Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
File: clwMcRHi9X_K-BE6QuVW6ILdXEs.mft (raw, json)
Hash identifier: BO2PQrTJVV5yFpxBWpyZgXMl8ggO6O2p6X7AzwGRATk=
Subject key identifier: C6:83:60:BC:8B:9A:DA:F0:9E:DD:98:1D:19:E2:24:B8:AE:AA:9A:F8
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 01988A32AFFDF90221B4E21AE6D15B1C060E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
Manifest number: 162B
Signing time: Fri 08 Aug 2025 15:00:34 +0000
Manifest this update: Fri 08 Aug 2025 15:00:34 +0000
Manifest next update: Sat 09 Aug 2025 15:00:34 +0000
Files and hashes: 1: 1RGgWDKxb5y298L2tt-0tOvqbNw.roa (hash: 2bZZWO6omsg2Mwm30E/Z1rRX+nPqPKuGxYg/2ZzCe0k=)
2: 3sxlJEA8BaERqC36Ubw3FlVF9Ek.roa (hash: YdpNn1ufX9tbeWscBU0U/F4gP263cfdud5JqGKKNPWQ=)
3: 68QeHj6JI2_T8Kr8hKctEhMPtbw.roa (hash: XnmM0ObtZKLV7g04CkYP3n/e5tgHKBrd4Q5O9o5IvnE=)
4: KoGcuhEWGpdaiyvAQhahi6JGn3c.roa (hash: 1hE6GXWKyFKYOi6wNNjRCkxxkmT7Rr3/DXP+/VqRcqY=)
5: ZLxVHxzZvKjjn2s6lQPPZdNzPyw.roa (hash: 9UddYVQskYka8RNl5TAXIUT0fsGnIVLCOhL+P2BIpeA=)
6: cLFXpbvXQ7ewA43ckj0WniT4JUE.roa (hash: MA0V95ed/gECxNSaptpMKxS+abLgaLPgcexWWf8XVhY=)
7: clwMcRHi9X_K-BE6QuVW6ILdXEs.crl (hash: lkJw9Z7Nm3jlb+y9XoT9lHOY/P5LOZR176nvuZursGI=)
8: ejg2o5Q2dvoWaESAzfB0HEPf7xI.roa (hash: s8Vh1yl+9P0cPDEhtTkn7ElHKgWmn1YwQsHChgTqjlY=)
9: fN3bfVZFsYAwSt6ljIKuFdIrYTw.roa (hash: 2nn1lj90yzh4RI2kdOg6btEhvs2/WJxkszduCB8J4u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:af:fd:f9:02:21:b4:e2:1a:e6:d1:5b:1c:06:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Aug 8 15:00:34 2025 GMT
Not After : Aug 9 15:00:34 2025 GMT
Subject: CN=c68360bc8b9adaf09edd981d19e224b8aeaa9af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:07:0a:52:eb:47:12:e2:43:46:b2:36:f8:
b1:50:71:db:e0:fe:19:e5:52:56:c4:4e:59:3e:9a:
c2:5f:f0:d3:fb:33:0d:d4:c7:dd:18:30:70:48:f9:
1b:e1:85:61:58:bd:8e:6b:99:e4:56:24:75:e0:7d:
4f:75:90:83:89:6f:18:23:32:c9:8e:d6:e7:ca:d0:
f4:f5:c1:36:06:d0:53:01:a2:a3:a5:4f:53:08:18:
98:9e:11:63:31:12:7e:67:ab:8b:14:c6:75:4c:b7:
fa:5f:72:cb:40:f9:e0:e9:76:97:bd:37:37:89:e1:
1e:7c:7a:8f:43:3c:42:71:5d:aa:03:b5:75:59:88:
8d:7c:dc:55:27:de:eb:48:fc:a1:50:2b:03:e3:ba:
7c:6e:13:8c:da:63:b3:86:f8:bd:d5:93:ae:ea:03:
bb:2f:df:76:ba:8c:06:51:ec:41:cc:e6:cc:0a:41:
e8:07:5f:7e:37:50:07:8d:1f:55:2a:99:49:fd:a2:
d6:ac:33:0d:11:65:6c:82:37:41:cd:54:a8:ee:54:
59:02:a3:98:09:ff:63:ac:e3:7b:fa:cf:dc:e6:75:
29:dd:aa:d7:90:91:63:bd:44:dc:75:ae:92:ef:f4:
de:bf:a3:1b:98:16:37:fc:8f:a9:f0:0c:d2:22:54:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:83:60:BC:8B:9A:DA:F0:9E:DD:98:1D:19:E2:24:B8:AE:AA:9A:F8
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e0:0d:23:cb:f2:35:a1:15:7b:a4:ae:c5:ef:c5:82:23:c3:
02:bc:90:31:98:c8:98:f3:d6:f8:17:71:c0:cd:d6:90:bb:d3:
2b:e2:d0:91:a3:6e:74:c3:ab:aa:7d:51:22:6f:04:47:b5:f0:
94:28:e9:12:7a:7a:6e:09:01:12:ae:50:c9:9b:2e:24:d4:53:
a3:0c:96:f1:e8:fb:69:d8:11:44:0d:59:09:4f:86:d1:12:36:
79:b2:5f:8e:f9:a6:26:73:a5:7f:08:1e:c4:11:8b:ae:b3:ae:
46:2a:a3:67:8c:dc:b4:50:87:54:c1:fa:8e:f7:6b:3b:29:7f:
e0:24:48:9f:7d:59:3b:86:56:16:3e:1f:60:72:10:af:f7:04:
f4:23:e4:d5:b5:9e:de:64:65:22:32:13:5c:34:ad:b5:d4:bf:
78:c3:4d:8f:e6:38:e2:85:a4:3b:e9:ec:57:92:fa:57:78:b2:
b7:98:8d:e6:ba:fe:b8:46:8c:e9:d6:08:79:12:ad:4b:33:9a:
1d:46:be:67:d8:92:23:71:9f:3b:e0:67:47:4f:76:d7:0f:c5:
d3:ed:f7:67:79:7f:62:04:2e:95:b2:32:0c:9f:0d:ca:c0:fa:
f0:b9:0b:ea:35:95:72:42:11:11:99:55:4e:18:93:f7:52:03:
42:d3:84:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:15:35 2025 by rpki-client