Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
File: cN5wfWwBAGsqymh-qrKctHNrdmg.mft (raw, json)
Hash identifier: drFteZSdLC7o4cFcXyr+MBztVClmzQYGC7ru9QoQrtU=
Subject key identifier: 2C:9A:A1:61:B1:EF:FA:51:07:53:FA:F1:18:73:53:01:52:21:3D:10
Authority key identifier: 70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
Certificate issuer: /CN=70de707d6c01006b2aca687eaab29cb4736b7668
Certificate serial: 0198857A39CCCDAB5181AE165A0E14855818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 17:00:36 +0000
Manifest this update: Thu 07 Aug 2025 17:00:36 +0000
Manifest next update: Fri 08 Aug 2025 17:00:36 +0000
Files and hashes: 1: Jo8Y435n3Pd_3zXxNtedYgjItDk.roa (hash: s59FKEp30KDhXVkiZy91uysMmddt+n0/jacR5LsK5DU=)
2: cN5wfWwBAGsqymh-qrKctHNrdmg.crl (hash: h1gkbwD/73URMYLqF7e5OKhAOIwLEDMqwDin3tvB5vg=)
3: fvocZOR5mjQw63-hlnTV0AYJ-n0.roa (hash: EDtt1bNtketuScVPOmt7fRRKZDdXsTL+CjwO3mYdaKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:7a:39:cc:cd:ab:51:81:ae:16:5a:0e:14:85:58:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70de707d6c01006b2aca687eaab29cb4736b7668
Validity
Not Before: Aug 7 17:00:36 2025 GMT
Not After : Aug 8 17:00:36 2025 GMT
Subject: CN=2c9aa161b1effa510753faf11873530152213d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:09:93:c4:be:e0:1a:25:f8:4e:8c:9d:ab:9b:
09:ad:09:6e:da:81:15:a1:2a:38:2d:ac:73:a3:94:
e7:00:21:20:78:18:ae:94:52:b1:66:cc:d6:28:d3:
57:80:6e:d5:09:e1:4c:6b:f9:61:b2:7e:b4:a8:0f:
c8:cc:d4:b7:9a:a5:6b:c9:39:70:77:08:85:2e:ec:
ec:88:be:54:ff:9a:b7:44:bf:1f:96:4d:c2:b1:f2:
f1:b8:f7:c5:e5:23:ae:b0:27:f5:de:fc:dc:6d:cd:
4d:60:62:f0:14:9a:15:33:d4:66:db:a2:3e:71:4e:
34:bf:b3:3c:97:7b:e9:db:b3:ef:49:c0:d2:49:d2:
8c:a3:2b:3f:82:57:20:5d:fd:36:a3:d3:6d:cf:0e:
42:69:ba:21:df:bc:cf:6f:15:22:d5:ac:5f:71:cf:
6e:fc:e1:a6:6a:d4:bf:4d:30:35:a8:c4:27:23:37:
5c:97:8b:9d:ef:9d:10:fd:46:62:84:a3:d1:77:95:
b7:13:4e:f5:cf:91:27:f5:36:0f:50:b1:82:ed:23:
43:17:3a:a1:3d:bb:7f:6b:91:38:df:db:46:36:0d:
45:f4:c0:81:7c:10:ca:d0:9a:54:2d:34:3c:a1:2d:
e1:b8:1d:84:b4:ce:25:be:6a:8a:a5:97:05:8a:af:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9A:A1:61:B1:EF:FA:51:07:53:FA:F1:18:73:53:01:52:21:3D:10
X509v3 Authority Key Identifier:
keyid:70:DE:70:7D:6C:01:00:6B:2A:CA:68:7E:AA:B2:9C:B4:73:6B:76:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cN5wfWwBAGsqymh-qrKctHNrdmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6ce0c0-937c-4a43-9e84-18e5c537d51d/1/cN5wfWwBAGsqymh-qrKctHNrdmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:71:b2:30:04:22:20:12:ea:14:6c:b8:fc:c8:5b:db:fc:0e:
55:18:e6:ab:a0:a2:b3:cc:3c:52:06:b5:26:70:1a:5a:83:cf:
17:be:3f:bc:39:a4:f0:97:f8:bc:55:a2:d5:40:18:d4:45:43:
0a:e8:02:8c:8f:72:89:dd:3d:67:1e:d0:fc:d7:39:13:0b:6e:
1c:6b:ae:4a:63:98:24:33:e1:8c:f9:1c:8b:a9:3f:fc:ff:87:
e9:4b:7e:49:ab:ec:d1:fe:64:05:e7:5f:1a:ec:64:7e:db:2d:
a5:f0:db:a4:83:45:13:71:fe:36:a8:6c:dc:27:f0:29:a0:3d:
37:58:f6:51:70:b5:8f:33:12:e1:5b:28:3f:12:6f:74:d8:bc:
d3:dd:50:a0:88:52:84:06:f2:f5:56:bd:64:74:fe:49:81:ea:
88:35:20:01:15:fa:51:32:f3:07:d5:6c:6e:12:66:43:6b:5f:
56:bf:b6:e7:19:52:47:90:d8:37:ea:36:0f:c1:35:2a:47:44:
23:56:5d:ce:e0:39:fa:7d:43:79:9d:79:3e:fd:29:a1:3b:ee:
a1:b2:ad:d7:01:2d:9b:88:b2:7e:ca:3d:32:de:26:4d:cb:86:
db:44:6f:46:98:89:91:e0:0c:79:1a:25:b7:18:fd:42:30:f0:
d6:f9:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:04:14 2025 by rpki-client