Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json)
Hash identifier: gdZ+LwU/lFCJKFK0puSOMd0GP/69daghdnbL9g4r2Ko=
Subject key identifier: 6A:B7:A3:D7:1B:A5:A3:76:A0:05:44:AD:C3:80:90:82:01:D2:F2:CF
Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Certificate serial: 0198D6CDBADAB20CCF2EBA71AC0211640D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
Manifest number: 57
Signing time: Sat 23 Aug 2025 12:01:03 +0000
Manifest this update: Sat 23 Aug 2025 12:01:03 +0000
Manifest next update: Sun 24 Aug 2025 12:01:03 +0000
Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: vNPCDZWQRpN5Re0iN3CCDIZWBRJRV2cTFGQSZiHohq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:ba:da:b2:0c:cf:2e:ba:71:ac:02:11:64:0d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Validity
Not Before: Aug 23 12:01:03 2025 GMT
Not After : Aug 24 12:01:03 2025 GMT
Subject: CN=6ab7a3d71ba5a376a00544adc380908201d2f2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3d:c8:e0:58:41:58:56:c5:77:95:95:c8:8a:
a7:82:32:a2:8b:f7:e7:18:b6:d2:dc:23:42:a0:b9:
33:55:28:06:d1:c5:39:c8:71:16:cf:18:1f:11:87:
68:ef:f0:cb:91:16:16:32:cb:8a:c2:b2:bf:50:9d:
9e:31:38:78:16:b3:9e:10:d3:63:76:82:6a:a9:41:
fa:b0:a1:80:87:c7:f0:0e:df:75:c5:a2:82:5e:a1:
42:ef:a1:0b:0d:82:89:bb:32:79:74:20:e0:9f:bd:
e3:2c:e4:72:c0:16:86:16:af:3b:1a:af:2e:82:05:
d5:b6:af:de:25:8a:9b:cb:65:47:be:32:4e:1f:50:
79:79:a0:9a:78:42:48:ab:7f:76:ac:55:d9:72:f5:
08:c5:7b:5b:17:aa:70:35:fc:6c:92:0d:4d:41:6e:
26:b3:24:98:e7:65:18:9b:52:d5:ee:fc:c2:9a:54:
31:a5:d3:5d:68:88:35:b4:97:0e:43:52:e1:d3:89:
fd:d6:ec:11:37:14:09:6a:4e:b9:05:e0:2c:29:03:
3a:1d:5a:fa:21:e2:3c:37:54:51:c4:86:44:65:f3:
52:e1:be:a7:ac:2a:26:92:23:4c:bf:ac:41:b8:6b:
5c:2b:38:43:a0:ed:12:ef:53:ba:ad:25:fc:12:ec:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B7:A3:D7:1B:A5:A3:76:A0:05:44:AD:C3:80:90:82:01:D2:F2:CF
X509v3 Authority Key Identifier:
keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d7:bb:0f:c8:31:be:9d:3d:dd:30:0f:2d:98:b1:32:2b:e3:
11:2f:f9:5a:f3:fb:40:64:4f:b8:da:32:68:ec:ce:44:87:d1:
e4:83:50:91:cb:33:1d:17:9d:3c:43:24:0c:14:7f:28:c1:fb:
c1:9a:04:c6:33:30:e4:ed:4f:61:64:51:bf:23:1c:a7:54:da:
70:92:28:7b:9e:e8:31:c2:60:60:db:39:2a:14:b3:f9:d9:14:
64:f6:07:2e:44:fa:7f:d2:de:36:19:19:dc:50:9b:28:89:03:
10:d2:4e:b1:c6:44:72:d4:8d:d3:09:7a:c9:13:73:59:0e:fa:
45:e0:f8:01:60:23:ec:8e:39:c6:dd:10:8b:d9:7e:ce:f2:3a:
95:a9:4a:b2:d7:8e:08:77:fb:88:cb:91:a0:2b:e8:6e:4d:74:
b9:9f:5e:20:c6:06:a7:06:37:a2:e0:d1:5f:26:c8:c9:93:0d:
ba:a8:32:8c:9a:51:08:2e:5a:09:f5:7a:5e:09:19:65:df:7c:
bc:cc:bb:bd:84:c6:78:00:6c:0e:76:1e:6c:36:9e:39:3e:ee:
76:1f:bd:67:76:48:27:e9:9f:c8:c6:45:a7:7f:e8:b9:72:7e:
92:57:78:ad:de:74:d1:b0:6c:ae:cd:8f:8d:0b:b1:f0:fe:49:
92:41:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:38 2025 by rpki-client