Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: gx/HiMDeExB6MxHJaWthIZeBWld73MndkA88DJB2qZI=
Subject key identifier: AA:9B:1E:D8:48:F5:D0:EB:B2:12:33:02:1C:85:3D:3C:41:2F:9E:C2
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 019889200CDBFC8570FCC60C5EBF8413CA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: 0168
Signing time: Fri 08 Aug 2025 10:00:35 +0000
Manifest this update: Fri 08 Aug 2025 10:00:35 +0000
Manifest next update: Sat 09 Aug 2025 10:00:35 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: E2fV3haIDGft/qwwb4B3JP4/5gpZUXicZCCDWgyWkQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:0c:db:fc:85:70:fc:c6:0c:5e:bf:84:13:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Aug 8 10:00:35 2025 GMT
Not After : Aug 9 10:00:35 2025 GMT
Subject: CN=aa9b1ed848f5d0ebb21233021c853d3c412f9ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0a:3b:32:5f:33:06:05:4a:54:21:f7:58:fd:
c7:76:b0:7f:3f:ab:14:75:34:2f:f2:e3:0d:6c:96:
9c:34:8e:e9:c6:39:09:15:62:91:6f:7b:54:28:7a:
41:ff:af:87:eb:b7:c5:06:8c:2f:b7:0a:76:1b:7e:
f4:e5:82:3e:ba:83:f7:d3:a3:25:2b:2c:22:46:e1:
b0:70:ba:11:9c:51:50:51:fd:d5:43:86:aa:8f:90:
6c:91:1f:cb:8c:de:27:3c:fe:45:05:3c:8c:c4:05:
28:64:da:29:1b:41:0f:a6:ed:fa:5c:df:57:73:49:
a4:c1:0d:c6:07:42:8e:fb:6e:7e:0f:3c:e4:15:e5:
fa:18:41:18:67:eb:dd:23:80:a9:18:55:7b:92:a5:
24:c5:8c:bb:e4:f9:bf:0b:cf:58:0f:b4:fa:53:12:
11:66:1c:b3:c6:ff:7d:1d:65:80:55:d3:e6:48:90:
35:42:5b:b9:0a:59:bd:8d:0e:c2:83:eb:bc:ce:9b:
4e:08:f7:62:3b:63:33:8a:22:85:26:7c:d2:9d:b9:
20:c0:09:4d:f0:95:fc:ca:79:1e:fd:78:0d:b7:94:
30:bf:9f:87:b0:9e:c4:a7:f0:1d:a2:3e:12:52:c0:
db:a3:5f:72:c0:35:14:7f:ee:87:e4:60:1e:bd:41:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:1E:D8:48:F5:D0:EB:B2:12:33:02:1C:85:3D:3C:41:2F:9E:C2
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:68:c4:69:19:11:61:b2:e7:8f:09:14:33:be:95:b5:01:05:
0a:81:85:39:4b:64:65:47:b3:a9:d9:f2:1f:5c:35:34:43:29:
56:e2:ff:31:de:71:dc:1c:b8:88:5e:cf:3c:07:5c:c2:ad:34:
20:63:42:e9:1f:70:59:64:f2:cd:53:0c:3a:04:86:c3:8f:e6:
ec:11:92:cc:e5:6f:e8:53:15:11:84:32:55:23:fa:e4:62:d0:
29:f3:6c:a0:2d:e4:69:b9:ae:03:99:c0:99:d1:14:a5:fa:c5:
fa:66:39:9f:03:92:a6:83:7f:8e:a2:34:6c:86:7e:b2:0e:08:
f5:98:88:15:41:0a:a6:ef:70:ab:9d:e4:46:f0:67:46:ef:77:
82:29:5f:20:a1:88:95:8d:8b:d6:d5:e9:7b:76:4b:21:81:39:
7f:bb:67:81:90:54:3e:97:f1:bb:e5:8c:6d:88:d4:7b:29:34:
19:20:3b:a0:15:26:36:c5:af:2b:41:97:c2:ee:d4:f8:1d:d5:
44:4a:e5:3f:49:10:bc:a0:9f:bd:d0:2e:ff:1a:3b:03:8b:ba:
16:09:f0:41:5b:17:cf:7c:1d:fb:6e:5d:b1:c3:83:2d:0d:0a:
44:16:2a:22:2b:b8:e3:1f:20:00:3a:9d:09:67:d7:86:86:64:
5b:e8:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:57:51 2025 by rpki-client