Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier: j6bmaEWcgKpwdxB2pkkpofxdE2+EWF5Y0Pf0ZRfov20=
Subject key identifier: B4:A6:A2:E2:32:8D:D5:DE:DB:50:D1:B6:7D:B6:4C:97:27:D8:7C:25
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 0198D4A7CC332EEEA37916B724297CECF7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: GzCIBu4tHiFH76_Ly9Ei_0SMBpg.roa (hash: ucUps3PWBgmn642QIizMtNVpME3QV9nJ//n0R1ijDxA=)
2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: QFJBnOb+SoaG/zA+5NW3XPRX5zGnQ66EV2p7Rab82LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:cc:33:2e:ee:a3:79:16:b7:24:29:7c:ec:f7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=b4a6a2e2328dd5dedb50d1b67db64c9727d87c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:65:4c:b9:e8:a1:6a:5b:8a:fe:7d:5b:f4:
28:09:68:36:15:19:38:44:55:40:09:61:17:48:25:
1a:f0:ec:b2:89:90:8d:82:43:5e:ed:9f:25:e1:23:
c2:c1:4b:c6:fb:3c:0b:53:8a:24:09:71:5f:0b:9c:
0a:c7:80:37:87:dc:04:9d:91:6c:a1:c9:22:6a:81:
98:76:d2:fd:27:7a:be:18:1d:90:73:fd:c1:e0:c2:
62:53:46:08:9e:0f:d4:ef:5e:47:86:15:e7:89:af:
ff:2f:03:c1:78:04:b0:14:e8:26:2d:57:40:ed:bb:
98:40:3e:ef:16:38:4c:a5:d6:13:12:6f:a1:8f:c1:
fd:99:27:44:cc:1a:49:60:ce:5c:d6:3e:fb:6c:e5:
61:33:3a:83:1d:8e:92:1b:ae:76:20:55:59:5c:63:
80:5f:40:01:56:b3:a7:60:55:aa:41:6e:10:b4:f0:
d3:b5:40:8d:d7:09:8e:6a:31:9a:89:5f:d7:60:0d:
b8:9e:f3:b6:38:a1:1f:ae:28:27:99:bc:64:32:87:
b2:a1:1b:47:45:7d:dc:04:a6:57:c8:48:97:a1:63:
08:aa:e5:3e:0b:c3:71:f6:8d:dd:89:2f:52:ce:e5:
72:15:26:b3:ef:83:2e:83:fc:4e:ce:e2:ff:ee:5f:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A6:A2:E2:32:8D:D5:DE:DB:50:D1:B6:7D:B6:4C:97:27:D8:7C:25
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:aa:3a:b5:7d:e5:59:25:be:31:35:e9:3d:fe:16:9c:fb:30:
97:6b:ed:7a:b8:d6:c2:11:02:6c:a2:5f:ec:4e:64:bc:ec:c8:
a7:0a:b3:12:49:a9:80:9b:37:76:da:4a:88:40:fe:9d:38:4e:
05:98:96:66:29:3b:7e:cf:ab:6f:15:dd:89:55:31:4c:30:aa:
6d:2d:3c:df:a0:5f:01:bd:55:6f:3d:d3:0c:79:77:8d:bb:d7:
00:83:ca:96:9b:a9:09:73:da:80:5f:c7:db:76:61:d9:91:e6:
d9:bf:cc:37:a2:dd:8b:89:e5:26:b7:b5:fe:99:79:bf:2d:e7:
00:cc:b8:41:0a:0a:ef:03:5b:94:cc:ac:3b:8b:18:09:32:e0:
07:fe:d7:3d:14:4c:69:6b:68:48:a7:05:41:96:df:90:55:58:
e1:84:d2:59:9f:dd:6f:3a:5b:42:df:5b:f7:2a:9f:c2:a9:bb:
31:c0:46:0a:28:e0:0d:6d:58:9e:20:e2:c8:38:e5:6d:f6:ee:
f2:c3:92:63:09:ab:28:71:d7:03:25:b4:a4:84:07:98:94:c5:
0e:4c:d5:c3:31:29:a3:a8:7a:fa:e4:f4:68:3a:7e:ba:9a:21:
64:de:df:cd:c8:7d:d8:c1:14:93:ca:da:ab:0c:3f:9b:7d:51:
96:98:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:52 2025 by rpki-client