Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: 05/P12I45ujtz7CsDjvLGejmzYEN2CL2DJJWtPRfsBg=
Subject key identifier: A1:6E:D7:87:18:D4:CE:EA:D6:91:37:D2:0A:E4:51:A8:01:6D:92:16
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 0198D660EF0DBF7735343D35E07BAC16362F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: 0190
Signing time: Sat 23 Aug 2025 10:02:13 +0000
Manifest this update: Sat 23 Aug 2025 10:02:13 +0000
Manifest next update: Sun 24 Aug 2025 10:02:13 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: 2iB47ziRgATsq9XgCPQFgsbca1zdKDa9qVKsKhXLYmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ef:0d:bf:77:35:34:3d:35:e0:7b:ac:16:36:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Aug 23 10:02:13 2025 GMT
Not After : Aug 24 10:02:13 2025 GMT
Subject: CN=a16ed78718d4ceead69137d20ae451a8016d9216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:d3:92:59:d7:fc:f8:ec:89:ed:14:48:92:
8a:0d:a8:db:d4:c9:36:f9:b8:0e:c6:27:bf:56:b0:
41:9e:61:23:db:23:97:b2:54:c6:19:29:05:8e:09:
98:7b:49:bd:92:0c:6a:21:20:2e:5b:ce:c1:a6:fb:
a7:fa:a1:bf:7c:a1:21:83:49:3a:7f:06:62:a8:7e:
bd:b4:c5:ca:d8:84:fc:83:9b:5d:c8:95:b8:f6:84:
f7:96:37:ab:52:5d:75:25:9d:af:92:62:7a:c1:18:
4d:b9:a9:1c:51:2a:e4:5f:9e:10:60:6c:f8:9d:1a:
05:f0:59:e9:f0:6a:75:6a:f7:56:56:e5:43:c2:80:
85:9e:da:e4:82:ee:37:50:6a:ca:cc:db:2e:dd:3e:
78:5b:43:69:37:0b:7d:c0:42:53:ff:c5:09:c9:83:
ad:a7:aa:de:83:1b:43:8e:54:58:07:21:49:b1:eb:
7e:30:a9:e5:1d:9f:f8:a5:a5:96:7c:9a:38:bc:ad:
66:55:1f:b0:5f:3f:a8:80:85:98:a6:b7:c9:cc:c3:
6a:c0:c6:51:8f:a0:54:75:ce:1b:91:45:b8:ea:05:
48:fa:8b:e0:90:3c:e5:8f:f4:12:09:5c:ea:21:26:
f8:37:ff:e2:51:c1:9f:df:d9:e4:18:6d:b5:10:05:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:D7:87:18:D4:CE:EA:D6:91:37:D2:0A:E4:51:A8:01:6D:92:16
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:99:e4:7a:41:dc:b8:c6:69:03:1d:4b:70:5e:80:d6:e6:90:
b2:cb:84:57:e5:cc:67:12:57:6c:af:af:db:cc:e1:0a:6e:50:
94:b7:9d:5c:31:9c:d0:67:99:94:45:99:92:e5:37:50:fa:2e:
6a:9b:27:00:46:ca:6c:93:3c:cc:89:7e:93:e1:14:74:bb:79:
f3:8a:37:7c:1e:c7:36:81:f8:eb:da:5f:2a:63:2d:11:2b:96:
4a:d6:c5:db:0a:84:55:66:eb:53:3f:5e:6e:d4:e0:12:71:44:
55:7c:18:df:34:0f:d9:fc:9b:5f:f1:d2:95:c5:5d:eb:59:cb:
61:19:20:77:57:39:84:5f:09:6a:9c:4f:ea:a7:3b:91:18:af:
bc:e1:00:7e:8d:57:e1:ed:20:fd:e3:00:22:83:4a:da:25:72:
63:3b:51:00:01:8e:e1:08:91:72:e1:b4:87:c2:bc:52:81:f3:
91:bc:b8:11:bd:f7:37:b6:53:5d:28:56:7a:20:70:8b:c4:1b:
8a:e2:b7:71:6c:99:64:80:ca:f7:eb:8e:af:9a:a9:0d:7b:a0:
d6:d8:bc:04:21:4d:fb:84:a3:d6:c2:a4:ae:d1:5f:b8:b6:4c:
62:5f:c7:cc:bc:80:93:5a:c9:36:7c:b0:1d:d2:54:e4:92:6a:
fd:b4:c0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:07 2025 by rpki-client