Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
File: w4yh1BjCGOJveVGBqeO7e3nURD8.mft (raw, json)
Hash identifier: 8JsPx2eCJ2wt3sbMhL1C2fQ7q7N77ttnjEOhIyrIb3U=
Subject key identifier: F8:36:93:E9:20:2B:CA:C6:D8:B6:99:11:C7:99:24:59:E1:1E:88:D7
Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Certificate serial: 0198D4727777CAD75B16C31D6870397305B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:02:08 +0000
Manifest this update: Sat 23 Aug 2025 01:02:08 +0000
Manifest next update: Sun 24 Aug 2025 01:02:08 +0000
Files and hashes: 1: HtKtiVg-0zn3K5n3LScDDg1_p88.roa (hash: to3WuOq+FMznKALAAApfBe9RQEcWrRQ420WrsW7wdUU=)
2: w4yh1BjCGOJveVGBqeO7e3nURD8.crl (hash: AurG2G1os3v8EgOmXKFRi7lEBV0S2weTb+YjUX3oGUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:77:77:ca:d7:5b:16:c3:1d:68:70:39:73:05:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f
Validity
Not Before: Aug 23 01:02:08 2025 GMT
Not After : Aug 24 01:02:08 2025 GMT
Subject: CN=f83693e9202bcac6d8b69911c7992459e11e88d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:79:eb:36:a8:14:56:ad:97:ed:f1:7e:74:
d7:ad:0b:74:bc:c3:83:9b:23:25:2a:a6:19:70:49:
a9:67:1b:f7:d2:99:62:2a:31:5e:72:57:a4:5a:8f:
83:21:06:5a:70:61:ee:e2:69:b4:e3:a6:27:03:f6:
23:5a:c7:18:57:52:ae:43:c1:1d:6d:a2:10:91:ff:
bf:9a:7c:76:c1:45:4f:56:98:36:5f:61:f3:78:ca:
b9:b8:82:a1:76:99:d6:dd:f6:af:62:9f:0e:51:a3:
b3:37:96:88:04:c6:2b:69:e0:24:3d:aa:25:97:29:
28:e0:c4:62:46:30:0f:56:54:57:71:c6:62:08:ba:
f2:e9:ab:b9:24:64:72:d3:2d:42:ff:83:07:24:8e:
b1:5f:8c:09:a7:10:0d:84:7b:cb:1e:65:7f:fa:95:
43:ba:cc:8f:c7:0e:90:80:18:c7:2e:a3:a4:da:b3:
65:96:d6:45:16:c9:c3:8e:f0:08:26:9c:9b:fd:87:
30:03:72:a3:87:65:73:48:91:33:9e:eb:f9:50:09:
ca:e6:18:71:10:34:cc:c5:a7:67:3b:ce:5e:be:bb:
65:24:86:dd:80:86:67:c6:4b:aa:15:de:2f:6a:28:
67:05:eb:b7:36:9a:da:54:61:37:7d:9d:16:36:d3:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:36:93:E9:20:2B:CA:C6:D8:B6:99:11:C7:99:24:59:E1:1E:88:D7
X509v3 Authority Key Identifier:
keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a0:d0:26:56:05:5a:aa:ea:40:50:03:60:eb:85:f6:80:47:
60:e8:7f:df:8e:f8:35:ac:7c:42:f4:70:55:12:b9:14:31:54:
77:34:5e:61:e5:e0:84:d2:d8:a5:34:89:e4:58:1e:3c:93:01:
8a:96:be:f1:8f:c5:b9:7b:ce:d8:10:21:79:c2:47:b7:d6:0e:
8a:57:68:88:72:15:4d:fe:5c:2d:b9:7a:ce:d9:cf:63:90:1c:
80:43:bf:c8:85:19:25:4a:1b:95:d7:7d:98:2f:1f:09:12:41:
3a:16:fc:9d:22:d9:4b:3d:87:b1:14:5b:54:f6:a7:38:a5:46:
1c:25:3b:86:45:87:93:28:0c:5c:a7:fa:c7:8c:84:6c:03:04:
93:45:2b:ce:f7:8e:17:3f:26:a5:e2:07:19:6c:70:7a:21:88:
c0:f4:ca:35:27:77:ae:e4:0e:3c:b0:d5:dc:67:33:37:15:07:
cf:e3:6c:f9:73:1c:4c:04:da:fc:b9:b9:b9:32:b4:b7:eb:68:
3a:c1:84:b0:98:36:ca:79:1e:d7:ca:fa:dd:ef:20:77:ae:cd:
b5:20:35:2f:46:b8:75:d9:fc:af:ad:4c:61:75:a4:d1:09:8a:
a4:de:0f:49:ce:cf:92:52:99:a4:e7:94:94:5d:a0:af:e7:02:
7e:79:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:56 2025 by rpki-client