Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
File: wSWw9XiOWBEj5eSfAB1S16f89a8.mft (raw, json)
Hash identifier: m0Rn040ivoHQp1HGgXXu8rYC7UhQd+7qipallaxS2Yo=
Subject key identifier: 37:98:B7:22:D8:46:AA:CF:25:7C:9D:1C:04:E0:B1:C4:CA:BC:A4:75
Authority key identifier: C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
Certificate issuer: /CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Certificate serial: 0199FAD801EF8E10495064051E45C9265443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
Manifest number: 013C
Signing time: Sun 19 Oct 2025 05:01:23 +0000
Manifest this update: Sun 19 Oct 2025 05:01:23 +0000
Manifest next update: Mon 20 Oct 2025 05:01:23 +0000
Files and hashes: 1: navuee4FJbu9Mu_giIFAY0BYzaM.roa (hash: 6gSGweu9FwNJJ/ezj94dZmef8nFklycxHKre4DDzNBE=)
2: wSWw9XiOWBEj5eSfAB1S16f89a8.crl (hash: brl5IlCRhDsvfaz3UButAeA0xGvGA2aVyw4LC3QMc/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:01:ef:8e:10:49:50:64:05:1e:45:c9:26:54:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Validity
Not Before: Oct 19 05:01:23 2025 GMT
Not After : Oct 20 05:01:23 2025 GMT
Subject: CN=3798b722d846aacf257c9d1c04e0b1c4cabca475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:38:e2:9b:b6:92:c2:56:44:52:72:08:e7:
0e:72:3e:80:5b:b4:b8:e3:ee:55:43:fa:e4:9f:c3:
ac:5e:5f:3a:d6:08:00:9a:c2:6a:c6:b2:db:4e:6a:
7a:a3:bd:60:19:bf:49:49:28:f5:59:d5:59:4d:90:
2e:70:8d:11:1a:36:5b:63:96:cd:3a:6c:57:93:ae:
e9:38:06:b2:21:0b:02:cc:97:fe:1d:bd:54:1c:b6:
12:2c:ed:22:31:a9:e4:c4:df:39:80:a1:15:38:df:
1c:e3:bd:0e:eb:94:98:37:b1:59:92:1c:9a:ab:a3:
15:1d:28:c9:87:f6:f5:e2:87:e1:5d:1d:b9:53:6c:
53:66:bf:c9:91:f9:a1:79:61:6a:02:18:8b:24:1a:
5d:c0:3b:d8:83:8c:00:cf:b9:b4:1b:af:61:a1:6c:
ad:b7:88:40:de:3e:42:06:47:ff:db:5e:73:72:73:
9d:16:d7:08:56:12:38:f5:2a:ba:32:3a:8e:dd:ab:
21:36:3c:e9:99:52:0c:ff:46:47:aa:81:6a:95:a8:
a2:75:5a:b1:7e:f7:a5:11:6e:fe:b5:da:67:4d:03:
79:bc:08:7b:9f:2f:37:20:30:00:08:19:1e:96:9e:
72:e2:45:b7:2c:e8:4f:35:b2:ff:b5:e5:1d:8e:03:
ac:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:98:B7:22:D8:46:AA:CF:25:7C:9D:1C:04:E0:B1:C4:CA:BC:A4:75
X509v3 Authority Key Identifier:
keyid:C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ab:2c:60:b4:3f:ee:35:30:3b:4f:91:23:2f:cc:aa:47:6d:
03:9a:d6:4e:97:c4:65:c5:4b:98:69:be:67:24:c6:90:2a:6f:
4b:62:d7:12:ed:13:68:7a:3d:bf:21:5c:50:e0:1e:02:fd:09:
8e:1d:f4:e1:3f:9a:f5:cf:93:a2:30:2c:a1:b8:b5:0f:c3:44:
b8:c3:f3:dc:1a:25:fd:56:a0:c0:35:a1:3e:b1:c8:b9:06:53:
78:88:44:d6:7c:f0:cb:b4:07:0b:2f:3c:3d:0e:e9:30:f1:f8:
d2:f4:a9:5e:54:e5:e4:20:cf:46:dd:b2:66:9e:7e:af:ba:aa:
f5:57:8b:8c:f3:64:40:65:47:f1:dd:69:80:e6:b4:5e:79:c6:
09:4f:90:44:2a:17:f8:31:d4:ed:54:04:67:f3:2a:d0:ac:8b:
9b:8e:7d:03:45:26:1e:66:d7:a2:c9:49:67:ab:f1:0a:f8:8a:
52:e9:96:f8:47:06:c7:ab:9c:49:84:84:c1:df:fc:b9:33:5e:
0b:52:15:7b:3e:cb:64:c8:5d:dc:3c:12:6b:22:48:1b:70:01:
f0:19:4b:f2:5c:df:ba:92:3b:93:b7:fd:35:09:72:b9:0e:9f:
55:fc:36:5c:a5:38:52:28:bc:3e:1e:22:99:62:97:a9:34:e8:
54:a1:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:05 2025 by rpki-client