Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json)
Hash identifier: q24WSZDOTmFdDbH1ozLkAT3UckYkRNnMxOPUg5JfH3E=
Subject key identifier: 67:9F:21:83:59:D9:85:B6:FD:D1:98:48:63:37:B9:EB:7B:69:B0:D3
Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Certificate serial: 01987C09500E4195BB06C0EC9D0DE9FACC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
Manifest number: 1143
Signing time: Tue 05 Aug 2025 21:00:41 +0000
Manifest this update: Tue 05 Aug 2025 21:00:41 +0000
Manifest next update: Wed 06 Aug 2025 21:00:41 +0000
Files and hashes: 1: 30FXUVnarbL0GjkvKeRwjePJ-94.roa (hash: w3ArHa2Xe04OwAG/G7XOfvacJT+uwVTSzzeS8Z01wes=)
2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: ggvwASvpuSldRx52Zs6oPjHH67GcJ9m/Yv+LB0ERltg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:50:0e:41:95:bb:06:c0:ec:9d:0d:e9:fa:cc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39
Validity
Not Before: Aug 5 21:00:41 2025 GMT
Not After : Aug 6 21:00:41 2025 GMT
Subject: CN=679f218359d985b6fdd198486337b9eb7b69b0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:1f:5b:3f:1a:c2:57:d4:2c:ae:ab:d2:99:
06:41:6c:9a:f5:54:79:4a:0a:71:f6:12:97:16:cb:
97:46:5d:63:14:79:dc:82:32:92:8e:ad:72:df:40:
f0:e7:58:f0:f7:21:af:7e:f7:e4:19:ae:d2:76:1a:
9c:b4:2d:52:66:87:d1:51:a9:db:24:29:2e:ca:96:
78:31:1e:0d:ab:d5:93:ff:eb:da:53:80:d6:5b:1a:
5c:86:0d:30:26:c5:54:39:9d:b3:13:e8:53:36:f2:
08:e9:22:07:76:be:61:0e:1b:22:0e:eb:6f:db:0d:
8b:62:e4:42:fd:37:98:91:27:b9:17:46:76:db:b1:
0d:a8:70:23:7a:fb:7e:2a:64:3b:49:f1:14:91:ac:
61:59:ff:ff:e8:97:e6:08:9b:87:9d:c4:a5:a5:57:
c9:c0:e7:83:e3:bb:86:f5:db:04:47:20:ff:91:30:
d4:61:4a:6a:e1:6a:28:4c:a4:90:82:ae:fa:48:4d:
8e:43:5e:0d:4d:af:4c:b2:f6:26:e6:bb:44:c7:02:
67:27:62:6a:37:5b:80:5e:b0:58:2c:7c:3f:9d:73:
7e:1c:f1:cc:b3:db:bb:fd:92:a8:89:3a:a9:43:8b:
45:45:3e:11:5c:53:15:40:61:fe:4b:34:5a:1a:6b:
58:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9F:21:83:59:D9:85:B6:FD:D1:98:48:63:37:B9:EB:7B:69:B0:D3
X509v3 Authority Key Identifier:
keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:10:b4:97:2e:dc:c5:b1:3c:6a:54:79:ed:d2:35:3c:9b:56:
5a:40:34:79:b3:35:aa:d6:6a:09:30:b8:ec:93:e0:20:e4:5e:
cb:6f:16:8e:9d:4e:e4:8a:fc:f4:72:a4:01:43:43:d7:da:f3:
9e:ed:57:32:70:fe:f2:a6:22:f8:1d:c5:ac:3b:e6:c9:23:3b:
81:f8:1d:5b:c0:ef:f0:47:3e:fb:06:b4:e3:a1:e9:8c:d3:db:
a0:bf:bd:dd:2b:6f:b5:61:a6:bb:03:66:03:a6:9b:37:31:49:
d3:a5:2b:d9:80:7d:05:cb:d8:de:50:ca:8c:c3:de:c0:1e:79:
f3:94:26:02:5e:10:78:c6:c6:08:a7:fd:1d:82:fd:13:82:96:
cc:53:3f:a3:aa:96:7d:8f:04:ae:01:a8:9c:95:a1:b5:36:16:
c9:75:07:f0:09:01:8b:0e:97:2a:b2:b2:83:48:e0:92:db:1c:
03:ab:53:71:c2:79:b6:c4:a5:50:bd:8a:1f:9e:c5:f0:5b:e7:
b2:06:35:73:3f:ba:a8:98:88:5b:8d:34:8b:74:4f:a5:75:7a:
76:1f:67:83:8f:f3:ea:e1:09:29:66:bb:2a:dc:8c:56:9b:c7:
1b:54:3e:e4:a3:83:7d:51:41:73:37:14:1a:1c:07:54:7a:d7:
88:c5:ce:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:00:58 2025 by rpki-client