Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: NzeknKKsSYnG1ISXg+mCbESTjvtRrAcvb6Qrlu1tWUs=
Subject key identifier: 5D:D0:1F:B4:42:17:F2:95:90:B9:17:21:18:16:52:63:EA:DF:46:C9
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 0198D4741394A27A424572BF30C90B14DD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 0872
Signing time: Sat 23 Aug 2025 01:03:53 +0000
Manifest this update: Sat 23 Aug 2025 01:03:53 +0000
Manifest next update: Sun 24 Aug 2025 01:03:53 +0000
Files and hashes: 1: Ht6Wd5Bw2md9CUATtRL2VX-XFlc.roa (hash: 6oTLBNPocrrlaUNBq/IOSo88GlYRhWvOfw5kea2nyRc=)
2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=)
3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: F+9zrq0t1oPlWSj4VjN7RSxaNz3zCRAFAepCOwOojuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:13:94:a2:7a:42:45:72:bf:30:c9:0b:14:dd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Aug 23 01:03:53 2025 GMT
Not After : Aug 24 01:03:53 2025 GMT
Subject: CN=5dd01fb44217f29590b9172118165263eadf46c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:8a:81:84:f3:5b:b9:ed:fd:45:ed:75:7e:
ec:18:e1:94:f2:b7:6e:a0:a2:64:c2:b1:81:4a:5a:
1a:7e:2d:56:7d:54:8c:f1:45:2e:a5:4c:08:e8:cb:
8e:27:89:c1:25:60:7b:83:b5:26:06:a1:88:4f:39:
f6:d6:2b:2c:dd:c2:27:e7:5a:ec:1e:ee:a3:4f:a9:
f2:59:fd:bc:9f:20:0b:5d:d4:f1:56:db:ae:c7:b3:
a3:03:a1:1e:28:43:68:25:86:37:b3:39:c7:07:25:
b0:66:9d:18:f6:37:08:bc:74:76:0f:70:7f:bd:68:
b1:21:ae:d3:60:a7:3d:5c:02:ba:ee:70:87:90:db:
24:94:a6:89:9c:7a:ba:16:74:11:dd:3f:52:c9:ce:
00:9f:f4:8e:1a:1d:fd:d2:16:93:9b:ea:9a:fc:38:
ea:c2:b5:6f:57:bf:96:d8:23:96:ec:23:76:fd:20:
f8:9a:dd:a0:43:42:df:4d:d9:d2:bb:f8:02:27:14:
ae:50:bf:76:54:eb:21:1f:3e:05:f8:b4:6e:86:83:
f9:49:7f:92:94:70:2b:08:d3:11:e5:59:98:56:d6:
56:a7:a4:96:c3:85:e8:55:ca:a2:c3:97:3c:c1:34:
0b:ef:9e:f6:be:2d:50:2e:05:e3:b6:7c:70:91:e9:
f5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D0:1F:B4:42:17:F2:95:90:B9:17:21:18:16:52:63:EA:DF:46:C9
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1a:58:a8:7a:79:c1:80:7b:59:50:1c:18:62:23:a1:e4:1f:
15:92:64:a6:dc:ee:13:4a:4c:71:eb:cc:9a:2c:da:e2:99:e8:
97:1f:ab:b3:3a:5f:18:00:af:1a:89:57:c4:2f:08:55:12:f4:
b8:df:e3:2b:8b:04:bd:02:79:b1:45:5b:2f:ff:fa:43:13:ea:
58:79:bc:20:a1:5f:47:4a:8b:22:00:a5:fd:e4:a3:31:84:91:
85:cb:17:16:19:2d:af:a5:ae:b1:6c:41:b3:ea:00:3c:b3:31:
c4:8d:8b:3e:0a:f9:84:26:41:90:93:e5:1c:88:ac:dc:16:b3:
cf:63:f8:f2:e0:73:1e:d5:53:fa:bb:ab:91:b8:48:0f:f3:de:
15:a2:e8:11:69:49:a1:9c:98:83:32:58:db:ab:36:a7:dc:98:
67:05:ff:0d:a3:ed:8b:46:80:e3:18:02:29:30:6e:8e:a6:5c:
e4:1f:ce:5b:98:16:fe:a8:17:31:9e:51:96:b7:ed:64:d9:3b:
00:07:49:4c:a6:44:36:bf:ea:fc:f9:69:c8:63:ab:f0:81:1f:
16:ca:dd:07:f4:5c:ee:8d:2f:fe:c8:85:7d:bc:78:2c:8c:50:
17:74:78:34:05:79:5c:1d:6b:7b:ff:0c:3e:7c:74:1d:45:83:
10:1d:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:18 2025 by rpki-client