Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier: w6EpGCG9keLShc6+4wKQguB9hUd4+MrfEJWKD9Z0D1U=
Subject key identifier: 5D:30:2C:21:99:65:13:A4:1E:18:70:CA:A6:45:9B:8A:BA:AD:8C:4C
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer: /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial: 0198D661389DC980251F9DC577D8684B2E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:32 +0000
Manifest this update: Sat 23 Aug 2025 10:02:32 +0000
Manifest next update: Sun 24 Aug 2025 10:02:32 +0000
Files and hashes: 1: C8on01Bgko2Wx9jKjMpn7FCShCI.roa (hash: NvYVpYNTacJm9Dvti1H+p4nGJK6g8JeQhPdSMYmd5BQ=)
2: lBLUc28nwdLkSsrePQSmyxKstGI.roa (hash: vrIWIUHlJDuCxB1hzJyqC5GbG7oElAvbtOgjYcaloKs=)
3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: ezXS3HaTtN9gEY2dYSDpQ65cRKwmBxozcBkv/st2HnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:38:9d:c9:80:25:1f:9d:c5:77:d8:68:4b:2e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Validity
Not Before: Aug 23 10:02:32 2025 GMT
Not After : Aug 24 10:02:32 2025 GMT
Subject: CN=5d302c21996513a41e1870caa6459b8abaad8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:86:93:b6:fe:75:8c:18:36:b1:01:20:fe:
8f:9b:d6:05:bc:ef:38:0c:24:5f:a4:61:ab:ec:48:
fe:a1:1d:89:f6:ac:2c:90:78:ee:76:3c:d2:71:61:
84:52:b9:14:e2:15:9e:0a:bb:51:06:e5:57:1b:59:
39:a2:0f:4f:7e:4a:a7:55:e1:c6:7b:78:f6:7a:34:
dd:65:b5:a2:12:db:ab:3c:c4:93:32:61:0b:32:89:
a8:d9:fe:03:7e:4e:89:05:52:fc:c7:27:47:b5:38:
d2:0e:15:63:dd:1b:2b:d1:f9:71:ec:e5:05:f3:39:
bd:e6:a0:c4:6a:fe:f7:2b:61:cd:e1:8a:b9:d1:8a:
2f:bf:a8:13:a4:13:7a:3c:e7:a8:ca:e2:43:69:9b:
be:8b:ab:68:e0:50:05:5c:6f:dc:75:9d:7a:55:86:
07:bf:0e:69:f3:19:91:b7:31:c2:be:78:b1:15:66:
ac:6d:1e:1f:00:52:38:a2:78:98:3d:43:d4:5c:53:
e8:e9:66:a4:10:d5:3a:c4:9c:ff:4c:62:04:cb:41:
bc:d0:b0:02:0e:e3:1a:a2:4c:c9:1d:48:6c:d9:fd:
95:c0:b2:83:81:98:c6:58:2d:c6:04:80:a0:44:a8:
e8:9e:33:68:70:af:8e:04:49:f9:95:1e:c4:e1:c6:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:30:2C:21:99:65:13:A4:1E:18:70:CA:A6:45:9B:8A:BA:AD:8C:4C
X509v3 Authority Key Identifier:
keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3f:50:d8:ff:f7:2e:5f:07:8e:d4:eb:15:2d:49:a2:da:8a:
dd:f4:b0:c7:cd:de:c8:9e:df:f5:a0:c5:d2:a0:d9:a2:fc:93:
f3:c5:59:c0:0f:36:c1:c4:f0:17:03:0a:e6:ac:29:e1:23:30:
26:b4:c1:99:b7:47:94:9d:3c:b6:bc:19:5f:56:87:d3:26:d2:
6f:39:d5:a5:4e:c6:58:be:22:7f:6a:9d:1e:87:72:50:33:ea:
39:74:0b:91:18:da:31:9d:44:c9:6c:05:66:9a:ae:19:60:e6:
c7:83:9f:53:b4:f4:47:65:97:99:94:b8:78:2f:52:06:d8:71:
f4:bd:32:e0:81:cd:b3:78:c4:f9:3d:3f:4a:cb:4e:61:d6:7d:
69:5c:0c:51:6d:fd:df:34:99:3d:fb:94:65:0d:42:8f:66:41:
12:52:f9:d3:f0:83:06:8b:3e:16:97:4c:52:9b:98:36:c2:37:
67:1a:aa:93:31:7c:de:3e:ef:0a:d6:14:29:e8:7a:8d:93:d0:
bf:85:8a:26:70:a6:77:c6:7f:81:0a:fd:2d:c5:d4:13:0e:43:
fb:c4:4a:b9:7a:8a:16:5f:be:3b:48:5a:91:18:98:b9:72:5a:
bb:7a:3b:a7:b1:b7:05:6b:4b:eb:b2:df:2d:ea:c4:c5:dc:65:
75:e5:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:56 2025 by rpki-client