
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: VvDtDyxvRNI3sD60CQy/Z/bALISgCocxLJ7cTG8gHMc=
Subject key identifier: DD:AE:AE:9E:E3:B6:D9:E5:05:05:2B:D7:B6:90:A9:FF:C8:1D:EB:5F
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 0197B7EAA3C63802C1BC994CF1CCAA08B029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: B8
Signing time: Sat 28 Jun 2025 19:01:37 +0000
Manifest this update: Sat 28 Jun 2025 19:01:37 +0000
Manifest next update: Sun 29 Jun 2025 19:01:37 +0000
Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=)
2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: vtBWBTNxZ36qS86u6ROBDfRVNeMldEMhDPHib0Th7KI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a3:c6:38:02:c1:bc:99:4c:f1:cc:aa:08:b0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: Jun 28 19:01:37 2025 GMT
Not After : Jun 29 19:01:37 2025 GMT
Subject: CN=ddaeae9ee3b6d9e505052bd7b690a9ffc81deb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:80:a1:2b:a9:e1:da:3b:86:91:9e:c8:cd:9d:
81:49:f9:c7:b6:30:a4:71:35:fa:4d:df:69:11:35:
a7:94:9a:c8:b9:7b:70:f7:7b:40:1d:4d:99:24:f7:
ae:1a:79:b7:bb:4b:d5:a3:df:ce:ad:ef:e8:c5:57:
d0:ba:a9:f4:e0:81:0b:0d:22:53:50:6f:0d:7c:be:
b8:db:d9:cd:36:47:7a:98:81:70:d7:18:20:4a:78:
7d:18:25:6b:c1:b4:86:59:81:bb:99:af:9f:d2:d0:
c5:1a:fe:e0:4c:a3:0c:7a:e3:be:d3:f4:19:bf:cc:
66:78:03:1a:b7:42:31:50:3a:48:31:ba:9a:91:dd:
fc:80:b8:19:ee:ad:f6:73:aa:72:2d:49:e8:dd:b1:
e4:99:88:0b:4d:26:1a:3a:02:d4:2c:29:58:23:1c:
4b:64:64:c4:d9:7c:68:b3:e0:fa:81:45:d5:a7:9c:
4e:e4:ac:3b:cf:ec:74:86:bd:19:d5:2f:e3:6a:33:
f7:37:02:f8:46:03:79:0c:c3:be:4a:b1:c3:bc:41:
21:45:17:d7:32:4d:e9:7a:6c:ee:c8:99:36:6d:5c:
a0:d9:94:cf:2e:fd:36:2d:df:42:25:a2:c4:36:f9:
ba:94:f8:33:96:f6:d9:21:a2:70:f2:8f:87:37:18:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:AE:9E:E3:B6:D9:E5:05:05:2B:D7:B6:90:A9:FF:C8:1D:EB:5F
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:24:59:e5:d1:4b:ee:90:f2:c5:d6:c8:7e:75:c8:50:cf:c8:
cc:69:a8:6b:c1:71:b3:8a:d8:d0:f3:8d:6a:32:7a:98:d1:9e:
8c:92:d4:19:6e:87:14:4b:a9:fa:19:0c:ea:ed:80:7e:f7:ba:
6e:62:09:65:8d:8a:08:b0:51:ae:7b:29:58:ba:cd:bc:3b:74:
b6:d5:10:96:e8:a5:a1:03:e9:68:5b:c3:96:2c:af:3c:cc:52:
1d:c6:ce:e5:d1:84:f1:46:ad:e9:e1:55:b2:e9:2f:0d:74:65:
27:4d:13:cf:af:25:91:87:2e:65:ff:c4:b8:52:94:fd:23:71:
3c:ed:b5:0a:c8:be:f8:ec:dc:f1:6f:aa:93:bc:a5:9d:4b:d4:
5f:6f:b1:6c:ab:e7:bb:13:54:32:65:d7:f2:2d:8b:43:1d:a7:
7f:c3:bc:ba:0f:59:4e:9c:4d:50:6d:9f:d8:5b:60:dc:97:ac:
8a:b2:b4:de:23:ca:d9:fa:19:8a:83:36:1b:eb:79:07:5a:d1:
2c:ce:a1:1c:73:28:c1:c8:44:92:35:87:3d:bc:cc:b1:5a:78:
e0:87:d2:da:87:53:a7:d6:22:39:f7:03:37:bf:24:27:76:a6:
f1:4a:f4:1a:00:fd:61:cd:c6:de:ea:78:72:e9:2a:f2:59:74:
f2:90:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:33 2025 by rpki-client