Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File: wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier: G2H0WrZPJorUVsBu8ycnPAS0ft28OiLzcDqEXzALhzY=
Subject key identifier: 01:B8:F5:61:9E:89:7D:9B:AC:34:14:D6:FA:63:9C:8F:8D:2E:D0:EB
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer: /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial: 0198D6CE0DB6748A3B8B58EA2A48B8855FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number: 033F
Signing time: Sat 23 Aug 2025 12:01:24 +0000
Manifest this update: Sat 23 Aug 2025 12:01:24 +0000
Manifest next update: Sun 24 Aug 2025 12:01:24 +0000
Files and hashes: 1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=)
2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: rEp8tfQpU8JdQo8rNDyM5E8gsVy6xP+BX0vuvQ3+IlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:0d:b6:74:8a:3b:8b:58:ea:2a:48:b8:85:5f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
Validity
Not Before: Aug 23 12:01:24 2025 GMT
Not After : Aug 24 12:01:24 2025 GMT
Subject: CN=01b8f5619e897d9bac3414d6fa639c8f8d2ed0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:af:f6:66:9c:8a:52:92:68:67:cd:cb:21:
66:e2:ca:87:fe:9b:4c:82:41:dd:33:b7:61:62:ef:
0c:4e:64:5f:fa:25:bb:d0:be:25:90:dc:9e:03:18:
af:fc:8f:a7:1c:eb:40:8d:19:47:5d:c4:48:b8:9d:
03:e6:ff:44:4d:1c:57:c2:2f:49:2c:a0:b4:ba:4b:
cb:72:d8:ab:4b:16:2d:15:3c:e4:b3:49:8b:71:aa:
47:22:94:20:4d:e9:7d:fa:ca:d8:88:7b:10:36:86:
a5:01:45:eb:e0:98:2d:84:37:99:86:5d:de:7e:a0:
4c:0b:a7:5d:91:f9:7c:35:ca:63:eb:d3:fd:8e:72:
32:26:78:a3:77:98:f6:bf:de:00:0f:fb:49:c3:5b:
b6:fe:4a:9b:f7:79:1a:93:53:08:49:f8:35:87:8d:
16:87:a9:dd:eb:d1:20:79:b9:8f:b8:17:64:74:63:
f5:63:54:a9:16:ce:8c:03:e6:d0:f9:3e:85:87:d7:
f2:b7:1e:a3:c0:f4:ff:a1:de:30:35:b7:71:08:ab:
26:83:f1:b7:11:a0:70:23:fd:98:3c:ac:04:7a:f8:
c7:02:b3:07:89:4c:79:70:e3:9d:57:56:2e:2c:3b:
2c:59:5f:b1:e6:0b:28:95:da:ff:63:86:af:13:67:
0f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B8:F5:61:9E:89:7D:9B:AC:34:14:D6:FA:63:9C:8F:8D:2E:D0:EB
X509v3 Authority Key Identifier:
keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:66:4b:85:b6:41:8c:c3:08:bc:bd:eb:b4:d3:7d:7b:ed:61:
92:5e:33:43:70:9f:73:85:9a:da:84:55:b7:50:fc:a7:10:89:
55:6c:96:1d:97:9d:97:b3:7d:9c:e4:4c:10:2b:ec:73:24:9d:
de:38:49:bc:2b:30:32:ad:f9:a3:5e:e9:dd:eb:bd:37:77:d8:
26:9f:30:7c:64:bf:70:47:01:71:ec:f9:cc:f4:f3:51:88:f3:
a7:2c:cd:81:d9:66:8c:24:b1:3f:9a:63:f0:52:f1:b3:ef:f9:
43:2a:50:b5:db:84:5a:cf:f7:52:19:0f:20:87:69:ba:ec:4c:
5f:5a:be:30:20:c3:07:b5:b5:9c:df:87:c6:7b:63:b6:63:7d:
3b:58:f1:d4:35:db:b8:fb:3f:03:5e:b2:70:3b:ba:d3:fe:d7:
ee:ce:5c:73:d0:08:8f:7e:e0:95:15:4d:61:f3:9a:4a:ac:3c:
2a:0e:6d:9e:ea:8f:73:78:db:2e:d8:65:f9:43:be:d0:c5:76:
72:a3:74:a9:32:bc:3b:2b:c9:7d:cd:65:6c:e7:a7:21:bf:a9:
2a:0e:89:5b:e6:4d:6e:b9:00:1a:e2:1f:af:2a:98:e8:3d:4e:
85:e9:40:7b:99:c5:f8:23:4a:fc:c1:30:bf:6c:3e:c6:2f:b5:
44:b3:9b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:42:03 2025 by rpki-client