Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier: HGNmkYUYbAYONUZe4hFpQNMWFuiesQy3ExiMsUhWJnY=
Subject key identifier: BF:A7:ED:00:C9:76:F2:53:91:AF:7C:D2:E5:94:1B:74:9F:3A:85:06
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 0198D88511EA7644AFF9431985D41F1EB8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 20:00:56 +0000
Manifest this update: Sat 23 Aug 2025 20:00:56 +0000
Manifest next update: Sun 24 Aug 2025 20:00:56 +0000
Files and hashes: 1: UkowmR7j8dX0saZm2LcqRKWc1As.roa (hash: GBF5K+d4pg2yE1Y/OoUy9KgNyBcuaLjAQkgdpqJHVgo=)
2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: 3iQvgODqq/1hCVqz1rQ7Wz4NKF0zLRSmzA+ujw4hRSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:85:11:ea:76:44:af:f9:43:19:85:d4:1f:1e:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Aug 23 20:00:56 2025 GMT
Not After : Aug 24 20:00:56 2025 GMT
Subject: CN=bfa7ed00c976f25391af7cd2e5941b749f3a8506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:78:0f:50:f7:1b:15:e4:5f:7a:88:11:fa:
d0:30:bf:1b:ff:98:b5:51:87:e1:f3:5b:46:3b:6b:
59:c5:64:bb:e4:98:ff:10:c3:bd:2b:8e:f2:12:95:
f7:b9:f9:24:a6:e9:eb:89:5e:b8:c5:68:6a:ca:43:
f2:d5:4b:05:df:b1:50:d8:3d:55:71:04:89:e8:f4:
16:ac:9d:37:a5:df:d5:bb:0a:d5:4c:f5:f9:79:c2:
bf:69:b6:72:ec:9c:6f:f8:3b:98:3c:80:2b:9b:3e:
9a:23:df:e7:2a:5a:e4:73:05:2f:c0:c7:cb:84:f9:
6f:57:e5:94:61:97:d6:77:ad:fd:cf:25:4c:d1:8c:
39:21:88:16:88:be:3e:3d:06:9d:3a:03:b2:46:f2:
4c:f2:fe:f3:a8:49:0d:00:e2:60:a6:e4:fc:35:70:
f8:d5:ed:6b:88:a0:fb:fc:82:c6:fc:62:64:71:d8:
ce:e2:25:7d:ee:aa:f0:93:f6:44:39:9d:f4:ef:5b:
aa:72:13:8a:e7:5e:3a:37:8d:fa:3f:0d:49:37:04:
6c:b8:d8:ed:9d:ed:62:39:e1:ea:c6:a3:15:19:12:
a5:09:18:b0:6a:8a:17:93:df:7d:4b:4c:93:05:d8:
ef:6e:fb:e1:2a:c9:84:31:75:cf:24:b1:4c:27:51:
9c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A7:ED:00:C9:76:F2:53:91:AF:7C:D2:E5:94:1B:74:9F:3A:85:06
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c2:09:93:7c:53:b3:18:f3:2f:6b:c0:38:2f:18:12:cd:b2:
0c:68:94:b6:23:6d:fb:4b:1f:7f:36:86:de:8b:f3:91:a9:e5:
cd:d1:22:5a:0d:03:03:93:27:50:4d:d7:db:70:e2:a9:a6:1a:
df:41:71:83:0a:2b:56:35:f0:83:93:69:35:53:39:a8:89:ee:
df:49:0e:20:dc:f7:15:96:88:7b:f6:cf:e4:9f:a7:14:5d:5e:
25:6e:54:cf:bf:25:97:97:83:03:18:83:4d:de:dd:f1:29:84:
fd:fa:92:b4:50:c4:d4:0c:0d:61:36:76:2b:96:8f:c9:94:e2:
37:8a:9c:ad:a8:0b:a7:4a:04:b6:a5:48:90:a9:8a:61:ac:da:
9e:eb:43:ad:76:f7:74:76:0c:ee:46:27:a9:ba:34:3e:49:9a:
8b:62:ff:79:06:87:00:8b:11:59:ca:16:71:21:4f:6e:7b:7e:
45:87:00:11:22:05:33:0f:d2:64:b4:d8:59:5f:c4:34:7f:40:
f8:d0:b3:ee:1d:86:87:bd:f9:d6:3b:0e:58:55:1b:31:f2:a8:
25:ae:a3:3f:7e:7a:64:04:dc:0f:55:48:6e:4d:fc:16:c5:6e:
18:52:a4:b9:64:76:0f:cc:b3:21:8d:a7:c7:fc:ea:34:1f:f7:
af:dc:8c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:56 2025 by rpki-client