Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
File: A-wIrmqTJShb3UpK3pwgfX-hBFk.mft (raw, json)
Hash identifier: MVT5sT5gj6H4ibJCSZB8TTlN8egLvYcgR8rGONN0NlM=
Subject key identifier: 58:FC:9E:B9:61:42:42:A2:41:A6:E6:2E:53:FD:17:76:4A:CC:1B:60
Authority key identifier: 03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
Certificate issuer: /CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Certificate serial: 0198733D4B4319FBE7B4CCC56507113D6758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
Manifest number: 02FC
Signing time: Mon 04 Aug 2025 04:00:53 +0000
Manifest this update: Mon 04 Aug 2025 04:00:53 +0000
Manifest next update: Tue 05 Aug 2025 04:00:53 +0000
Files and hashes: 1: A-wIrmqTJShb3UpK3pwgfX-hBFk.crl (hash: NEs9HSwDejQngXWKTwEytaU8lVzCunjWxl9jggSqIlk=)
2: muuJi1VdiXZZEsVnfkSMCgo8AdA.roa (hash: RV8C8rfSq70k09HRUmJ6d7w5nFgphIHDRVJYbJs+zIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:4b:43:19:fb:e7:b4:cc:c5:65:07:11:3d:67:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03ec08ae6a9325285bdd4a4ade9c207d7fa10459
Validity
Not Before: Aug 4 04:00:53 2025 GMT
Not After : Aug 5 04:00:53 2025 GMT
Subject: CN=58fc9eb9614242a241a6e62e53fd17764acc1b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:57:46:b5:2c:0a:55:3c:af:85:51:a9:70:
63:ad:44:00:95:77:b8:74:f1:2f:1d:36:02:33:57:
4f:7c:18:de:67:70:81:ab:51:a7:67:3e:4e:66:73:
ab:1b:50:d7:59:ff:cd:03:ff:08:e5:0a:51:79:47:
51:ef:dd:7a:86:5e:bc:4b:a3:c4:cb:35:2c:70:71:
55:b3:7f:db:16:cc:b4:f8:d3:c7:97:46:87:23:35:
63:35:4d:e3:d3:70:56:84:a2:c2:2c:d5:d2:54:b9:
e6:b0:ab:9e:ee:90:c4:48:ce:f6:84:6a:d7:6f:21:
23:cb:4a:04:f5:b2:07:d5:c5:60:7a:16:9f:9f:c5:
a2:53:f5:ed:21:f4:24:01:0f:35:48:f5:e3:23:cf:
e1:91:ce:39:a4:06:59:27:be:67:cb:fe:b3:b6:22:
0a:de:7e:6e:c2:77:1e:aa:d4:46:61:4e:09:14:85:
47:df:c3:bd:80:79:53:65:d2:18:b5:63:bc:14:8b:
31:a3:0c:02:37:9b:c2:78:fe:8a:ce:65:c2:a9:8a:
3e:c7:cc:d1:a4:fb:66:0e:01:b8:a4:87:1a:53:fd:
95:0a:c6:03:91:b0:c8:38:91:67:2a:fc:f6:71:78:
ec:85:b7:cc:7a:b3:f1:79:48:e6:b4:da:78:7b:b7:
d4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FC:9E:B9:61:42:42:A2:41:A6:E6:2E:53:FD:17:76:4A:CC:1B:60
X509v3 Authority Key Identifier:
keyid:03:EC:08:AE:6A:93:25:28:5B:DD:4A:4A:DE:9C:20:7D:7F:A1:04:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-wIrmqTJShb3UpK3pwgfX-hBFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f31982-cd8c-45f6-a302-3d75c4f489e7/1/A-wIrmqTJShb3UpK3pwgfX-hBFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d0:4d:34:a2:1d:42:81:a3:eb:f0:b1:53:e6:b1:e8:1a:e3:
07:73:7b:e7:36:8f:d4:7c:22:b3:ab:de:bc:78:e7:5a:e2:64:
bc:3d:cc:a2:93:fd:f4:87:e8:fb:0f:62:70:52:58:fd:5f:fb:
63:ba:0b:50:6e:26:cb:93:2e:f8:e1:69:0a:57:e9:10:3c:4d:
8f:36:83:ee:29:30:81:0d:39:1d:8c:58:ea:bb:db:14:23:54:
f9:f3:05:15:6c:4d:ab:65:bd:c3:da:3f:2d:60:c6:69:49:e3:
f4:d6:ca:59:1a:fd:f8:0d:8d:6e:5d:a0:8d:f6:0b:98:95:14:
14:57:ab:1b:d4:da:87:cf:61:44:7f:2d:5a:14:6a:67:46:59:
00:a2:51:a9:3d:ad:77:73:77:c3:47:a7:cf:f9:97:09:53:3d:
e5:c6:b2:67:64:e3:f9:a0:31:91:55:09:1d:8d:b0:c4:8a:99:
03:aa:44:55:66:bb:9a:7c:95:db:82:9c:0f:49:8a:16:b9:43:
d7:94:35:50:e0:8e:19:44:df:a4:b6:b0:77:5e:9b:66:c1:16:
9d:00:e4:fb:70:61:79:be:c3:a2:20:10:f9:ec:cb:df:c9:17:
71:ee:97:2c:b4:6b:3e:1b:f8:69:e2:f0:a2:30:f3:13:ed:1d:
43:9a:69:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:47 2025 by rpki-client