Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier: Ui8f7j/vLc3dDBFEfxxFZVEdEDQIarwh77vnG3vkyYU=
Subject key identifier: 99:DE:4C:1C:5D:AE:55:DD:84:03:40:05:99:1A:2D:68:32:A8:70:42
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial: 0197CA271A2EFFF15ED4236E228B718C1B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number: 0A6D
Signing time: Wed 02 Jul 2025 08:00:49 +0000
Manifest this update: Wed 02 Jul 2025 08:00:49 +0000
Manifest next update: Thu 03 Jul 2025 08:00:49 +0000
Files and hashes: 1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=)
2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: MLiIBLqyFz99gvVviM6V2b1qk7PGHFjVXbXIxOFBES8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:1a:2e:ff:f1:5e:d4:23:6e:22:8b:71:8c:1b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Validity
Not Before: Jul 2 08:00:49 2025 GMT
Not After : Jul 3 08:00:49 2025 GMT
Subject: CN=99de4c1c5dae55dd84034005991a2d6832a87042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:e1:5c:39:51:9d:91:d8:f8:61:06:88:bf:
bc:53:7b:bb:5f:87:4e:ad:a3:1e:3f:4f:45:17:32:
35:2e:89:a8:4c:df:09:72:f9:8e:09:5a:ef:aa:c2:
33:0b:fc:e7:42:21:01:09:85:09:23:84:c1:f3:d1:
f2:08:13:d4:6a:fc:e8:10:b9:f8:ae:48:a3:e9:e8:
af:e7:c1:d6:37:e2:c0:82:e4:60:b3:8c:0d:ec:f6:
8f:82:9f:ef:e2:5e:4b:2d:05:ab:b1:65:27:71:41:
ac:48:92:9e:86:c8:28:51:6d:bd:35:d6:6e:0d:9c:
f0:ea:eb:54:bf:4c:a9:9d:32:76:e2:15:ad:d2:06:
f0:df:8d:15:5a:6f:5c:87:a7:71:10:39:78:aa:06:
48:ee:d5:c7:11:45:dc:e1:4a:d7:94:16:ef:a2:2f:
ce:d4:e7:ef:d1:3a:fb:f9:1b:79:aa:27:68:71:c9:
e5:ac:ea:c4:7c:c2:2f:fd:2d:2d:44:2f:70:29:c6:
21:dd:3e:e9:64:e5:d7:c9:26:8e:61:2b:27:44:f3:
ef:e2:c3:4f:17:78:ea:75:4c:46:9b:d6:39:1b:ef:
3e:40:8b:02:cb:9c:33:42:ea:ee:42:83:69:2a:8f:
2f:2d:4c:1f:88:4e:90:b7:c0:47:cb:a9:53:b6:fc:
95:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DE:4C:1C:5D:AE:55:DD:84:03:40:05:99:1A:2D:68:32:A8:70:42
X509v3 Authority Key Identifier:
keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ed:70:35:ff:5e:76:09:2d:b4:22:9d:87:89:64:2c:55:fb:
e9:76:16:04:f1:30:8c:2b:86:70:0d:7c:59:f3:90:7e:86:52:
c5:d8:44:44:1b:cc:10:fd:2d:60:95:ae:8c:4a:db:5a:b9:53:
9e:e4:7a:4e:4e:fa:13:ba:51:ae:2d:49:f3:9c:85:04:c2:57:
27:1e:f7:34:d5:20:8e:c3:74:af:4f:31:13:fc:da:8e:6a:f8:
85:86:f6:fc:19:d1:d9:1a:c8:21:3c:ab:00:26:5c:f9:5f:52:
84:8f:8c:13:da:b4:11:8f:f6:00:a8:04:0a:9a:d9:80:b8:0d:
84:8c:a0:7d:0d:a5:7a:8d:67:37:f8:7b:45:49:9d:39:60:fc:
db:3b:e1:5a:52:0e:8c:c0:84:0f:f3:32:81:ce:8e:12:f6:4e:
e0:93:04:2b:6e:8f:7c:de:27:01:ff:7f:f7:52:a1:75:9f:58:
5c:c6:f7:57:9d:cd:53:56:30:8d:ca:ba:52:fa:bc:1b:3e:a2:
90:89:2f:78:1f:d0:2f:47:28:7d:77:cd:24:47:31:94:68:72:
b1:c1:d6:9e:d4:1f:a9:e0:72:b6:c2:e4:ff:c6:b7:75:85:66:
6b:3d:c6:a7:1c:7b:83:ce:69:19:16:10:b2:ee:fe:9b:37:b4:
5c:69:9f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:54:59 2025 by rpki-client