Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
File: w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft (raw, json)
Hash identifier: upbcLkAGsUwxe5k2mhXNpLOp0hEYNOr70Vfc3OMRTtA=
Subject key identifier: CC:3A:6C:E6:22:B3:78:96:FD:B9:09:45:8C:90:F3:2B:7A:FB:86:BB
Authority key identifier: C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
Certificate issuer: /CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Certificate serial: 0198D54E4A3AE6275AA9C9AFBB3F05F21B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:14 +0000
Manifest this update: Sat 23 Aug 2025 05:02:14 +0000
Manifest next update: Sun 24 Aug 2025 05:02:14 +0000
Files and hashes: 1: VvJo0lhVWVTAqGHGg1amh53Ljec.roa (hash: GwM4oNfSgsrgVocC2bDhcn2ZlYGWFP0EuCABmBUvrpo=)
2: w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl (hash: QMPVyAgphq30uW+crRwTz8mwQFrt0iKmrvrVgNJh6Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:4a:3a:e6:27:5a:a9:c9:af:bb:3f:05:f2:1b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c36806ea062f6053841288b446e2e0ded5b2f2e7
Validity
Not Before: Aug 23 05:02:14 2025 GMT
Not After : Aug 24 05:02:14 2025 GMT
Subject: CN=cc3a6ce622b37896fdb909458c90f32b7afb86bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:ac:6b:18:ae:e6:c8:ce:79:22:b0:8a:cb:
ee:c6:43:47:c0:2b:7a:17:90:7c:04:4f:db:6f:42:
b6:8a:83:80:09:ea:43:4e:f7:62:9c:76:94:d8:80:
15:a5:f7:1b:4a:15:81:d1:a2:93:bf:cd:93:4d:a9:
8a:4e:02:08:84:55:4d:4f:a8:d0:aa:74:df:be:58:
0f:d8:b0:79:7e:37:2b:dd:2b:22:68:d1:dc:90:fa:
96:f5:76:9f:57:72:51:41:99:15:3d:e0:34:9c:19:
52:f5:44:51:1b:63:96:53:6b:9c:61:e2:ca:d0:26:
ed:37:ac:17:59:2b:09:07:75:cc:a1:81:d8:9a:22:
63:e9:ea:9d:8b:27:2c:07:fd:f9:d2:b1:3c:0c:63:
11:dd:7d:0e:cc:4d:53:10:8a:3e:82:86:11:be:8a:
e2:bf:d0:5f:f4:fc:d6:f3:73:03:e5:62:2d:0e:cb:
4b:cc:b6:01:d1:1c:5c:de:7d:85:9d:b4:0f:08:08:
37:42:77:74:22:53:b2:c8:6d:9c:4b:6f:05:c9:ac:
98:6b:b2:30:74:09:e9:cb:bd:5c:1a:a5:a0:ab:2c:
88:4d:2e:06:e2:32:48:41:1f:f8:5d:03:0a:4d:84:
cb:a1:a1:29:15:04:f6:e8:9a:bf:79:17:a1:ee:de:
ed:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3A:6C:E6:22:B3:78:96:FD:B9:09:45:8C:90:F3:2B:7A:FB:86:BB
X509v3 Authority Key Identifier:
keyid:C3:68:06:EA:06:2F:60:53:84:12:88:B4:46:E2:E0:DE:D5:B2:F2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w2gG6gYvYFOEEoi0RuLg3tWy8uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/363ba7-89e3-495f-aa2e-c1eb73ffd416/1/w2gG6gYvYFOEEoi0RuLg3tWy8uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ff:c2:b2:08:cc:a9:0b:64:19:e8:17:45:9f:6c:af:a7:06:
