed:2d:31:
07:0b:b4:ff:bc:d9:91:05:ae:b3:08:0e:04:d9:25:
66:98:51:6e:44:c4:a7:c5:78:82:b8:16:6c:31:82:
a0:21:6c:e2:02:a0:c8:42:2c:4f:8f:87:a8:b3:68:
21:38:f6:3d:92:3d:fc:0a:6e:a3:5e:85:fe:7c:29:
5e:cc:5e:3d:8c:f4:82:b4:c0:85:91:ac:e1:13:7a:
5a:61:6f:18:cc:33:d1:c5:6d:3e:22:d2:75:8f:d1:
83:fb:ae:37:3c:f8:fb:b9:77:94:31:ec:8d:c1:92:
3e:42:ca:48:d7:a3:7d:c2:28:35:0f:76:53:31:94:
4b:41:71:58:40:f0:38:af:c9:e2:a5:3b:95:a2:2c:
f8:1c:4a:36:b4:2d:a2:db:7b:76:89:7a:84:57:ba:
4c:66:dc:ae:18:f9:d7:77:40:6b:62:49:e3:1b:31:
f9:e7:24:08:b8:29:d3:de:92:42:af:7c:09:76:95:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:44:27:75:A8:A1:FF:BD:B2:80:BA:58:20:A2:54:09:FA:B6:9D:19
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:1b:33:6d:17:88:7e:9f:e1:83:79:f3:cd:ac:0f:00:b2:3d:
c3:6f:a6:48:0e:62:55:87:43:c2:b8:b3:9c:16:b1:fe:36:57:
36:f7:18:c5:88:d6:68:96:a7:40:73:1c:58:12:0b:c1:4f:52:
99:a6:a8:6f:4e:d7:ec:08:f1:6b:00:81:b8:99:f6:0e:76:72:
a9:67:40:6f:4f:27:1d:76:84:07:d9:bf:3a:88:1e:5a:8d:3b:
e6:c1:28:e8:4d:bd:7c:d4:84:a0:40:8f:34:2d:8e:b0:f9:2a:
ae:d6:2f:6a:4e:3a:65:45:fa:68:b7:26:e7:e8:5f:86:64:7e:
88:90:3f:9d:b7:39:88:0d:4f:9b:e3:ea:2d:42:34:73:93:65:
77:44:65:5e:1e:2e:d8:46:02:75:2f:63:64:46:1a:e7:8a:bb:
90:e6:f9:10:de:3d:06:9c:d1:32:2a:6f:c9:1c:ff:6a:a5:6f:
d7:12:be:01:fa:94:46:84:54:7e:d2:e0:66:06:7c:96:58:83:
b7:48:a3:ef:24:31:a7:5c:8b:11:1d:b7:00:2d:19:55:50:f0:
89:7b:a7:4e:3a:08:0b:32:88:3f:5a:7a:b3:dd:ff:6d:6d:f7:
ed:94:9d:fc:1d:40:a5:1f:f4:b8:a4:37:64:e1:7b:87:c9:1a:
95:d6:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:53 2025 by rpki-client