Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: RXT9cMI4MuGP6Q2eOO/HaCKHmo8EnwvDWVeUtsxcPCQ=
Subject key identifier: 0B:7C:EE:E4:37:DC:1C:ED:9F:99:F9:49:09:95:7C:6E:98:C6:A0:EF
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 019880C26E9271298A32DBBAED00A7B08DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 0120
Signing time: Wed 06 Aug 2025 19:01:22 +0000
Manifest this update: Wed 06 Aug 2025 19:01:22 +0000
Manifest next update: Thu 07 Aug 2025 19:01:22 +0000
Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=)
2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: zwpWyzDt5AHPJmRwV/kF8p5WlXAFBfTtiM11O2S3AXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:6e:92:71:29:8a:32:db:ba:ed:00:a7:b0:8d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Aug 6 19:01:22 2025 GMT
Not After : Aug 7 19:01:22 2025 GMT
Subject: CN=0b7ceee437dc1ced9f99f94909957c6e98c6a0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:00:d4:78:ed:50:d3:3d:64:3f:6f:0c:52:cc:
76:09:e0:ab:d6:33:71:99:ec:01:03:eb:33:80:cc:
b0:83:4b:fd:97:4c:c7:3f:f4:db:74:49:f7:4d:45:
77:af:37:98:db:f1:28:ec:be:4e:49:5a:b8:3d:8e:
0c:f8:d1:dc:cd:f6:5a:88:e3:db:16:60:f1:0e:2b:
3f:e0:d6:55:8c:38:db:0e:86:19:30:8d:08:e7:ca:
74:b9:56:7c:5d:8c:e2:40:c1:cc:02:f2:50:99:d0:
0c:3c:65:e7:c4:ec:c0:8f:ae:e0:f2:25:7c:9e:68:
19:9a:d9:f6:86:db:5f:41:d7:7b:71:cf:bf:45:4c:
08:51:34:96:11:f5:c4:42:6e:dd:32:91:88:4c:2a:
92:74:36:12:52:36:0c:df:5f:6d:fb:c7:b8:98:e0:
9b:a7:76:8c:b7:9a:ab:a8:54:b0:98:8b:af:c4:85:
e0:ad:8d:3b:96:47:67:a1:84:ef:14:7b:63:0b:e4:
1b:55:cd:59:81:62:3e:4d:b7:dc:74:57:59:b4:8c:
3a:33:64:cf:bc:ab:37:1f:bf:dc:f1:54:69:59:e6:
6c:eb:40:07:28:83:3f:05:95:85:2d:79:c0:5e:82:
c7:ed:60:d6:9e:e0:30:44:cf:de:03:cc:ea:ed:1b:
9c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7C:EE:E4:37:DC:1C:ED:9F:99:F9:49:09:95:7C:6E:98:C6:A0:EF
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1f:9b:c3:b4:6c:2b:56:d4:46:3a:e9:7d:74:bd:57:72:d5:
83:ea:f5:fd:8f:18:4d:2a:da:21:48:07:84:da:fd:39:64:82:
af:65:1d:1a:9f:a7:59:ae:cf:7f:94:70:1a:11:36:be:65:d8:
f7:5a:a3:f4:99:92:6d:af:c5:4a:c8:61:e3:a3:bb:91:7d:86:
39:65:68:23:34:e4:b4:96:de:d5:39:fa:00:c2:98:ff:a0:a9:
b8:2f:27:70:b6:8d:74:e1:d5:95:8f:48:1f:fa:85:f7:da:03:
ac:7d:23:eb:70:1d:b3:84:ac:34:ac:bb:38:f8:7e:02:ee:4e:
ae:36:6a:f4:94:e4:b2:a9:1a:d5:03:6a:a7:2b:2b:e7:97:da:
b9:26:99:c0:7d:4d:ba:90:ae:c0:f1:44:83:24:15:15:bb:74:
65:b8:62:28:96:38:0b:0b:a6:2a:c5:7c:e7:c1:92:16:cf:a3:
6d:13:f8:5f:ab:d8:83:c0:b1:09:ef:2c:a0:45:24:60:fd:33:
31:ae:3c:48:7a:56:7e:d1:f3:72:8e:4f:bc:23:9a:c1:b1:fb:
16:12:7a:f2:fe:4c:78:f1:c0:35:21:99:45:13:9f:8c:5f:dd:
8a:ad:94:41:ce:d8:58:be:db:06:c2:4d:f8:e2:52:f2:05:04:
f8:83:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:09:55 2025 by rpki-client