Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
File: fWReWE8e-aiB8fu8TSejQj3j3_E.mft (raw, json)
Hash identifier: HdkHINS+3NiG+8lHwN2uK8QG+HmGBTiUN4t9Xdta9xM=
Subject key identifier: 24:B8:A7:FB:60:15:D5:BB:22:F2:69:A9:DD:FD:7D:01:78:D5:6A:95
Authority key identifier: 7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
Certificate issuer: /CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Certificate serial: 0198D516403BE4AC9C947A87E81C332287A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:01:01 +0000
Manifest this update: Sat 23 Aug 2025 04:01:01 +0000
Manifest next update: Sun 24 Aug 2025 04:01:01 +0000
Files and hashes: 1: QHrCJn-3TWWMCJDQELy3q8dJt_4.roa (hash: DTg0RQCOqWT4OxprKyTz2OGsk5mW9uMRzOSYKDRAWp0=)
2: dvNIb3T0U0mU22w-yMo6gNRu98k.roa (hash: KB6r0yPVxOXp/PVpdxcqc3971j0F/zVlsLjdreh6UUk=)
3: fWReWE8e-aiB8fu8TSejQj3j3_E.crl (hash: uUyHx/s3WBpRfiDCPtciyBlxDUi+KUao0aQmD/bHRH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:40:3b:e4:ac:9c:94:7a:87:e8:1c:33:22:87:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d645e584f1ef9a881f1fbbc4d27a3423de3dff1
Validity
Not Before: Aug 23 04:01:01 2025 GMT
Not After : Aug 24 04:01:01 2025 GMT
Subject: CN=24b8a7fb6015d5bb22f269a9ddfd7d0178d56a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:e6:8c:f8:f4:34:d6:39:80:7c:1b:15:c6:
fb:cd:f5:aa:9e:7c:9b:45:95:7c:c5:2d:1d:b4:29:
2c:21:f5:f4:2b:47:81:0e:81:8b:0a:2c:32:29:a9:
a8:60:af:a1:51:b5:0d:e5:5b:1a:58:2c:89:b1:2e:
59:65:d6:36:ad:84:76:95:6f:34:34:ac:bb:9e:58:
de:44:47:95:ef:15:46:b6:e2:e9:bc:4d:0e:9f:10:
9a:05:f4:4a:93:2c:bb:59:f9:a4:b4:0e:23:4b:8e:
8b:ef:56:21:c6:81:e6:44:0a:7c:27:10:9a:c9:89:
39:76:60:7c:e9:ee:65:c6:0e:c8:a4:54:a5:5e:50:
56:90:17:23:79:d3:a3:0e:b4:61:13:60:e7:5f:05:
0d:ad:46:e4:f3:e9:66:bb:4b:8d:fa:2b:4d:6a:99:
c3:5a:68:c0:96:94:60:f6:33:7a:fe:6a:95:f5:b3:
96:c8:1b:91:0c:db:fe:fd:0d:eb:95:75:72:fa:5d:
95:2b:de:cb:8c:bd:24:dc:11:1f:1f:02:0b:e7:be:
91:13:20:4f:a5:bb:51:33:63:6e:2d:56:ee:58:5e:
e0:f5:87:49:bd:c4:28:5b:c5:c6:46:70:bd:38:0d:
0c:ea:f7:f5:6a:5c:66:2a:5a:51:ff:ab:82:57:2f:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B8:A7:FB:60:15:D5:BB:22:F2:69:A9:DD:FD:7D:01:78:D5:6A:95
X509v3 Authority Key Identifier:
keyid:7D:64:5E:58:4F:1E:F9:A8:81:F1:FB:BC:4D:27:A3:42:3D:E3:DF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWReWE8e-aiB8fu8TSejQj3j3_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0d1c33-9117-4a11-bbfe-db81a18e242e/1/fWReWE8e-aiB8fu8TSejQj3j3_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:9e:17:56:98:52:b9:8b:a0:9c:9e:c9:bb:35:cb:3a:42:6e:
ca:03:e4:41:9d:38:42:5a:4b:54:7b:91:22:04:3f:d3:25:c6:
41:1f:91:b9:f2:44:35:2e:bd:4e:6b:41:58:09:d0:93:b5:7b:
8b:1b:63:60:81:64:31:29:e5:3f:8c:46:29:7f:a0:b9:89:a6:
7b:89:53:e0:65:28:08:df:08:4d:23:96:dc:34:a0:69:d7:65:
ee:94:bf:72:36:37:58:d1:ca:ee:63:e1:fc:67:32:f8:e8:ed:
e2:7d:ea:ce:a6:de:89:87:a9:7d:5d:21:c5:b0:7d:55:ee:cd:
af:e2:40:3f:65:4d:21:a9:28:fa:28:bb:b3:7d:81:29:27:2a:
76:af:9e:41:f4:31:bc:c8:a6:29:58:e1:43:28:af:34:cd:1a:
a7:09:ae:7d:75:86:4d:55:23:bd:1a:b4:2c:98:c5:ba:8c:76:
b5:9e:81:4e:99:c5:e1:48:06:21:22:41:90:f4:3c:e9:19:d0:
d6:90:37:1e:db:99:2c:f8:a6:ed:3d:10:cf:9f:ba:9a:63:1e:
14:9b:59:1e:1c:08:77:13:fa:14:42:90:2d:bc:53:a9:45:33:
24:43:fb:cb:78:ff:d4:32:53:b4:3a:e1:2c:f6:1d:e4:9d:cf:
27:ea:9d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:12 2025 by rpki-client