Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json)
Hash identifier: eleVe34m/1WZjNxurM75chvG00jy2PdTaXT0afSjFQY=
Subject key identifier: 01:11:64:F6:8C:4E:0E:0E:0B:4C:E1:FF:8F:2F:BE:27:FC:CD:27:5A
Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Certificate serial: 0198D47356E9A0B656E7FB04DECCCB732963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
Manifest number: 0CCA
Signing time: Sat 23 Aug 2025 01:03:05 +0000
Manifest this update: Sat 23 Aug 2025 01:03:05 +0000
Manifest next update: Sun 24 Aug 2025 01:03:05 +0000
Files and hashes: 1: jtxnMC6eCVYwIh8IyueFT2QEZ64.roa (hash: 9ndfbLnfP9lol8NT3K6+lPqG6lGo+1E6jKyJb1FexVw=)
2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: 9oYVeVXP2W+Rmo4amHeqOQEjwyxLOw1s3PQKd+sMcTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:56:e9:a0:b6:56:e7:fb:04:de:cc:cb:73:29:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Validity
Not Before: Aug 23 01:03:05 2025 GMT
Not After : Aug 24 01:03:05 2025 GMT
Subject: CN=011164f68c4e0e0e0b4ce1ff8f2fbe27fccd275a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:31:2b:4a:a0:7d:67:c2:ac:50:49:8f:c3:
77:30:f4:90:2f:bb:4b:de:02:f3:16:62:a4:3e:78:
55:6f:82:ac:36:7d:91:f9:a7:07:b6:10:2f:78:db:
ff:da:f0:82:4d:6d:53:30:8d:f5:a4:20:9d:08:2c:
63:5f:b4:56:06:0c:53:86:8d:a2:2d:9a:62:9b:32:
87:77:71:63:3a:05:fc:40:92:28:2e:2a:b2:44:c2:
70:b8:f1:c7:82:d0:5f:bf:e6:d2:5c:95:1e:6e:5f:
2a:e9:d2:51:a5:26:4b:39:71:16:a1:60:46:10:05:
2c:38:ba:85:20:d1:28:23:e6:66:40:48:c2:d9:0a:
6f:af:70:22:87:d0:2d:af:96:ec:2e:b3:13:d9:17:
f2:ce:bb:76:a4:47:af:8f:c8:02:c6:e9:cf:83:f3:
4e:50:79:6e:7c:61:48:1a:24:22:fd:4d:cc:26:a5:
d7:37:54:00:94:5e:3d:ef:cf:fd:87:b9:7e:d2:36:
e5:c9:f8:f1:f6:93:88:df:24:2b:79:9a:a5:bc:6c:
f5:7e:cd:c0:d6:61:59:42:5c:df:56:38:bd:25:50:
0b:f6:84:5f:00:13:55:24:e6:d3:18:9e:9b:6b:3f:
2f:53:de:60:21:b0:d3:c6:29:dc:5b:4b:f6:33:33:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:11:64:F6:8C:4E:0E:0E:0B:4C:E1:FF:8F:2F:BE:27:FC:CD:27:5A
X509v3 Authority Key Identifier:
keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:38:f6:61:89:54:00:50:42:df:5c:32:96:47:cd:b6:0d:1e:
e3:fa:39:73:d0:1a:49:30:cf:5b:8d:52:60:f6:7e:99:f4:8e:
b8:f2:9b:9d:d6:59:44:32:92:3f:c1:34:e7:fc:45:0f:ed:f3:
90:99:83:2b:f0:b2:b3:67:36:90:1e:6d:2e:25:7a:65:85:ac:
70:eb:3d:65:ae:6b:7c:65:9a:0f:ff:2e:7a:ff:03:5e:7e:7a:
dc:70:64:79:63:84:a9:2a:68:de:78:53:11:cd:51:c1:6c:4b:
b3:06:8f:19:d4:c2:34:88:93:49:65:0d:7b:d3:9f:52:7f:a7:
ba:95:b3:3b:7c:e1:68:29:48:56:3c:a7:ff:c2:7a:c1:80:8e:
0d:ad:58:b2:3a:88:74:9f:fd:9d:66:59:28:48:bd:ee:6d:06:
84:4e:9f:25:2b:03:59:cd:23:85:ad:1b:6b:91:19:ad:a0:20:
c3:01:ea:a9:9a:42:2f:0f:77:f1:14:13:f0:09:a5:d0:66:79:
ef:c1:1f:fe:6f:38:55:82:86:ec:bf:eb:0f:d5:45:6e:46:78:
25:63:24:11:a3:73:83:c6:0a:00:a3:ae:3a:cd:c2:19:a7:5d:
b3:20:25:f5:fc:6d:85:a8:bf:41:09:16:1f:e6:05:37:7b:2a:
01:46:68:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:12 2025 by rpki-client