Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: weeIuWI/7QDUIjwTV3FWP9KrHllDyYwTP9Z3lxtdx1E=
Subject key identifier: 09:D8:C9:68:97:94:6E:FF:21:FB:FF:96:AD:9A:CF:6B:EC:BB:4F:CC
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 0198D5162AE1686679FD2F9DF838FE82C510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 041B
Signing time: Sat 23 Aug 2025 04:00:56 +0000
Manifest this update: Sat 23 Aug 2025 04:00:56 +0000
Manifest next update: Sun 24 Aug 2025 04:00:56 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: PLKDFrNuqqrkyUL+YPveQjE3GlTMvv5CA+1mryRCdG0=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2a:e1:68:66:79:fd:2f:9d:f8:38:fe:82:c5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Aug 23 04:00:56 2025 GMT
Not After : Aug 24 04:00:56 2025 GMT
Subject: CN=09d8c96897946eff21fbff96ad9acf6becbb4fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:6b:d1:36:c2:d3:76:71:a5:f7:4e:63:79:
03:43:7a:82:87:d0:2f:7a:c9:6f:5e:fe:04:4f:d4:
73:e5:b9:c6:98:e4:c1:e8:23:2a:7f:a9:81:1d:65:
af:28:12:30:51:6b:53:98:80:0c:cb:fd:4b:2a:d6:
a2:ca:6f:10:b6:f2:4f:48:a3:f0:7c:5d:01:0d:c2:
44:96:79:7c:ef:96:87:fe:48:14:57:32:aa:59:87:
b4:76:80:6d:2d:f7:65:f3:b2:3b:2c:47:c1:8e:ca:
d0:cc:f9:12:6a:37:e2:93:03:b4:d9:e9:ce:a8:6b:
fa:20:6a:51:ed:9e:a6:69:6d:16:92:44:e1:1a:f4:
c1:40:10:db:4c:26:89:51:d9:c7:f9:0c:58:88:8b:
77:f2:84:0f:d9:0e:75:f8:c1:a5:f2:71:10:80:8f:
1a:7d:c2:60:9e:2f:ee:77:13:71:0d:4a:c2:4c:f7:
c7:c0:73:94:1f:89:ea:3f:c6:71:ae:53:41:08:c7:
7b:bd:42:f5:b4:06:7d:ab:a8:c1:a6:c4:56:4e:ad:
46:f2:d0:d7:02:cd:81:20:af:18:56:48:d0:bf:b7:
7a:1b:65:e4:cb:fb:7f:18:25:de:e0:d1:fa:dd:2a:
43:66:ac:7a:30:6c:fe:74:e8:86:56:8b:d3:76:12:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:C9:68:97:94:6E:FF:21:FB:FF:96:AD:9A:CF:6B:EC:BB:4F:CC
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:aa:92:fe:34:30:c5:81:3b:80:2b:b7:bc:dd:f3:c3:13:e3:
56:f2:6c:7e:ef:03:d5:30:8e:8b:36:05:a2:b9:5c:cc:7a:5a:
70:b0:d4:b2:b7:83:8e:1f:b2:80:6a:2c:97:9f:fe:e2:8f:d8:
5a:68:b2:94:5d:e7:a4:b5:e8:a1:9f:73:e4:e5:74:5e:4f:90:
15:88:a3:47:d6:83:ec:9a:b5:a4:ce:fd:eb:7c:74:89:fe:a5:
b3:b5:81:92:c7:77:92:80:80:da:67:01:fe:14:c0:d9:db:60:
da:49:4a:9d:f6:21:bb:03:16:c8:ac:21:30:72:91:e8:1c:46:
b6:29:ef:80:5c:77:c5:d5:02:03:a7:f9:0d:14:b4:7b:cc:43:
d4:c4:87:63:48:9a:21:bf:ca:cc:39:5e:74:44:bb:0b:42:77:
12:32:e6:f2:20:33:fc:a1:7a:c4:a3:fb:bd:5d:80:d1:9a:39:
2e:b3:39:66:22:ba:55:30:ba:a0:33:34:33:a8:9e:4c:e4:ee:
ae:14:f2:c5:c6:54:9b:bd:27:ca:e8:c4:be:fc:3b:31:23:05:
8b:35:fb:cc:ac:da:18:e7:11:ad:9b:26:c2:4f:d8:50:53:51:
64:53:df:fd:4a:e5:f7:84:4e:2d:99:4a:e6:b1:92:a8:25:d7:
36:7d:b5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:36 2025 by rpki-client