Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: DrpLtD0+bQg8bYXn6dxxrd1ezgyvTV2L/Tk8pXbAwuk=
Subject key identifier: 9E:34:1D:14:CB:B3:DD:3A:0C:23:62:46:AD:39:3B:E9:60:61:21:42
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 0198D54DD8CAE7ADD64521ACAB4F60F58596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 10A5
Signing time: Sat 23 Aug 2025 05:01:45 +0000
Manifest this update: Sat 23 Aug 2025 05:01:45 +0000
Manifest next update: Sun 24 Aug 2025 05:01:45 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: FNgvRCfs1BTcSGvJz7JBmDE+nhG8LgiXi5ppFypMWjE=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:d8:ca:e7:ad:d6:45:21:ac:ab:4f:60:f5:85:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: Aug 23 05:01:45 2025 GMT
Not After : Aug 24 05:01:45 2025 GMT
Subject: CN=9e341d14cbb3dd3a0c236246ad393be960612142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:25:d7:b0:18:dd:06:c2:aa:44:6f:ad:62:1f:
dc:4b:39:26:08:a8:45:4d:88:58:8d:4c:e0:3e:b1:
7d:ec:85:05:24:99:9c:18:aa:68:1c:42:fb:bd:dc:
58:b5:9d:be:ea:6c:31:e2:38:f6:66:fb:82:8e:00:
26:fc:a7:05:6b:a3:78:52:72:13:bd:be:de:d8:95:
fb:ab:7f:15:6d:48:0a:83:98:c6:d9:02:54:9d:39:
37:f8:a2:c8:aa:b8:b2:5e:b8:a7:49:e1:ab:d1:12:
5d:62:d9:0e:a3:d2:59:24:9c:ac:4e:e2:24:78:e9:
ca:c3:cb:bd:f2:2d:d3:97:24:08:24:e3:b6:a6:ad:
73:b4:fb:f7:4c:63:27:58:b2:f4:24:c9:a4:86:e1:
14:d8:ab:46:8e:8b:78:ec:0f:da:0d:93:c2:59:49:
69:07:e5:e6:d8:a3:bb:dc:41:e0:17:05:c0:dc:c0:
3d:71:07:63:7a:46:89:98:e3:1f:f4:4b:a1:4f:5a:
1d:6f:44:37:48:55:59:61:13:62:93:1d:41:d1:ab:
be:e2:2f:59:73:d8:b8:c0:6e:42:14:77:5a:ab:5c:
2c:96:14:fa:ec:4d:a0:c1:27:45:b1:0d:1f:18:80:
0d:4e:74:41:8a:ee:ff:bb:cd:b7:6d:5e:52:c8:77:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:34:1D:14:CB:B3:DD:3A:0C:23:62:46:AD:39:3B:E9:60:61:21:42
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d9:90:5b:c2:2d:69:54:88:6b:41:6a:dd:3e:7a:ce:34:14:
50:bc:7c:ea:1a:5b:a0:86:4a:e7:01:ed:09:3d:a9:4b:4a:3d:
29:dc:f7:3e:e9:b5:c3:88:89:2f:a1:2c:7d:fe:0b:b6:07:e3:
24:24:73:25:0a:0c:31:36:d1:bb:9f:57:8e:eb:f4:e5:04:1a:
96:9d:0a:80:20:5a:ba:86:2e:cc:68:2d:1d:7a:0f:84:a4:89:
c8:c4:af:7f:85:d3:c3:a1:ce:51:55:2d:84:b2:10:6e:3b:d5:
fb:8d:68:7e:59:36:71:79:53:ad:59:d4:8c:3d:17:42:0c:19:
d8:0a:43:e0:15:37:40:f0:68:ec:d6:8c:0a:ec:0c:99:b8:d3:
eb:13:c4:35:e1:3c:44:93:1a:2a:2b:5a:d1:69:b4:18:76:5c:
c9:d9:28:0d:cc:4e:de:44:d6:3b:f2:8a:3c:8a:76:09:32:5f:
8f:42:e6:74:d8:5f:cd:9a:00:f4:15:0a:20:1d:db:16:db:66:
f8:8b:42:05:28:7e:58:d3:24:05:ce:d3:21:79:da:1f:3d:e8:
d6:87:63:92:3f:5d:bb:18:2d:79:e4:2c:47:74:0a:ff:12:60:
da:c7:8e:de:8c:a3:aa:14:73:53:bc:53:a1:d1:90:32:26:24:
78:db:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:37 2025 by rpki-client