Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: Hub4O1Y94Xgk2PyLSjMf16x7u/ziSoluTQHxkOZ865g=
Subject key identifier: 86:A9:A5:5E:9E:1D:DF:83:66:F4:63:0A:D1:3B:58:3E:98:62:42:66
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 0198D5BBD86DEEC392A04CCA1B58C8CF63A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: 0WeVqF5AUiwMr/Ef2PdFopJQKYsLfCanWZlxTn9P1b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d8:6d:ee:c3:92:a0:4c:ca:1b:58:c8:cf:63:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=86a9a55e9e1ddf8366f4630ad13b583e98624266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:54:89:62:98:c4:26:b7:f9:62:ab:7d:d6:
cc:91:ba:00:76:7c:1e:1a:e4:5e:4c:2c:92:76:52:
49:7a:60:e0:2f:db:c2:ca:9b:f6:24:3d:78:e3:c3:
70:92:54:3e:d9:23:e2:63:9f:ff:1c:d9:5b:6c:4d:
cc:c5:f6:f8:f1:de:5a:be:96:f8:fc:4c:60:e0:41:
67:71:ab:84:5e:ca:2c:9a:98:b5:a4:0c:28:ef:35:
f4:bf:15:db:e0:16:d1:c0:66:12:56:d9:9a:4a:4e:
01:99:8d:b7:54:3a:0e:2a:de:93:96:c7:c5:d0:85:
99:ff:11:02:70:34:c7:f0:e9:b8:fc:9b:a8:b5:52:
a3:2d:4d:1a:b1:9a:1d:e5:d1:82:6f:db:67:de:4c:
36:53:c2:a2:ee:2f:74:a3:99:31:a2:ad:c8:4d:b2:
5c:a0:e4:b1:bb:d4:cf:b6:38:55:42:1e:a5:70:1c:
78:74:dd:b4:73:a9:88:f8:d5:bf:df:b2:24:35:6e:
c7:10:34:45:3b:63:fc:7b:09:e0:2e:05:ea:48:b9:
d7:8a:95:2f:84:8a:6c:07:17:61:4c:c4:1b:f6:cb:
11:33:27:a0:82:b8:26:a8:57:7c:d1:8a:74:4d:b1:
a5:a2:55:e2:0b:e8:5f:cb:6d:d2:a3:23:6a:6a:98:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:A5:5E:9E:1D:DF:83:66:F4:63:0A:D1:3B:58:3E:98:62:42:66
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:77:52:37:62:13:91:31:86:45:35:94:88:58:c3:c5:c3:79:
61:65:78:95:4b:08:c6:0b:99:70:bb:26:f3:c2:a6:be:6b:48:
13:6b:dd:84:d8:f0:76:e8:d8:f4:2f:eb:53:81:55:f9:44:ff:
27:be:11:62:4c:da:15:b4:00:fe:b8:1b:29:42:c3:93:10:ea:
fe:bb:ce:45:1f:1c:53:0c:a6:f9:08:6c:51:1b:00:c6:dc:f8:
cf:86:cb:c3:ed:06:3b:2e:43:7f:36:d8:36:26:61:dc:29:c9:
05:96:c9:b6:f5:c8:97:e7:db:27:16:c8:76:36:73:3e:8c:45:
d1:b8:48:27:1e:de:40:d1:80:59:ed:8c:1f:a8:d9:91:c7:c7:
e3:c9:7c:51:be:86:c1:df:d3:19:e5:99:57:bf:c3:14:18:2a:
4a:0f:36:b4:a0:ce:a0:b9:8e:e3:75:4d:51:2c:ad:f6:69:e1:
c5:73:a1:13:de:61:17:f7:a7:4e:d1:39:70:84:18:bf:ba:4d:
51:7f:df:47:c8:97:61:04:eb:8a:3b:f3:ec:91:bb:1a:89:14:
b5:07:e0:2e:4e:f3:37:73:fd:ea:c5:bb:2a:a3:6a:ea:62:01:
00:7f:c3:c9:ba:7b:f9:09:0a:8c:41:49:0c:8b:49:a5:0b:46:
d4:10:85:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:05 2025 by rpki-client