Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: rvJVAsd7RlppirJEfDhhmSl+/mBDSPx74MJymKPUaoo=
Subject key identifier: 6F:DB:9D:E9:30:19:1C:B5:4C:51:7D:F0:DC:74:67:9D:9A:7B:6B:11
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 0198808B4CDF089962B2F56A78F48E3BD3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 04F9
Signing time: Wed 06 Aug 2025 18:01:09 +0000
Manifest this update: Wed 06 Aug 2025 18:01:09 +0000
Manifest next update: Thu 07 Aug 2025 18:01:09 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: 6AfZH0Bu01IoRbM7zsZVoG1H9/CdLuGZ2HDTJxPOjRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:4c:df:08:99:62:b2:f5:6a:78:f4:8e:3b:d3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Aug 6 18:01:09 2025 GMT
Not After : Aug 7 18:01:09 2025 GMT
Subject: CN=6fdb9de930191cb54c517df0dc74679d9a7b6b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:7d:bd:36:44:22:74:87:7f:64:5f:cb:a3:
de:44:7a:1e:93:c0:ab:9e:be:4a:3e:ad:ef:83:6c:
64:29:32:d2:0b:45:72:53:68:00:5f:c7:50:c8:10:
ff:a6:44:b8:22:75:5d:34:02:45:d3:a8:4d:4f:f8:
83:cb:ca:8d:66:d5:cf:e7:89:a9:69:aa:56:19:00:
bd:e7:f7:35:e5:29:2d:04:c7:3f:21:02:24:ff:66:
d6:c4:f2:7a:b3:64:12:87:36:68:48:66:9c:b2:b4:
27:da:69:d1:f7:72:b1:ec:a6:5f:b6:94:e1:40:75:
e0:13:08:ee:ae:4b:92:4f:04:de:53:52:72:1c:c2:
df:2a:7a:63:b7:a2:f4:de:04:ef:15:1b:3d:28:14:
a7:ef:a3:94:80:45:d1:a5:7e:be:42:e6:b6:dc:55:
18:0f:d2:62:93:4b:40:1b:89:7b:5a:1c:d6:13:19:
00:fb:b2:53:be:61:b7:ed:3b:fa:6b:f8:f6:a9:66:
43:7c:24:e1:e6:3c:65:de:22:66:95:88:f7:72:33:
20:87:1a:ce:43:b7:1c:d4:d1:8d:b6:2d:f9:85:fd:
df:dd:2b:ce:dd:64:15:e9:1b:18:ef:1d:fb:48:19:
53:36:25:1d:61:cf:2a:b0:a2:39:91:ab:33:cd:d2:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DB:9D:E9:30:19:1C:B5:4C:51:7D:F0:DC:74:67:9D:9A:7B:6B:11
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4a:bb:3c:9a:ce:19:a1:20:4c:9f:51:84:8c:78:b1:54:2b:
d7:d5:f0:d4:bf:e1:fa:82:3b:31:e6:0c:99:5c:20:e5:d7:1f:
67:22:6b:a8:d4:13:9a:e7:ff:a4:d2:f7:31:73:d6:6b:9c:03:
18:be:16:9b:f2:11:f0:05:e4:b5:1e:ee:4e:92:e3:70:88:43:
5d:1e:eb:e6:69:5a:aa:8c:5d:85:b0:d9:fa:73:26:c8:01:92:
be:ff:90:27:d6:5a:59:bc:47:5b:1c:71:65:cb:f9:ac:45:82:
6e:5c:42:ea:88:a7:ef:57:de:7f:0f:70:b9:79:8e:e8:0f:46:
23:1a:17:f6:7c:1d:28:91:0a:ff:bf:ec:75:0e:5b:d5:f9:f7:
7a:a4:04:20:45:cd:4f:5d:ff:9f:90:04:7c:79:33:20:bc:78:
a3:1c:6d:86:db:b0:59:7f:f8:98:b6:15:7f:70:f6:c1:62:1d:
e4:f3:56:52:b0:9f:c6:c9:a5:10:c9:34:fc:18:b4:8e:62:68:
b7:64:57:70:af:1d:15:28:72:04:d5:9e:1d:a7:93:a1:f6:04:
1b:2f:34:c6:f0:21:e3:a5:0b:23:65:8a:2c:8e:72:81:da:cf:
a8:9d:d0:7c:ad:28:c2:22:2c:62:b9:ac:33:55:2d:82:15:68:
7a:f6:8a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:42 2025 by rpki-client