Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File: w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier: 9WL0RyYm/5Z2JARIoUps9u2tVWEqiBbru75vdmq3d4g=
Subject key identifier: AF:A2:A2:4C:B4:61:B3:6E:AB:C2:43:32:38:0B:53:BA:C3:25:D7:28
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 0198D404A834A247124B5F3477D9BE8DB620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number: 12DB
Signing time: Fri 22 Aug 2025 23:02:11 +0000
Manifest this update: Fri 22 Aug 2025 23:02:11 +0000
Manifest next update: Sat 23 Aug 2025 23:02:11 +0000
Files and hashes: 1: 1JRmPjjw2eEyAEj7-d9EaoFd8tQ.roa (hash: qUFNGxht8SatseV7uTcgdf36n0Wje2HhZXA6lIEPzt8=)
2: jb-zD-QZseypOhoYrz7-lEkthR4.roa (hash: NVATDU2rQowVsA5kxCOsDlRv1YWlJaECqpg6RYlVt8g=)
3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: InmjunlJEkd6KNqKF2nhR3FVlQ2lwK/G2zm3UcJPJDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:a8:34:a2:47:12:4b:5f:34:77:d9:be:8d:b6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Aug 22 23:02:11 2025 GMT
Not After : Aug 23 23:02:11 2025 GMT
Subject: CN=afa2a24cb461b36eabc24332380b53bac325d728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:60:0c:72:11:eb:8d:65:ee:64:02:9c:53:
89:1c:94:45:d1:c2:13:77:59:21:17:8e:ef:bb:92:
7a:cf:f1:80:51:85:26:a5:46:12:2d:8f:f8:ab:98:
dd:cf:22:0a:8d:95:cf:3d:f3:4e:00:de:5b:f5:07:
7f:2d:e6:09:f9:8b:bc:2c:8a:ca:4d:61:8c:eb:46:
55:df:4e:05:55:5a:03:bd:ca:36:45:60:bf:44:0c:
e8:09:d0:9c:5a:e8:25:8a:ed:de:7d:5b:f4:b7:0c:
11:b8:0b:74:8e:87:fc:54:e7:0e:86:6b:d7:85:cb:
06:67:5f:46:89:bb:c6:b7:44:76:a5:3e:b3:7f:22:
f3:4b:13:86:84:17:f9:b4:b5:94:e5:8a:2d:83:c7:
6a:cf:4d:fc:3c:2d:7f:fe:a2:e0:d3:59:56:a6:dd:
43:f2:e2:ae:0d:32:44:c5:92:15:1c:39:a4:17:00:
2c:6f:e8:eb:c1:8e:24:f5:bd:a1:9e:32:00:87:28:
61:01:f4:8a:7d:48:ba:13:c8:9a:dd:2b:2c:2b:6d:
02:4a:04:fa:60:71:8c:ed:aa:e8:65:96:b0:4e:e7:
5f:66:c4:02:03:9d:e6:bc:18:8f:0c:c5:74:fe:d3:
e9:6f:43:c2:27:b3:7c:99:73:24:76:aa:35:f5:97:
8d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:A2:4C:B4:61:B3:6E:AB:C2:43:32:38:0B:53:BA:C3:25:D7:28
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3f:c1:dc:23:c6:50:06:0f:cb:5a:73:b0:17:61:10:ff:f0:
5e:46:fd:eb:28:65:8d:31:6f:10:06:c8:15:d5:33:cd:3c:68:
59:96:22:2b:fe:16:83:28:c0:56:03:8f:f1:29:ac:4e:8a:eb:
3e:57:c2:58:ac:01:ad:9c:66:b6:4d:b1:f4:f7:06:06:bd:98:
5e:2b:68:b4:9f:26:d0:1a:0d:e0:91:c1:a4:19:da:0b:f2:31:
f7:c9:8d:22:53:7c:a1:22:5b:c3:8b:6e:e0:16:84:02:a7:59:
6c:bd:61:82:bb:6f:ec:33:30:c1:38:de:b1:6c:44:6a:59:c5:
2d:76:f0:ab:84:ec:eb:76:52:93:20:9a:03:85:46:0e:aa:7b:
b8:e9:e7:1d:8f:8f:cd:3a:1d:17:2e:97:9e:f7:37:ed:9b:40:
b6:e1:69:c1:61:df:92:40:33:ff:7a:fa:88:9d:56:48:67:5e:
44:65:2d:77:95:67:7c:f2:4e:d2:19:86:cd:bc:30:fb:6d:76:
03:30:a4:ed:69:7e:45:65:d0:7a:32:9a:65:05:85:ef:8d:df:
f9:6d:a9:33:05:d2:54:c3:91:31:c0:4f:60:3f:0b:db:df:8f:
67:49:91:c7:8d:a4:2f:67:92:ee:ed:29:b9:c7:64:38:ce:93:
f6:0b:47:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:36 2025 by rpki-client