Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: arFabvlQMfrA3udHQOdVR6h69vYtW5FnjgNEcgyiEJ0=
Subject key identifier: 90:A2:88:2E:81:B1:44:47:6E:15:FF:7D:74:71:4D:57:6C:CA:F9:7D
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 0198D65F2B7D15C9D0FE198B6EAC75109A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:17 +0000
Manifest this update: Sat 23 Aug 2025 10:00:17 +0000
Manifest next update: Sun 24 Aug 2025 10:00:17 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: 0JKdkJdX8B3Oi+JIyvwCvoG51G+aF9QVHcqrOE1O60E=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2b:7d:15:c9:d0:fe:19:8b:6e:ac:75:10:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Aug 23 10:00:17 2025 GMT
Not After : Aug 24 10:00:17 2025 GMT
Subject: CN=90a2882e81b144476e15ff7d74714d576ccaf97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:17:41:98:cc:16:65:22:e7:82:79:f9:bb:
de:97:7a:24:af:cf:69:88:a2:a1:f5:58:c6:09:24:
c6:a4:58:e8:74:cc:95:6a:5b:4c:d8:fd:96:41:45:
05:cf:10:f3:6a:23:63:4a:45:d7:80:a2:4f:23:39:
22:fc:12:05:89:78:a2:ed:6c:00:8f:e1:02:87:b4:
ab:2a:76:92:6b:35:d5:a3:3e:3c:e0:f7:fe:c3:5b:
94:0f:d3:02:f4:32:92:a5:8b:ca:47:c5:f6:db:ca:
f3:72:93:bf:44:ee:db:42:37:fc:d5:9d:30:f3:dc:
b7:c6:80:07:ae:08:14:f1:d2:05:c1:83:1d:6b:eb:
23:77:7b:0b:f7:d3:8c:d9:69:a1:a6:4e:8a:bd:a1:
a5:8a:e5:3b:4f:69:91:b8:2f:7e:17:94:ad:88:0f:
9c:52:14:cf:e6:85:96:d1:ad:ec:ac:b1:80:8e:75:
8d:37:70:e2:35:45:77:05:d1:d6:40:10:6c:9d:9f:
a1:af:f4:ae:3b:fd:43:12:d4:0c:ec:a9:c1:1d:63:
f8:cb:d7:85:80:d4:0b:c6:28:6a:6b:0a:cf:42:d7:
29:88:ca:fb:65:37:ce:37:1b:58:9f:06:0d:70:11:
01:d5:fe:fa:ea:d6:d2:9e:17:ed:d9:17:d4:81:db:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A2:88:2E:81:B1:44:47:6E:15:FF:7D:74:71:4D:57:6C:CA:F9:7D
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:73:61:82:6b:a7:8d:e7:84:fb:a2:89:d0:56:38:06:36:45:
75:6e:9d:5b:45:b3:68:8a:ba:9e:2f:6e:49:46:1b:e0:2e:ea:
3f:f4:10:e9:be:8c:66:4a:7e:11:4e:4e:31:3f:e6:44:b5:7a:
50:52:3f:e1:26:69:f6:51:c2:fb:81:66:a9:fc:a7:bd:8e:22:
46:f9:25:b6:f7:ee:98:82:fb:1a:4e:b5:b9:34:3b:82:cd:17:
a8:51:7e:8a:b0:2f:68:c5:53:71:01:36:ff:e4:49:2b:75:ab:
c3:ca:4e:84:18:62:67:fe:d8:20:b7:53:bf:a6:78:bb:24:b6:
0a:79:0b:62:c8:95:b4:a5:17:75:42:6c:fd:c0:5d:a1:07:e3:
14:86:1b:c0:45:57:95:eb:49:ba:22:ed:86:c3:b9:52:86:19:
03:f7:4a:62:87:9a:4e:c2:38:dc:96:f5:96:40:d5:3a:8d:5e:
e1:b2:ff:13:72:de:61:de:ad:5b:f2:f3:00:ed:02:88:22:55:
7b:e7:58:75:b6:36:57:13:0a:99:f2:4e:66:ef:9d:ad:67:cb:
2e:bb:23:53:96:c0:76:7d:17:d0:92:8f:cb:be:61:24:4f:a6:
e9:47:f8:69:5a:17:40:77:0d:94:96:ed:f1:a5:70:63:83:07:
2a:4b:d7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:20 2025 by rpki-client