Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: eAaRWQ8EmPiKrMj8uSAn9FKzMl4r4s2tQwQKeyw3fWs=
Subject key identifier: B3:D6:C0:2F:B4:24:CC:2C:1A:70:60:E3:2D:8C:F0:83:4F:38:31:EA
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 0198D5BBA692793CD9745E911C31C1DF9098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 014C
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=)
2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: fBkPvZdcicqUOmDh+yChboZNgzko/CjjGH9b6LaqjlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a6:92:79:3c:d9:74:5e:91:1c:31:c1:df:90:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=b3d6c02fb424cc2c1a7060e32d8cf0834f3831ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:82:ef:66:22:9d:60:03:0e:74:ff:b1:8b:7f:
5c:71:e3:ed:32:6b:71:f6:6e:6f:1c:80:c5:0e:bd:
f0:60:36:22:a6:7e:18:5a:d2:65:2b:ca:42:0f:c7:
ce:73:d5:f4:a8:fb:40:b0:92:6d:3d:f2:46:72:49:
79:91:9f:7f:55:5d:1d:41:b1:c0:f6:2c:f0:02:ba:
33:56:6f:19:f3:98:23:e0:17:e1:7c:8d:a0:b1:56:
24:37:40:df:0f:89:be:79:e7:c5:5f:09:b1:aa:71:
9d:11:5a:94:f4:66:23:d6:6f:0b:df:a4:d8:27:14:
8b:b2:09:6a:8a:51:1a:f2:31:d8:02:e9:a7:55:1a:
65:9a:48:41:86:34:62:82:8c:c8:d8:7f:6e:a8:8a:
ee:22:c0:8e:44:66:08:1b:a1:88:52:b8:38:39:1c:
6d:db:a7:dd:c3:4f:e3:dc:cc:b0:8b:76:f5:bf:2d:
80:80:79:b2:0e:02:d4:73:f8:10:7e:71:0e:c3:c7:
1a:91:60:28:28:b2:13:65:2e:4c:a3:a2:60:08:01:
fa:82:b2:00:e7:8b:8b:67:89:a2:62:70:a0:ae:d7:
a0:c1:cd:a8:3f:c2:73:b1:5f:ee:c3:36:55:79:9c:
43:e1:35:c1:b6:7f:e5:0b:bd:39:fb:87:72:69:ce:
c0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:C0:2F:B4:24:CC:2C:1A:70:60:E3:2D:8C:F0:83:4F:38:31:EA
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7c:81:59:b6:99:f8:fa:95:a4:02:b5:63:09:97:95:39:c1:
3d:6b:e2:87:3e:22:02:97:70:ac:a7:09:23:80:cb:95:a6:21:
e7:22:38:dd:2c:e2:a1:09:01:74:f8:64:8e:a6:23:c4:c4:3d:
c0:37:f6:97:90:b4:d2:7d:81:dc:90:41:25:13:9d:8d:ae:ea:
27:1a:fa:2e:96:09:a1:94:a9:6f:54:2e:67:8d:fa:55:87:c1:
08:6f:94:aa:35:cd:11:ad:86:86:bf:a5:51:45:f2:5a:c0:08:
9d:44:41:4f:13:79:d5:e9:95:d4:18:97:09:60:79:d2:3a:4c:
92:d7:79:82:16:a8:c3:85:e1:bf:79:f2:ce:a0:84:2d:53:5c:
70:eb:4d:b7:18:1f:d5:ba:27:72:f8:e4:1f:46:d0:9b:17:e0:
51:63:76:88:2e:49:3e:06:2b:43:fa:34:84:91:57:78:3c:9e:
83:c2:b2:8a:12:b7:bc:3a:1b:e2:ab:a3:69:86:ed:0a:7d:fb:
3a:e2:c5:a7:17:fa:d9:31:4c:f1:5e:6f:67:29:77:02:94:4c:
17:ef:c3:57:d9:0b:f5:29:09:6a:f9:5c:a5:8c:2e:8e:c3:ee:
47:d6:71:94:09:7f:45:c9:14:d2:9d:e6:e6:0e:38:4b:52:5a:
49:18:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:50 2025 by rpki-client