Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
File: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft (raw, json)
Hash identifier: jlCyIZdiDHEqjjnOljI3TAZAeOakYSjLVZ4kpNeg9fE=
Subject key identifier: 0A:29:50:20:FD:2F:41:D4:C2:5A:8D:2A:87:2B:9F:E5:7E:CC:F1:0F
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019873069F3EEA80723CC5A74ADC05B4F726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
Manifest number: 0D7A
Signing time: Mon 04 Aug 2025 03:01:10 +0000
Manifest this update: Mon 04 Aug 2025 03:01:10 +0000
Manifest next update: Tue 05 Aug 2025 03:01:10 +0000
Files and hashes: 1: 1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl (hash: GtOz3yfe7sBsckzmmjqKriQSoYgp7pNeUE88sbk9eqo=)
2: QCTiWGHEKmUOdJTM7oPATib-rWI.roa (hash: k26mJ2kyD6PN3QHWZlo9Dbc0a0mryGGisjgGFZ6rWDs=)
3: hrRzVBROURephwaz7IZClsaHDKQ.roa (hash: Fof+bR6X5zJSmDYDTc8T97sYO9am/Pj5PX1jkaREIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:9f:3e:ea:80:72:3c:c5:a7:4a:dc:05:b4:f7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Aug 4 03:01:10 2025 GMT
Not After : Aug 5 03:01:10 2025 GMT
Subject: CN=0a295020fd2f41d4c25a8d2a872b9fe57eccf10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:57:d4:5c:61:96:11:6e:74:0e:be:3c:66:
3a:c7:27:63:0a:0b:d2:3c:02:1e:3e:70:bd:c0:72:
dc:c1:45:51:01:68:40:25:7c:db:bb:91:9f:91:af:
01:ff:f5:d1:d6:5b:48:2e:2a:7c:9a:41:71:bf:06:
6d:f6:61:55:c6:a0:63:a5:db:36:b1:59:89:00:a2:
e2:19:e0:65:96:24:6b:87:60:a6:54:1d:6e:c5:ee:
54:ae:bd:2b:8c:d7:28:ee:3b:9c:f7:66:d2:4e:b5:
56:bb:57:42:d5:eb:3c:a6:c7:05:fb:22:99:69:a3:
93:1e:71:02:a4:7b:f6:6d:e0:e4:53:21:91:5b:c9:
08:10:cc:7e:48:a1:ab:02:c4:1a:4c:b0:e1:bc:8f:
55:3b:71:c9:1e:68:c7:cf:f2:62:a8:1c:80:6d:f2:
34:03:45:56:ea:e4:81:39:cb:77:26:ab:5f:e2:62:
6f:1c:49:49:2c:66:a7:5c:47:02:36:97:0c:71:4b:
1b:ea:3e:e9:db:38:52:93:0e:df:0b:8f:8a:e5:02:
c7:87:1e:31:6d:eb:32:eb:fe:50:2f:e0:92:05:43:
05:0d:f7:a0:76:36:0c:69:b1:69:23:74:dc:f2:29:
2a:7a:7b:98:1f:fd:8c:95:10:e4:85:9c:a6:a8:76:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:29:50:20:FD:2F:41:D4:C2:5A:8D:2A:87:2B:9F:E5:7E:CC:F1:0F
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8e:70:8d:da:80:e0:e9:2a:56:7e:31:30:70:b6:13:7d:bc:
29:a2:aa:0a:46:12:72:68:c0:b2:62:24:78:0d:23:90:af:59:
ea:1e:f8:ce:58:4d:d1:35:e2:f1:66:45:91:84:50:b1:13:c6:
57:9b:ff:3f:c0:14:c8:11:16:9e:23:87:6d:ac:3a:da:52:25:
1c:b8:4e:04:f0:c2:4c:bb:47:25:3d:6b:15:82:dc:43:0a:a4:
39:ea:eb:d7:3d:fc:75:d1:cc:cc:d9:f2:6e:f9:9e:1a:f8:11:
2a:7b:80:6c:98:59:70:28:29:37:5c:78:2e:48:dd:e8:47:90:
64:77:cc:39:5c:bd:b7:8d:84:2b:5a:9c:58:8d:05:d0:46:78:
fe:fb:c6:9e:e7:e5:7c:e2:f5:f3:19:68:60:56:af:9d:b1:bb:
e9:4e:2e:88:d6:b8:a7:32:54:6b:45:ea:7f:db:bd:e8:08:d2:
30:ee:44:98:53:63:77:71:d1:77:6d:e0:48:f6:61:1f:30:9f:
a6:cd:bc:b2:44:68:c5:b6:3a:b8:e8:58:8b:8c:d7:a0:41:f2:
56:77:ee:f3:41:ce:42:5b:3e:80:d7:18:15:f7:e1:3a:5e:f0:
90:26:47:e0:8d:ce:d0:9c:49:d2:ec:79:63:7b:88:34:c5:f0:
6a:f4:ed:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:05 2025 by rpki-client