Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
File: w4w6HAXImev-FdI2GQmmNZfGgHg.mft (raw, json)
Hash identifier: CDtGVGi9LKel6KjUtOXt+Yb4sDFMB1cC3+kIQrG17Ao=
Subject key identifier: 5D:0B:BA:3E:1B:6F:77:31:18:C6:ED:4A:11:4B:B9:1C:39:CB:EA:F4
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Certificate issuer: /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial: 0198D54E81DA0F4A90C1CCFD02958A52AE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:28 +0000
Manifest this update: Sat 23 Aug 2025 05:02:28 +0000
Manifest next update: Sun 24 Aug 2025 05:02:28 +0000
Files and hashes: 1: 3fbk5KZ8ThDjTTk1HUs_F8dpBIQ.roa (hash: QSUPjZJR7N2hLAV4a9vMxf89Cyng2AUNsEsGu9jShnE=)
2: q75v5EqZWH70d3-zw1Mz9lAhrNA.roa (hash: 42QWIn0E5NYeaE/XqOKgGlGrf3JcLpIWupxVplExU4g=)
3: w4w6HAXImev-FdI2GQmmNZfGgHg.crl (hash: EFGcQiJvlzGD+SIl/rdLllfpTV4qedXQisF7dhcCJnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:81:da:0f:4a:90:c1:cc:fd:02:95:8a:52:ae:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Validity
Not Before: Aug 23 05:02:28 2025 GMT
Not After : Aug 24 05:02:28 2025 GMT
Subject: CN=5d0bba3e1b6f773118c6ed4a114bb91c39cbeaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:66:73:79:c2:e1:fa:9c:0b:60:06:d7:eb:c5:
07:15:fa:02:f0:ad:7e:91:52:77:2d:76:36:f0:c6:
45:40:4f:42:5e:ed:8c:ee:08:ac:8f:10:a0:9a:4a:
f4:c5:42:64:db:85:87:e0:cd:55:d2:fd:41:95:5d:
66:97:58:98:d1:b5:53:10:09:66:b0:83:ac:a3:07:
c7:aa:a7:d3:33:8d:4e:9f:d6:0b:4c:51:eb:b7:e7:
29:85:a5:38:24:a4:60:47:d5:fc:c7:31:37:0d:1b:
5c:3f:d8:3c:3e:bc:15:85:13:cf:17:d8:38:69:4a:
14:26:5b:70:bf:8f:72:38:8e:97:8d:03:a9:46:34:
fd:8f:4b:a1:86:09:2e:ca:be:c0:08:66:d2:b4:92:
c3:ab:f0:11:78:10:41:14:d1:fa:93:20:7f:39:9d:
eb:a1:0e:5b:fc:0b:f4:58:11:ef:74:06:84:b4:37:
4d:14:fc:0a:4e:ce:66:19:02:2d:b6:b5:c5:76:16:
ee:76:fd:8a:37:77:92:e9:33:8c:90:cc:f6:bf:e7:
ec:67:e6:0d:1d:97:68:cf:4c:0d:29:00:5a:ff:13:
4e:49:01:d6:9f:d2:4d:e1:f7:71:6e:ae:2b:99:62:
b4:4d:ad:ed:32:31:b9:ec:ad:b9:0e:f8:d8:7e:66:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0B:BA:3E:1B:6F:77:31:18:C6:ED:4A:11:4B:B9:1C:39:CB:EA:F4
X509v3 Authority Key Identifier:
keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1d:c9:94:04:89:19:e4:74:fb:82:61:3d:30:11:2f:d4:7b:
a3:68:06:87:50:fe:13:53:34:e7:fc:ba:ac:71:09:03:61:29:
ab:d4:37:2f:b3:ee:3c:c1:f0:4c:a3:6c:85:b6:dc:50:4a:be:
6f:b5:bd:16:60:f2:b2:48:59:25:24:95:86:10:63:01:6d:66:
e2:fd:05:31:55:29:b3:2f:98:77:44:a2:51:87:16:22:11:1b:
49:51:9a:5a:0a:85:50:cc:97:4b:b9:9e:5c:1d:df:c5:8e:65:
c5:5c:f3:d7:83:e2:e3:dd:62:67:6c:c4:e0:f4:f8:e9:5d:d7:
7a:30:92:ce:5b:1a:89:49:c7:37:83:90:18:1b:f9:4c:8b:ca:
e3:01:d8:64:31:96:a3:cf:f1:47:2d:cc:ad:08:eb:39:47:59:
6d:0f:6f:a4:47:62:2c:b4:04:bf:71:d9:ca:5c:27:0b:20:ab:
73:11:16:1e:83:e0:7c:ba:87:89:eb:5b:70:b0:15:1d:b5:2c:
d4:ba:4e:34:79:87:b7:07:50:e5:e1:89:b4:a7:fd:80:43:47:
fd:d1:b6:ae:c0:a1:4b:22:f4:a7:8d:dc:4f:56:c1:e4:23:68:
76:07:a3:c8:9b:b3:1f:08:e7:5a:3d:8b:80:43:a6:97:b1:63:
67:ed:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:50 2025 by rpki-client