Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: J1Hd7AkBWUGCswBxqMtRdcmFdn1kB7WyjQII/r6oRFw=
Subject key identifier: 0B:0F:36:82:8A:AB:98:D3:B6:28:81:49:63:CA:60:78:3C:C2:2E:C4
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 0199FC21519683E764CE370FE9BDE4F460D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 135C
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: xodYEQQwEDBuyGb8r4/GI9Qx4vLYBmK9UFR4mb7EH5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:51:96:83:e7:64:ce:37:0f:e9:bd:e4:f4:60:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=0b0f36828aab98d3b628814963ca60783cc22ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:aa:d7:1b:49:6a:83:e2:a7:6b:bb:16:15:
2c:33:86:41:94:51:db:4c:7b:5e:68:d6:65:7d:ae:
4c:6b:f6:fa:50:1c:44:f4:4e:95:3e:5e:e1:b9:f4:
22:3a:85:95:21:f2:00:bc:45:0f:6f:9f:00:be:43:
c6:3e:9d:69:78:04:9b:3d:13:94:38:6f:af:ee:75:
b7:a8:fe:47:05:10:ec:cd:74:a7:ad:db:00:c2:13:
45:50:6a:04:7f:f8:10:67:3f:8c:7a:3a:dc:7b:f2:
18:a7:69:f8:0c:81:86:2c:57:1c:c3:65:2e:b5:79:
f9:cd:37:66:1b:d3:b1:74:e8:71:0a:99:88:61:fb:
e2:a9:ab:2b:db:61:ef:78:e3:5b:82:5f:90:27:37:
ea:50:fc:2d:6a:d9:ae:90:44:29:94:b3:b6:bd:d4:
a8:79:34:b4:d0:21:71:5e:5c:21:37:df:c4:ab:59:
0a:00:04:62:7d:0b:db:4c:19:06:de:d0:cc:c3:b1:
2c:28:f2:b7:09:b4:64:90:0b:1c:08:25:88:9a:1b:
fb:ef:dc:a4:20:2d:bc:c7:4e:b3:3c:a5:a6:77:23:
d4:f0:1c:fc:40:8d:89:53:1f:83:18:ff:0c:19:b0:
d0:5a:91:91:1d:94:94:61:5a:48:2a:68:ff:47:df:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0F:36:82:8A:AB:98:D3:B6:28:81:49:63:CA:60:78:3C:C2:2E:C4
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:71:95:f2:80:3e:37:55:14:d2:50:79:31:bd:fd:fd:fd:e4:
5e:84:e1:d8:0b:fa:42:67:a1:a2:f1:86:43:92:8d:34:30:f8:
4c:6a:fb:2c:da:f4:07:bf:ac:3e:a6:e9:ff:db:8c:f5:d9:3c:
ea:e6:f7:98:8e:eb:fa:5f:60:70:12:a2:3b:ad:d6:73:76:84:
31:a3:f3:ac:87:62:05:d8:a6:c7:87:f4:64:0f:91:d9:b3:de:
84:bb:4f:44:f2:85:66:ed:c1:15:e6:51:81:0d:f7:5e:f0:58:
90:7d:67:5b:4d:84:13:9d:47:70:cf:94:91:7e:8a:8d:5f:eb:
37:6d:0c:c3:30:6d:dc:ba:03:9f:df:d2:96:2a:45:a3:f4:14:
80:02:d8:d5:4f:98:6b:f3:a1:69:7f:00:15:2d:cb:00:76:9e:
92:12:45:ec:77:11:4b:6b:95:7c:02:62:00:f0:7d:3f:05:b2:
2e:3f:3b:26:13:27:6b:c5:5c:47:0c:7f:fd:76:6c:84:e5:7a:
a1:b7:f2:89:5b:78:fa:cd:24:d7:2b:7f:92:32:3a:0b:60:74:
17:5f:fc:f7:64:e2:7f:4c:5a:f8:48:cb:a2:5f:5a:62:72:bd:
b5:2c:c8:6e:d1:a5:c1:d2:db:20:a4:50:c1:1c:77:2b:c3:8b:
ea:f2:11:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:39 2025 by rpki-client