Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: fw6rPX91gQbRZMvz7c/lXhErXlVQZ2QeAGdhuYA1mIQ=
Subject key identifier: F8:0A:3E:0D:71:83:6E:69:7C:10:F4:6B:DD:81:44:43:6A:01:07:A4
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 0198D4E0F65AD8994822095F7234A1318C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 13F4
Signing time: Sat 23 Aug 2025 03:02:49 +0000
Manifest this update: Sat 23 Aug 2025 03:02:49 +0000
Manifest next update: Sun 24 Aug 2025 03:02:49 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: FRP+equIdMQQKXOtQFdnPBVXgoF0ph6u30aGZUW4K4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:f6:5a:d8:99:48:22:09:5f:72:34:a1:31:8c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Aug 23 03:02:49 2025 GMT
Not After : Aug 24 03:02:49 2025 GMT
Subject: CN=f80a3e0d71836e697c10f46bdd8144436a0107a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:40:f3:2f:b9:37:6a:24:15:95:d7:4c:f9:4f:
dc:c9:3d:fc:b9:86:48:d3:44:13:0a:26:1f:33:d1:
fa:51:d6:f8:61:7a:af:03:7c:3a:40:3d:7f:30:a1:
f0:ef:4b:25:ba:50:08:a7:af:95:05:f3:d3:b6:5a:
f5:2d:35:e9:c1:b3:a8:b5:d0:a8:52:92:52:67:ea:
bb:c9:e7:07:52:4f:db:33:ff:d4:a0:37:53:23:f6:
23:ae:2f:c9:56:c4:a7:06:82:46:90:dc:c8:0c:20:
f4:7f:90:56:70:0c:45:52:b9:4d:ae:5d:10:08:4c:
22:ab:a8:1d:d6:00:6a:f6:b0:1b:74:5e:bf:08:a2:
5d:3f:07:a0:f5:26:86:76:62:e1:75:50:85:75:f6:
41:1c:56:27:ee:e4:a2:32:54:a4:ce:12:ea:07:f9:
e8:bd:bc:f6:a2:7c:1e:60:d4:b2:09:e5:1c:05:b3:
b9:2d:4b:51:f6:a9:85:9a:f2:b5:ce:b1:cc:15:72:
e0:ba:c6:f7:d8:88:6e:71:48:a8:5f:bc:a6:cb:4e:
90:5a:d1:8a:f2:b6:7c:6e:0a:cc:96:6b:1e:e7:25:
f6:fe:c0:26:06:14:41:df:b9:ce:2b:ef:3c:ac:ee:
9a:66:08:5b:ed:95:09:80:da:c5:c3:31:45:d4:13:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:3E:0D:71:83:6E:69:7C:10:F4:6B:DD:81:44:43:6A:01:07:A4
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ad:e9:6c:39:98:c0:90:5d:2c:77:96:da:24:ab:b4:13:ff:
75:26:2a:d6:aa:4b:78:a1:86:d9:9f:32:52:0a:ff:b0:cf:ad:
99:e5:83:d6:b9:e4:9e:2e:35:8d:64:06:10:f6:b1:a7:dd:41:
83:99:d3:73:3c:1a:3c:74:81:6a:3d:d0:18:93:33:bf:86:29:
ca:f3:b3:a2:47:62:dd:bb:43:4c:fe:cb:df:60:58:5a:35:90:
72:e7:d6:ea:9b:50:20:91:4f:50:b4:45:48:ff:f0:04:b4:8c:
7c:5f:d9:b2:a1:b8:3e:1b:b5:3b:de:7c:4b:c9:d3:12:a5:5c:
76:ef:09:ec:7e:1e:b3:27:aa:83:a1:7d:1d:98:74:55:ca:d4:
7a:ef:13:3d:43:d0:79:e3:41:98:cd:72:80:ce:fc:a2:ba:91:
4f:40:b9:f2:71:4d:0b:7f:14:2a:54:07:75:c8:d6:a8:97:13:
bb:1e:db:16:31:e4:4b:ae:97:50:e3:51:88:72:2e:3c:0b:d4:
b1:0a:5b:e5:b1:ce:a7:3f:e9:a9:c6:35:05:58:1d:85:14:d1:
42:3a:56:26:28:cc:79:c0:83:44:85:d9:f9:31:af:77:c0:6d:
a1:08:a7:ec:90:a9:7b:4b:d6:82:bb:bc:45:f0:e5:b8:65:26:
88:1d:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:54 2025 by rpki-client