
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: 2fh+C9h6e8EWW3ZMHQc1lTIwA1m3pjotZhdsBUZIVLU=
Subject key identifier: 4B:61:74:EB:C7:5B:8F:A5:F1:15:4D:9B:67:DB:B9:9E:16:93:49:39
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 0198D6CDA486B13312979BBF27F687937513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 0A09
Signing time: Sat 23 Aug 2025 12:00:57 +0000
Manifest this update: Sat 23 Aug 2025 12:00:57 +0000
Manifest next update: Sun 24 Aug 2025 12:00:57 +0000
Files and hashes: 1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: NMiNUHOTBUtM02+PmdZ7YNl2lzYB/XcSKLT9V5OmWMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a4:86:b1:33:12:97:9b:bf:27:f6:87:93:75:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Aug 23 12:00:57 2025 GMT
Not After : Aug 24 12:00:57 2025 GMT
Subject: CN=4b6174ebc75b8fa5f1154d9b67dbb99e16934939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:be:f2:91:ba:ac:57:23:14:87:39:96:46:
96:97:60:9a:a6:cf:fc:58:4c:8a:1c:aa:73:09:7f:
0d:d8:2c:d5:59:e6:be:e1:f6:a0:8b:00:7e:26:c5:
69:0a:04:fb:51:44:23:91:52:f3:70:2c:f9:95:d0:
c7:1a:ea:f7:f4:bc:ae:35:d6:66:f3:8a:b6:78:ea:
cf:47:a8:0f:b4:64:cb:eb:8c:04:35:87:38:5a:b0:
fb:d7:1b:33:12:ab:e4:0d:c6:c3:22:fb:35:7d:9f:
e6:d1:62:8a:b9:0f:82:a4:b9:ec:26:50:cf:76:96:
cf:68:12:1c:c8:ab:f6:c5:da:1d:d8:94:3b:2d:de:
ff:3c:dd:be:c4:2b:a8:69:70:48:a4:3e:da:be:f6:
73:67:6e:0f:38:13:08:8c:b9:f2:39:97:c2:63:28:
08:f9:7c:21:70:6a:d9:2f:51:aa:8b:90:c6:c7:54:
43:05:b5:29:d0:0e:cc:27:3c:a3:6b:1c:82:1e:3e:
49:f1:1d:d9:5c:2a:82:48:00:b9:e5:1b:63:54:79:
d9:c0:f5:5a:b9:49:13:d1:84:34:e7:f3:0c:cd:3e:
ce:6e:4f:db:17:87:c6:2c:ee:fc:17:25:b8:47:63:
5b:05:aa:87:91:88:07:b2:3b:c6:83:c8:ed:14:5c:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:61:74:EB:C7:5B:8F:A5:F1:15:4D:9B:67:DB:B9:9E:16:93:49:39
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a9:cd:90:33:90:38:ed:88:07:0f:50:a6:89:70:21:d3:42:
88:05:70:d9:c3:5a:47:6c:60:49:d5:da:2f:bf:5f:27:7d:9b:
94:ac:4c:c2:ae:f5:e6:7b:df:41:de:0b:ec:d8:51:40:eb:10:
e3:bf:35:bc:9e:88:f1:48:4a:cc:df:be:26:33:d7:d0:88:cc:
9a:f7:13:c7:64:b3:51:76:94:af:b1:71:a0:72:ae:82:4c:34:
3e:94:32:1f:03:15:65:65:ac:0b:4b:43:3e:40:2a:9e:20:6e:
44:5b:a4:a8:38:c6:14:b9:cd:3a:cf:27:16:f9:cb:1e:f7:89:
88:aa:4a:14:6c:31:cc:06:ce:01:e0:ff:54:7a:97:4e:fa:3d:
e2:63:32:b7:eb:71:56:e3:0d:9f:94:b4:a3:7b:db:d2:c0:18:
61:ca:26:e6:66:b4:38:7c:ed:c6:d3:bc:e0:bc:f3:b2:ce:5f:
a2:6e:aa:72:f9:5e:2f:55:b8:1c:1a:f0:63:4d:80:60:4e:5e:
29:83:c3:4b:6e:a4:82:f5:75:3c:7f:1f:61:3c:4e:c3:cf:23:
fb:43:ad:23:14:95:f2:bb:3b:d9:33:0d:3c:12:b9:54:2f:18:
a3:13:28:d9:56:84:1c:db:cb:c7:8b:9d:93:a3:fd:ce:3e:bc:
1e:34:68:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:22 2025 by rpki-client