Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json)
Hash identifier: XdsnPJuMt9MXnykFj3N83IeFUWcH/w073gfjGMlvVcU=
Subject key identifier: B3:90:DB:2E:F7:45:42:00:E0:9A:2A:AE:AE:26:72:DA:3D:14:B0:A2
Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Certificate serial: 0199FBB371F71F7335A72CE10E9A9896A263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
Manifest number: 0D63
Signing time: Sun 19 Oct 2025 09:01:05 +0000
Manifest this update: Sun 19 Oct 2025 09:01:05 +0000
Manifest next update: Mon 20 Oct 2025 09:01:05 +0000
Files and hashes: 1: jtxnMC6eCVYwIh8IyueFT2QEZ64.roa (hash: 9ndfbLnfP9lol8NT3K6+lPqG6lGo+1E6jKyJb1FexVw=)
2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: jg+EYaIyU0ikOkn3mAS/KlOQhAi/y1WKrUuAAuuewHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:71:f7:1f:73:35:a7:2c:e1:0e:9a:98:96:a2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Validity
Not Before: Oct 19 09:01:05 2025 GMT
Not After : Oct 20 09:01:05 2025 GMT
Subject: CN=b390db2ef7454200e09a2aaeae2672da3d14b0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:14:a2:c3:15:b5:a6:95:c5:3a:e0:e1:ab:4f:
39:49:02:a1:26:8e:48:a4:95:7b:45:73:e9:76:39:
c0:78:a1:d0:88:ec:3f:cb:4a:f5:67:40:3c:b3:b3:
cd:20:38:ad:68:0e:8b:e7:69:ea:6d:f1:18:e1:84:
c5:74:96:64:6a:14:4c:1d:5e:41:81:f0:36:c5:54:
0e:69:4d:ec:23:a3:f4:95:60:fc:2a:88:2b:fe:be:
b8:b6:5d:6a:85:5c:82:fe:74:32:18:15:56:49:b8:
ce:7f:ce:06:f2:35:2a:b5:f5:f9:c5:41:00:d5:c6:
21:c3:ca:13:0f:4a:d6:19:06:da:ab:4e:4c:04:3d:
6a:96:c9:67:37:60:d7:dd:ce:86:10:97:5c:3b:d7:
53:4d:28:57:a7:8d:93:04:52:46:3a:99:7a:09:18:
66:e2:38:f8:7d:40:93:13:53:9e:54:f9:36:79:a8:
0f:17:8f:77:19:6e:53:22:ee:ae:e8:75:93:45:00:
05:dc:71:c3:0c:4f:5a:7e:ce:f8:e6:b2:06:ac:99:
da:2b:5f:38:72:38:aa:bb:2a:f1:c1:ee:73:da:6d:
7c:10:4d:9f:11:82:02:a0:65:3f:9a:d8:3d:be:37:
dd:1b:8a:b2:1c:be:fe:6d:26:5d:5d:9f:c9:5a:ba:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:DB:2E:F7:45:42:00:E0:9A:2A:AE:AE:26:72:DA:3D:14:B0:A2
X509v3 Authority Key Identifier:
keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b9:96:63:b1:65:b3:25:43:cc:ce:bf:32:fa:4d:c4:f8:7c:
3a:12:1c:f5:48:25:c0:74:84:25:f5:45:2e:04:ce:c0:27:8e:
0c:b9:fb:7b:93:5b:d7:ba:d6:e6:88:f6:04:0a:11:47:81:01:
23:d4:dd:34:a5:48:41:b0:7c:2c:8e:36:99:5c:b2:17:28:ca:
01:04:a7:6e:88:84:c9:4c:10:65:da:ed:0c:41:d2:c6:eb:c8:
7f:79:6c:b9:a4:0f:b4:b8:22:4b:16:df:ad:dc:44:f7:60:ec:
18:23:75:9b:5f:a9:c9:78:65:03:2e:7c:1c:8f:74:37:cb:7d:
08:30:99:7e:a5:8d:7b:1b:1e:3f:d2:92:b9:b4:05:e4:06:09:
4f:78:93:98:21:7c:fd:42:3b:4f:1a:72:c9:d1:25:4d:05:fd:
f5:f6:5b:52:a2:56:70:76:a3:8c:f0:4f:e3:f6:42:f5:21:0b:
5a:ba:5c:a8:23:ee:6f:06:39:81:b2:65:fe:23:1d:b0:41:4f:
b8:90:a9:0c:e4:f7:1d:e9:e0:be:4d:b7:e7:9f:61:31:9f:a3:
d6:fe:b5:13:54:db:21:16:0b:af:63:4b:94:44:68:26:a9:c8:
da:3e:17:c0:2e:94:4e:c5:e9:14:a2:a4:bd:3c:0f:40:17:a4:
af:ed:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:32 2025 by rpki-client