8a:5d:ac:e8:46:77:64:d5:a5:48:1e:6d:08:f5:99:e2:d9:b3:
9e:38:d4:16:4e:3f:48:1a:75:5f:1a:b0:35:34:bc:f2:2d:59:
17:b3:18:81:e4:f6:16:a9:aa:dd:ac:0a:57:df:d0:bd:4b:e3:
c8:f0:11:2f:d6:fc:fe:d3:82:37:5d:8e:a7:10:0f:a4:0a:cf:
84:34:66:3d:08:a9:86:87:38:31:db:21:c0:8b:18:4b:a2:70:
7f:e1:8e:86:5d:63:47:ec:e9:79:ab:2e:0c:54:bb:b2:46:30:
b6:3d:71:c8:06:c7:83:04:b1:d4:3d:3e:ff:fa:6b:43:ba:23:
37:ce:6e:10:a4:f0:62:50:63:70:03:5c:f5:f4:43:a8:c5:0b:
05:0d:05:aa:87:7d:43:37:6c:9a:fc:9c:78:da:32:d7:1a:55:
88:06:43:22:00:fe:f1:44:52:84:0c:68:12:9c:c6:c4:d7:4d:
95:36:a1:4e:d9:1c:a8:a8:52:51:6e:b3:bd:ec:28:9f:f9:99:
80:da:9a:14:61:8e:bc:d6:d6:c8:b1:84:db:7b:fd:c7:2d:ca:
b5:40:e6:5d:60:c0:0b:1a:c2:bb:cb:fd:5c:96:a2:7b:c3:aa:
9b:27:a4:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTko65idaqcmvuz8F8huSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNjgwNmVhMDYyZjYwNTM4NDEyODhiNDQ2ZTJlMGRlZDVi
MmYyZTcwHhcNMjUwODIzMDUwMjE0WhcNMjUwODI0MDUwMjE0WjAzMTEwLwYDVQQD
EyhjYzNhNmNlNjIyYjM3ODk2ZmRiOTA5NDU4YzkwZjMyYjdhZmI4NmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HOsaxiu5sjOeSKwisvuxkNHwCt6
F5B8BE/bb0K2ioOACepDTvdinHaU2IAVpfcbShWB0aKTv82TTamKTgIIhFVNT6jQ
qnTfvlgP2LB5fjcr3SsiaNHckPqW9XafV3JRQZkVPeA0nBlS9URRG2OWU2ucYeLK
0CbtN6wXWSsJB3XMoYHYmiJj6eqdiycsB/350rE8DGMR3X0OzE1TEIo+goYRvori
v9Bf9PzW83MD5WItDstLzLYB0Rxc3n2FnbQPCAg3Qnd0IlOyyG2cS28FyayYa7Iw
dAnpy71cGqWgqyyITS4G4jJIQR/4XQMKTYTLoaEpFQT26Jq/eReh7t7tSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw6bOYis3iW/bkJRYyQ8yt6+4a7MB8GA1UdIwQY
MBaAFMNoBuoGL2BThBKItEbi4N7VsvLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUt
YzFlYjczZmZkNDE2LzEvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8zNjNiYTctODllMy00OTVmLWFhMmUtYzFlYjczZmZkNDE2
LzEvdzJnRzZnWXZZRk9FRW9pMFJ1TGczdFd5OHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf/CsgjM
qQtkGegXRZ9sr6cGil2s6EZ3ZNWlSB5tCPWZ4tmznjjUFk4/SBp1XxqwNTS88i1Z
F7MYgeT2Fqmq3awKV9/QvUvjyPARL9b8/tOCN12OpxAPpArPhDRmPQiphoc4Mdsh
wIsYS6Jwf+GOhl1jR+zpeasuDFS7skYwtj1xyAbHgwSx1D0+//prQ7ojN85uEKTw
YlBjcANc9fRDqMULBQ0Fqod9QzdsmvyceNoy1xpViAZDIgD+8URShAxoEpzGxNdN
lTahTtkcqKhSUW6zvewon/mZgNqaFGGOvNbWyLGE23v9xy3KtUDmXWDACxrCu8v9
XJaie8OqmyekBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:56 2025 by rpki-client