Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
File: cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft (raw, json)
Hash identifier: HA6lUPnr0dSFKVRB2Zc0le+FchfQ2S6c3MxP5kOuAXY=
Subject key identifier: 87:F6:62:95:10:74:BF:22:E6:9D:D2:1A:B9:66:A8:A1:40:32:D2:F7
Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Certificate serial: 0198D7059678AF891E66573C5319D8BF9874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 13:02:04 +0000
Manifest this update: Sat 23 Aug 2025 13:02:04 +0000
Manifest next update: Sun 24 Aug 2025 13:02:04 +0000
Files and hashes: 1: 8Tphwf2TdCn6_ko-jZ8YIaCMG4Y.roa (hash: EBGUP9Onjc28Spxu+Bc1P0vLX2s/3Esh3HDfGA5b/yg=)
2: TegEFm13uYuDaVYWPUq_NWyfFhw.roa (hash: Z0NpRN8gnuSXynuy4afFeS+fqs/16nspEy2hNFbDueU=)
3: cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl (hash: eIOHdErztDEo5vWHj436GGN9/vnd1NdWcLoabSniGAM=)
4: fNW98zG8YgdTIxQopzVptDv3vEA.roa (hash: oH5A9HkaHxcIBBsSALBiEtsRJXsDnYZkpZH6oV0XeF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:96:78:af:89:1e:66:57:3c:53:19:d8:bf:98:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344
Validity
Not Before: Aug 23 13:02:04 2025 GMT
Not After : Aug 24 13:02:04 2025 GMT
Subject: CN=87f662951074bf22e69dd21ab966a8a14032d2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:b3:fb:aa:07:a2:97:fd:98:7e:15:f6:52:
9a:59:c4:a6:f5:2f:b4:08:79:a1:c8:49:5a:3d:4d:
55:46:24:6f:e8:2c:cd:34:66:e8:9e:d7:17:da:4c:
be:f0:5b:db:fb:81:6b:d0:b0:3d:c0:6d:c0:dd:a5:
16:73:03:2a:75:4b:0c:a0:2f:52:03:3c:60:d0:f2:
14:e3:ca:7d:92:d9:e4:a8:dd:97:3b:c3:04:12:b9:
37:ae:c3:e9:68:d6:c4:84:db:fc:00:b7:97:f6:5e:
14:01:c0:fa:91:2e:eb:59:08:fc:7d:b4:aa:51:1b:
8c:0d:0f:f5:62:25:e3:f7:59:49:08:4a:b3:4c:0c:
74:bc:96:65:26:ee:41:c0:84:ea:3c:83:53:6a:8c:
d1:98:13:36:d1:8e:d4:3b:54:44:d4:53:d8:de:66:
f5:2f:7e:49:f3:bc:48:fc:e5:c0:2d:3f:ce:60:5a:
f7:40:21:67:0f:56:78:8e:95:0b:9f:27:54:f1:d8:
ec:14:27:b6:95:7c:90:02:98:96:d2:04:61:bb:a8:
db:7f:f7:43:03:12:7a:de:42:0e:65:54:ce:fe:21:
70:49:ce:57:ce:25:98:61:86:b6:1d:dd:27:4c:5e:
4e:f4:b5:0c:8d:c7:f3:88:66:af:3d:59:68:b7:22:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:62:95:10:74:BF:22:E6:9D:D2:1A:B9:66:A8:A1:40:32:D2:F7
X509v3 Authority Key Identifier:
keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:ef:b2:d8:75:88:7a:da:73:08:33:95:ff:c7:8b:0a:8f:
a9:67:b6:86:38:22:83:cf:04:d7:51:c1:b9:c3:8f:40:3c:bc:
69:ce:28:d0:5e:1b:df:a9:35:88:57:ed:bb:47:47:a3:62:15:
63:cb:d4:db:73:5a:ad:33:ef:f5:f3:9a:17:ab:d1:04:52:b3:
fb:c2:7f:c7:4c:4c:f4:99:1e:01:d6:b3:45:41:95:d3:82:c7:
3e:17:1d:39:36:91:4c:67:74:af:04:a3:c5:3c:01:4a:91:fd:
4d:0d:53:6a:bf:31:26:f6:00:84:c1:35:5e:66:fc:9e:4a:87:
2e:8c:c8:15:a1:42:ce:6e:81:a6:ea:e7:92:b5:d4:8f:2f:a4:
e8:1d:49:b9:22:a2:e5:7b:3e:c6:8e:f4:05:3d:ea:0d:59:fb:
08:7c:ad:d0:cf:0d:fb:15:e3:f8:d8:54:3a:2f:22:4b:8b:c1:
b6:4a:0f:cd:25:f0:fa:da:fd:da:d5:9a:a4:4c:fc:15:d5:fe:
18:1d:2c:6a:7d:4d:4a:39:07:d6:1e:d5:af:f4:3e:60:fb:17:
42:f8:fc:e3:24:12:00:bb:37:c8:11:19:3a:a4:d2:69:3b:28:
17:bc:47:20:9f:93:42:39:9c:a5:fe:84:c8:7d:56:7c:1e:90:
25:6d:93:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:42 2025 by rpki-client