Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: 4DaarjkKawGAGYnNdcRdVUckjaIpSDMbxNLHQaKpOzM=
Subject key identifier: 96:BB:EF:E9:23:95:AE:2B:3B:55:4F:59:67:00:89:BE:B0:5E:EF:6F
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 01989411D4AEDD8E0C34C114125B946244C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1632
Signing time: Sun 10 Aug 2025 13:00:53 +0000
Manifest this update: Sun 10 Aug 2025 13:00:53 +0000
Manifest next update: Mon 11 Aug 2025 13:00:53 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: d2fJpJVBESSui1sn0YeQU7OHBeaJ1tuaImYahsEbtbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:d4:ae:dd:8e:0c:34:c1:14:12:5b:94:62:44:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Aug 10 13:00:53 2025 GMT
Not After : Aug 11 13:00:53 2025 GMT
Subject: CN=96bbefe92395ae2b3b554f59670089beb05eef6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:c5:28:07:db:d6:0f:f9:56:0a:37:0f:a9:
07:cb:2a:65:c2:d6:6a:48:1b:ed:9c:6c:6c:37:6c:
fc:78:85:5c:df:38:66:37:04:88:02:bd:94:29:db:
62:4c:c0:f6:21:b1:57:52:0b:85:b4:b5:5e:21:a9:
71:f0:9c:a3:57:47:90:7f:24:0a:e0:6d:40:4d:64:
c1:5c:0f:26:98:52:67:9c:cc:ec:61:95:b5:bc:c0:
8b:83:13:81:3c:72:48:75:b9:c7:fe:e9:1e:88:a3:
b0:6a:47:1b:65:6a:6a:0c:cc:d1:87:13:a6:6e:ea:
6b:57:ec:ef:9a:89:8a:7f:05:cc:f8:72:18:5f:26:
0f:e6:0a:57:a2:21:aa:ff:f0:23:a6:7f:a0:4f:3a:
8a:7b:48:c4:9b:23:1a:a0:17:12:3b:f7:49:5b:f3:
80:ba:47:a2:c6:11:1b:7b:b7:e5:df:b2:d1:34:51:
32:2b:5d:d4:9e:e3:e2:b8:70:4f:a3:34:ff:08:2d:
9b:85:3b:fd:0c:66:38:96:af:a6:dc:b3:6d:bf:b2:
b7:0f:6e:fe:10:0c:31:4c:7c:78:59:87:4b:e7:a1:
a0:dd:7b:7a:dc:cb:52:01:b3:3a:de:3a:8c:0c:0d:
18:05:38:33:96:86:d9:27:b9:cb:2d:ee:c8:b6:60:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BB:EF:E9:23:95:AE:2B:3B:55:4F:59:67:00:89:BE:B0:5E:EF:6F
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cc:67:5b:83:37:6c:3d:c0:b5:d1:1e:b0:00:e5:b5:13:a5:
19:33:fa:03:be:a5:e4:6d:c5:35:84:35:0a:9c:9b:c5:18:8a:
50:7a:a8:ae:de:02:5d:df:9e:90:2b:b6:e6:e9:ac:46:c1:85:
1b:1b:0c:8d:9e:a2:57:59:c6:76:82:d6:86:19:e5:d5:10:1d:
48:7a:37:a5:06:36:c3:29:77:ac:cd:35:93:21:26:06:93:7a:
f6:bd:1d:e4:a1:6b:e2:17:48:a3:d8:5c:57:86:5f:97:54:31:
f7:85:14:06:16:07:d4:8f:07:c1:d4:12:6d:6c:7b:f1:f5:ae:
6e:a3:10:b7:0d:7b:d9:a1:db:98:de:ba:13:fb:04:26:2f:55:
4d:c0:cd:65:15:db:f3:3c:80:fb:5a:bf:c8:57:a5:b5:ba:59:
ed:95:8c:34:b0:0f:8a:39:aa:85:ac:a2:44:22:6c:ed:52:8e:
67:bb:53:93:d2:39:63:c0:f3:14:75:3f:ec:56:35:3c:ea:b4:
71:6e:20:8d:c6:63:1e:6c:60:d1:12:03:d0:80:bb:57:ae:18:
15:5a:4a:56:a9:93:0a:e1:e3:57:b1:21:ad:57:17:11:fd:17:
39:40:ab:d9:89:50:cf:0e:56:c0:2b:5c:93:1f:a4:3a:a9:2e:
56:46:3e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 19:01:14 2025 by rpki-client