
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
File: sIWATbFT63JMWFV8eTWcRAggVVA.mft (raw, json)
Hash identifier: qJA0paMLIoaOl6g7msis+4Sk9Z72/R/ttcpZ2Xljt/Q=
Subject key identifier: 60:CB:26:B5:37:ED:2A:54:00:E9:EC:F3:B1:65:4E:86:C1:2B:16:DE
Authority key identifier: B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
Certificate issuer: /CN=b085804db153eb724c58557c79359c4408205550
Certificate serial: 0198D5835F0FB16CB1F012D21404786A6447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
Manifest number: 0525
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: 18TNS4gBaAj1nBKZLGQyvBGXDAA.roa (hash: yG6kNp39rMwW08RfUJ3Cw47Eb4R/ZRHq/FbYcN4tnj0=)
2: sIWATbFT63JMWFV8eTWcRAggVVA.crl (hash: knxVOJeOHCn7UnMN5EN9Ou45X75K/n9I30MNfQ5CO0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5f:0f:b1:6c:b1:f0:12:d2:14:04:78:6a:64:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b085804db153eb724c58557c79359c4408205550
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=60cb26b537ed2a5400e9ecf3b1654e86c12b16de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:b2:2a:96:fb:01:60:48:b9:0e:bb:13:c4:
78:7e:a2:69:bd:45:bc:4c:ae:71:45:87:de:c2:c5:
ac:98:49:05:e6:04:4f:97:fb:9b:b2:7d:15:13:9f:
28:2d:a7:da:a8:f2:b0:84:b9:86:43:16:aa:a8:08:
1f:bb:97:4e:2d:9d:a0:5d:00:d0:ab:87:53:1f:93:
29:c6:07:09:03:fd:d2:09:21:a6:cd:ef:1b:7e:a9:
d4:51:c9:7c:cb:c6:26:51:f2:ae:9e:ef:97:7f:e3:
13:e1:69:22:a5:ed:e7:6c:6a:41:92:98:04:e4:42:
6f:0a:c4:f6:4f:b0:49:9a:96:7b:66:35:47:38:a6:
7e:6e:d4:3d:c6:5a:f0:d7:68:ae:c1:20:8f:bd:60:
aa:73:a7:1a:83:99:e4:52:da:00:6c:05:5a:1b:f6:
da:d1:5d:35:98:d0:b7:31:92:b9:19:00:bb:ff:da:
18:0d:a0:a8:c0:17:db:47:d0:b5:72:d0:40:8a:8e:
3c:3b:6d:81:53:be:e7:f3:a1:38:30:d2:aa:0d:80:
b1:dc:ce:5d:95:24:55:c3:b0:cf:54:e9:b5:c4:42:
f2:62:c3:52:17:91:91:db:b4:af:4b:a4:34:7b:96:
9e:33:77:af:ab:ba:39:32:e5:d4:62:46:f9:dc:ea:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CB:26:B5:37:ED:2A:54:00:E9:EC:F3:B1:65:4E:86:C1:2B:16:DE
X509v3 Authority Key Identifier:
keyid:B0:85:80:4D:B1:53:EB:72:4C:58:55:7C:79:35:9C:44:08:20:55:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIWATbFT63JMWFV8eTWcRAggVVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/29aa96-123f-40ea-95d5-d25b7ca3db89/1/sIWATbFT63JMWFV8eTWcRAggVVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1e:03:54:2e:26:f7:98:5e:98:40:9c:ed:4c:3d:75:d5:e1:
44:d0:d5:86:e6:9e:12:07:18:c4:60:5e:38:3e:32:5e:c2:f0:
1e:84:4f:61:1b:24:fb:8d:a1:26:02:08:67:09:f5:39:5f:0a:
d6:60:45:fc:73:dd:49:44:bd:3d:9d:e4:23:75:93:ab:f4:98:
44:09:44:5a:55:d9:dd:fe:c6:e4:ac:23:e4:3a:b9:e8:b0:c2:
94:70:16:83:d0:63:3b:31:29:40:1b:da:8e:cb:ce:1a:f2:d1:
f3:0d:43:4c:91:76:d5:85:83:c3:13:03:2a:1c:ac:ef:e7:34:
d7:2c:43:d1:98:10:fe:6e:32:a8:05:03:8b:01:e5:60:a7:22:
57:f4:5c:8b:4f:1e:ba:31:bd:aa:21:8e:53:b7:a8:da:e2:a8:
14:bc:69:8d:91:17:0a:71:5f:9f:68:ef:5f:89:24:75:17:22:
63:3e:1e:c5:cd:65:25:6c:f6:3f:2f:cb:19:24:47:57:02:0c:
2e:40:d3:cf:fd:b6:f9:51:bf:6e:23:29:1d:d7:3a:c7:d1:16:
f8:e8:01:69:e2:9d:f8:10:29:a8:e6:9b:06:09:59:59:f5:ea:
87:1d:49:f0:21:f2:d2:37:19:ac:47:dc:80:3c:28:ba:48:da:
34:05:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:50 2025 by rpki-client