Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
File: wRjjTglHnc6J72HZj0wqv4GJzyQ.mft (raw, json)
Hash identifier: aPQo37uUSAkcpYBjpUeXQtPKzMzNHKb3QEsfEJbv4uM=
Subject key identifier: 64:E0:26:2A:EA:BD:6A:B4:53:78:65:9D:99:34:B8:29:B5:FC:6C:60
Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
Certificate issuer: /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Certificate serial: 0198D4DFDCCCF3A921CF348BD892AA0751CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
Manifest number: 0437
Signing time: Sat 23 Aug 2025 03:01:37 +0000
Manifest this update: Sat 23 Aug 2025 03:01:37 +0000
Manifest next update: Sun 24 Aug 2025 03:01:37 +0000
Files and hashes: 1: C_QylDjtmeXaqfQqwZx9bW-pizU.roa (hash: TxsogUKYtZ4fwZHLxBqP+QAdRfnbhKHLWlZVu8NvQ2Y=)
2: wRjjTglHnc6J72HZj0wqv4GJzyQ.crl (hash: MMCdOBnQ72d5OdrhPRC5gaNgUJzl4XV4TEXTgHV9CK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:dc:cc:f3:a9:21:cf:34:8b:d8:92:aa:07:51:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24
Validity
Not Before: Aug 23 03:01:37 2025 GMT
Not After : Aug 24 03:01:37 2025 GMT
Subject: CN=64e0262aeabd6ab45378659d9934b829b5fc6c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:62:4c:12:04:a7:58:5b:28:25:60:90:09:
30:d6:2d:eb:3d:36:d9:58:3e:5c:6f:93:7a:b2:58:
bc:dc:56:84:a2:90:15:1a:56:87:2b:5d:1e:29:b1:
48:cd:14:81:2b:9e:58:75:39:87:53:5c:13:4d:31:
2b:6d:46:05:97:72:ed:f3:80:a2:8d:7e:ed:96:02:
12:1f:cb:7b:2d:af:2f:9e:98:ee:75:0e:6f:bf:b4:
fd:47:df:2d:e6:75:35:d8:f1:8b:2a:57:34:94:15:
12:9e:c4:bb:08:34:61:68:da:e7:55:c4:13:ca:0c:
1f:45:4c:3f:16:e4:08:ae:65:2d:72:a5:6d:c8:96:
28:33:70:2d:24:80:81:66:cd:eb:f7:7f:05:b2:1e:
a5:5d:74:cf:27:1d:76:bd:8a:38:de:38:df:9f:8e:
c5:2a:92:a6:90:f3:0b:55:73:a7:d6:02:ce:1b:a2:
66:1a:db:e8:8e:78:a4:19:6a:d2:54:df:12:fd:19:
a6:6e:f4:8b:b6:8a:c6:3f:f2:93:b7:b1:3f:8d:c5:
7e:86:6e:1a:c8:de:43:87:5d:45:8c:78:86:16:bc:
7d:24:ec:c6:8b:e6:c6:1a:34:fa:06:83:04:3e:be:
78:0c:a1:11:09:f3:23:f3:f5:5f:65:e9:52:84:42:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E0:26:2A:EA:BD:6A:B4:53:78:65:9D:99:34:B8:29:B5:FC:6C:60
X509v3 Authority Key Identifier:
keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4c:09:75:80:bd:1f:1d:e0:8f:b5:49:42:93:15:5b:bd:9c:
76:09:6f:41:78:ef:c2:52:fc:af:32:5b:4a:6b:6e:af:f6:54:
24:eb:db:53:90:55:ed:5d:87:a5:3c:54:55:8f:7c:2e:f5:7e:
df:0a:a0:91:d7:1a:f8:7e:bb:f7:8f:40:28:a3:2a:2b:bc:8e:
3e:c2:c6:7a:f7:07:77:84:3b:36:fc:2d:1e:66:f2:c8:e9:5d:
25:8c:82:57:bd:c0:8f:40:7f:78:de:dd:94:ff:f4:e7:75:d2:
0e:e2:a2:99:e0:49:e0:97:15:57:72:66:03:84:bc:bd:a2:e1:
db:ee:aa:f8:23:3e:16:5a:a7:2b:38:54:5e:10:e7:c8:c1:4b:
52:99:c5:16:9a:b0:03:84:96:82:f9:58:72:02:1f:a9:ab:99:
e8:3e:e2:1b:74:35:e9:66:5a:05:09:e6:da:ee:84:e9:37:b6:
cd:5e:98:7c:42:c4:94:bf:d1:b2:6a:c0:50:8d:16:b3:d2:d2:
aa:50:91:9f:0d:f8:5f:22:99:fd:7c:97:0c:57:e3:7e:eb:ce:
2a:86:0e:5a:df:15:65:d6:0d:00:af:8f:b3:7d:68:c0:6d:e7:
a2:c4:dd:12:58:b0:16:69:f1:63:e8:67:fe:fa:a0:17:93:9e:
6e:ea:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:04 2025 by rpki-client