Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: Gtjj+YaDxmC2wldIkwaih5HDqr0iGfhUWFII7MV/M3E=
Subject key identifier: E1:EA:88:1C:54:A8:0E:F2:C5:87:FE:6F:A7:90:34:28:2F:E6:9A:F1
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 0199FB45E683E52750BC16868B36633F9BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 07:01:26 +0000
Manifest this update: Sun 19 Oct 2025 07:01:26 +0000
Manifest next update: Mon 20 Oct 2025 07:01:26 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: oUBKxSE7Jv34jMI4MfSJw9FCDcKDvrGUc5FYqD6OAfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e6:83:e5:27:50:bc:16:86:8b:36:63:3f:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Oct 19 07:01:26 2025 GMT
Not After : Oct 20 07:01:26 2025 GMT
Subject: CN=e1ea881c54a80ef2c587fe6fa79034282fe69af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:13:05:ae:ae:32:26:9a:7f:45:2a:38:8e:
97:f0:43:17:78:8f:6c:b2:46:1c:45:de:fb:3d:e3:
c7:cf:37:f4:fa:1e:40:91:6a:3c:d8:e0:b4:4a:ae:
b3:c9:6d:cf:ba:88:23:26:3b:b7:8b:d9:c4:b5:77:
1f:13:d8:44:8c:de:a8:70:23:9b:4d:10:2f:48:09:
a3:fc:67:5e:0e:2b:79:b6:a6:04:a9:1b:64:49:3a:
48:02:4a:7b:da:71:90:af:f7:f8:97:1e:6c:74:e9:
5e:cf:f9:9f:f7:38:55:a2:f4:d4:27:3b:db:9b:0e:
80:83:af:ba:d6:5c:bd:12:88:c3:cf:a2:c9:da:c1:
7c:bb:0e:b6:65:03:04:a7:0f:64:c0:37:5e:6c:e9:
47:33:f8:be:1e:be:21:0e:ca:64:95:fa:f0:f7:07:
de:14:66:98:60:b7:52:bc:bd:0e:a5:03:f8:1d:5d:
a0:58:70:65:c8:11:42:ef:53:25:0d:f9:7c:2f:dc:
2f:68:80:82:11:ef:83:cf:22:da:10:ce:8d:e6:54:
ec:39:10:c4:5f:8f:85:9c:0a:8f:b9:e0:0b:a2:07:
d1:da:41:a4:c2:d5:8e:91:5f:32:4c:66:d3:90:f2:
44:30:90:59:b2:a6:c1:77:87:d7:cd:39:c0:26:e2:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EA:88:1C:54:A8:0E:F2:C5:87:FE:6F:A7:90:34:28:2F:E6:9A:F1
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:85:ed:a7:bf:26:56:50:3c:2f:ee:9b:92:88:80:ac:57:bb:
b6:f9:36:49:62:27:df:7e:5f:e3:cf:78:90:2f:54:2e:28:a1:
06:67:2e:ad:22:87:e1:6c:25:5c:e3:5e:44:4f:69:32:be:ea:
c5:27:9c:30:c8:d0:71:d4:68:33:c2:d9:72:96:1f:fa:67:4d:
e4:6e:1e:ae:6c:ab:f5:05:48:ba:e5:08:5a:aa:17:04:1e:3a:
8c:d2:4a:b9:1d:72:cd:46:99:f7:9a:27:67:8a:8b:b0:b6:3c:
b7:a9:85:84:c0:22:5c:03:28:cc:e2:0d:f2:3d:d5:fc:ea:2d:
19:dc:85:e6:d6:76:34:c6:5d:17:8e:30:1d:19:8d:d5:17:7a:
5e:f6:bf:41:7e:b6:40:3f:e7:56:50:2f:6b:0c:35:7c:9b:95:
56:d4:8a:fb:80:d2:55:c6:d3:a0:7d:08:11:c4:05:19:35:b6:
53:9d:ef:38:65:e4:10:a6:7c:77:c3:ea:58:4b:30:16:54:a3:
26:35:19:4d:93:3c:fd:a7:52:c1:99:25:6c:32:26:b8:c9:8b:
15:bb:8c:1f:75:6d:02:04:18:4e:38:d8:1c:a2:9d:90:c5:b4:
b4:c4:01:af:61:8e:2c:65:e3:ab:91:fe:4f:b8:0b:b3:61:12:
70:bd:2f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:52 2025 by rpki-client