Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File: w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier: +1vLZZNxWZIsoBz5btiQJ+vPABhM8fSV7h5G807Cpyg=
Subject key identifier: 44:01:1C:80:2E:E0:59:0C:FB:7E:9D:F4:5E:88:0C:F9:11:77:49:66
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial: 0199FCC6BF5C502C59C11F0E1AC8F7331E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number: 133E
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: I_YmXjobjQiqgaE7GnBooBc13Bo.roa (hash: uhenmFA0jnoDV3gl2RrmVWDxmBkSpRWlCD4TJWA6V5M=)
2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: V4TwLHYiwMVs4zDZ4y3ZuhAnGG0nqMmrAo1Bod05oRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:bf:5c:50:2c:59:c1:1f:0e:1a:c8:f7:33:1e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=44011c802ee0590cfb7e9df45e880cf911774966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:e2:a6:af:55:42:91:5e:b9:32:84:a5:1e:
3c:16:cf:49:40:ff:1a:56:05:37:f6:61:4a:c5:0e:
f4:02:8d:ca:2d:6c:df:a7:f0:bc:03:5c:4e:db:0f:
b4:f0:e6:70:a4:9e:1f:44:62:4c:1d:56:7d:43:ac:
ed:35:0b:97:15:16:52:9c:10:bb:6d:f4:28:78:3b:
5d:eb:0c:d8:27:ed:e6:a7:c5:f5:5a:93:17:31:ee:
b0:3d:62:e9:c5:5f:01:5a:a5:18:d6:e7:52:4e:d4:
85:8e:c0:a2:ca:f2:58:0b:3f:10:53:95:0c:f2:95:
87:b2:22:70:f9:38:31:21:13:e0:5b:ce:0a:88:18:
c8:cb:2b:a4:1e:8c:08:31:93:0f:47:6c:5b:de:84:
46:8b:03:e2:84:12:aa:0b:0a:b9:68:dd:25:16:31:
68:9c:aa:55:89:80:fd:07:f1:79:48:2b:10:2c:9b:
23:37:9f:95:42:8e:e7:3c:05:29:30:9f:98:58:17:
d8:1a:54:0c:ea:76:91:b8:f4:25:49:15:05:f4:f0:
a5:c0:df:1e:df:02:14:56:fd:be:07:bf:bd:06:33:
14:af:e4:11:e5:27:1b:ed:ed:da:76:66:0a:fc:5f:
6b:fa:e3:4a:b8:5d:ad:09:36:58:08:6d:31:e8:78:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:01:1C:80:2E:E0:59:0C:FB:7E:9D:F4:5E:88:0C:F9:11:77:49:66
X509v3 Authority Key Identifier:
keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:73:3f:e4:06:5b:74:a1:76:3f:7d:e8:74:ef:00:10:6b:69:
e0:9a:20:85:90:4b:4b:95:e2:07:81:cb:e9:36:e3:af:f2:c3:
bc:25:2d:29:96:bb:6c:fa:cf:f7:4f:c3:66:40:cf:02:1d:5b:
1b:86:41:aa:ad:65:fc:fb:db:53:9a:90:09:62:20:eb:dd:bf:
f4:f9:bb:76:6e:93:10:c0:ac:4c:11:59:f0:17:ff:fa:c6:c4:
9d:c8:00:d7:2e:9c:b0:e2:75:95:7c:85:39:c0:66:af:c9:48:
76:a0:4b:f9:23:5d:71:a9:ce:20:80:4c:1e:6e:28:47:b2:d7:
c1:68:df:77:23:e5:36:56:40:97:c7:3e:36:18:55:22:56:58:
68:35:ed:47:b6:aa:e7:4b:d9:3e:0d:e5:a1:f1:63:7d:b9:37:
a2:15:02:e7:a3:69:30:2a:43:f9:8e:aa:e2:30:43:57:4d:31:
29:6f:80:18:c9:5a:7b:42:94:49:74:78:18:7a:5e:b3:4f:00:
82:4e:60:01:6d:1c:58:41:ad:73:5a:88:4a:e6:11:52:d2:28:
40:72:b4:74:2f:14:90:dc:42:55:be:6b:6b:5c:d2:e8:80:bd:
f4:a0:e3:4b:39:2a:26:0e:fc:ee:4e:ea:26:35:9d:a8:49:97:
b1:2e:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:56 2025 by rpki-client