Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File: RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier: 0Uhkg7PNECjd1x743pj3WWQos4SWylx+WXfLjJqPEZI=
Subject key identifier: C7:E6:22:43:95:18:E5:40:B0:2F:EA:A5:BC:0E:37:53:3F:E4:BA:A9
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial: 0198D4A837936B265FEA59E37C6081F6C572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number: 0291
Signing time: Sat 23 Aug 2025 02:00:50 +0000
Manifest this update: Sat 23 Aug 2025 02:00:50 +0000
Manifest next update: Sun 24 Aug 2025 02:00:50 +0000
Files and hashes: 1: NP3I33PqiM24AyrvrXcXkrcATEY.roa (hash: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=)
2: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: 7jGQS79C3i0w794sE+9Dq0o2vKn45PSF3ZvCTuSaVyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:37:93:6b:26:5f:ea:59:e3:7c:60:81:f6:c5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Validity
Not Before: Aug 23 02:00:50 2025 GMT
Not After : Aug 24 02:00:50 2025 GMT
Subject: CN=c7e622439518e540b02feaa5bc0e37533fe4baa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a0:dd:5e:0e:5f:2c:2a:7f:c0:ea:d4:fb:45:
b2:6e:7c:4f:47:0e:02:31:c4:da:c1:0a:5f:06:a0:
00:ae:fc:59:09:5c:b8:e8:38:10:c5:a6:13:13:b2:
3c:00:63:4b:47:21:36:c6:db:95:3f:30:63:8a:22:
82:8b:9f:2d:68:e6:48:c7:64:9f:75:f3:e0:33:90:
16:b8:71:37:1d:3c:b0:75:c1:8e:14:f0:27:e8:0a:
64:5a:1e:b6:4a:af:e7:ea:95:32:77:94:b0:bc:4f:
3f:4b:16:40:2a:5d:c1:0f:58:57:96:2d:c2:7c:e1:
c7:5c:9c:8a:8d:32:ba:f5:90:e4:77:83:f1:d4:43:
28:70:dc:62:c8:53:9b:77:b9:59:8c:1c:c6:36:65:
37:17:29:36:69:32:68:00:0b:38:6e:0a:6b:22:41:
9b:80:6f:2a:59:a2:e1:d1:33:47:bc:07:2b:fc:df:
f7:4f:85:8c:1e:46:de:a4:68:e7:45:cd:78:e3:f1:
34:25:80:ab:1b:ba:c5:b1:3f:5e:33:7a:cf:bf:6b:
04:63:06:55:bc:20:d3:01:f2:be:4f:60:d7:e0:62:
31:75:db:1a:b6:44:a9:73:01:62:ad:c0:47:b1:4c:
06:3f:13:5c:f2:b5:ba:a6:0a:e5:e0:fe:a6:bc:d7:
2d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:22:43:95:18:E5:40:B0:2F:EA:A5:BC:0E:37:53:3F:E4:BA:A9
X509v3 Authority Key Identifier:
keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fd:74:88:d6:98:a7:2f:80:eb:69:53:96:f1:c8:66:f7:6d:
30:c5:f2:2b:1e:43:19:ac:a1:db:1b:c1:da:4a:40:25:83:5c:
ac:69:41:9f:c7:a2:8c:b4:76:cc:f8:38:1c:5b:eb:a7:ea:4e:
d8:2e:34:db:01:3c:64:ef:39:88:19:f3:2a:4c:06:2a:29:2d:
0d:0b:56:0c:1c:81:18:82:ba:5c:73:5f:4e:bd:70:c5:a3:c4:
e9:0d:86:c2:25:60:97:19:ab:35:fe:88:91:4f:3d:fa:ae:20:
d0:bc:24:5d:2c:fe:78:ee:dc:0d:1a:3f:b6:3f:d8:43:03:3a:
89:91:79:e0:80:7e:30:ee:7d:87:01:b3:37:9c:99:05:37:46:
56:95:ca:3b:ed:86:f7:0f:08:6f:98:f3:15:60:62:e3:b6:3a:
3e:63:98:22:c8:71:f9:1f:22:eb:d5:c6:5f:38:68:5b:30:9a:
62:b3:8e:75:b7:ed:d0:1a:9d:89:26:86:8c:f9:73:bd:76:b8:
5c:b2:62:1e:59:1f:0b:d7:6e:95:2b:4a:61:e4:59:8b:ef:03:
92:92:9f:fa:58:0f:72:55:d4:ae:01:68:4b:b9:c5:9d:82:80:
c9:ad:c6:27:b1:24:2f:4e:2d:84:40:18:9d:0b:01:e8:ad:1e:
82:fc:c7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:43 2025 by rpki-client