Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File: w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier: cTVAQkeliZb3ng28IZ7vQ699KelJ+SynpZ8f2sF/XsQ=
Subject key identifier: D4:4C:95:01:8B:36:FB:75:4E:2A:DD:EB:B8:C4:D3:0B:7B:C3:1A:8C
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial: 0198D54E37DCF6CC418630ACF841604F98E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number: 12A5
Signing time: Sat 23 Aug 2025 05:02:09 +0000
Manifest this update: Sat 23 Aug 2025 05:02:09 +0000
Manifest next update: Sun 24 Aug 2025 05:02:09 +0000
Files and hashes: 1: I_YmXjobjQiqgaE7GnBooBc13Bo.roa (hash: uhenmFA0jnoDV3gl2RrmVWDxmBkSpRWlCD4TJWA6V5M=)
2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: mENidaPk8aURtozUuqZmMgnpC+cBzIz3hSSYYeUMNyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:37:dc:f6:cc:41:86:30:ac:f8:41:60:4f:98:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Validity
Not Before: Aug 23 05:02:09 2025 GMT
Not After : Aug 24 05:02:09 2025 GMT
Subject: CN=d44c95018b36fb754e2addebb8c4d30b7bc31a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:a0:e0:fd:89:0f:a2:d9:84:6f:70:bf:5e:
5d:e4:82:f2:c1:17:f6:27:5b:c9:ca:34:e8:99:71:
e9:36:55:d8:c7:e0:f9:ec:3f:87:56:19:3b:30:4b:
97:51:f4:53:b1:a9:b6:06:9a:75:1a:ea:3f:05:fc:
8e:fe:15:51:9f:e7:2b:33:fe:f3:a8:73:75:49:cc:
b1:09:0d:3b:a4:82:47:12:d7:eb:6c:90:a7:4c:be:
9c:3e:a9:6b:2b:28:00:bd:bb:80:19:d8:6a:43:28:
2d:2b:ad:4d:43:3c:b8:57:57:ad:e3:7a:94:2d:dd:
06:91:e7:f1:e9:c6:c6:3f:21:d3:5d:91:c4:3d:c2:
98:8a:c3:66:e3:f9:88:e7:85:42:2d:70:55:c9:12:
3a:46:0b:57:b2:db:f7:35:1b:91:4e:c8:37:28:04:
f1:b6:72:e3:9c:76:d3:0b:b7:6e:ee:b6:f3:bf:f0:
6b:e6:cc:33:61:9e:f9:36:94:57:06:2c:7e:92:6c:
f9:6f:ca:62:02:c8:6c:c6:f8:30:70:2d:f0:09:99:
4a:3c:81:ea:0c:49:37:4d:d0:2e:5d:47:9e:05:a2:
40:b2:35:a5:60:6e:be:55:14:d4:70:fa:81:02:d5:
aa:97:04:0c:44:97:92:fc:be:4b:33:ee:72:94:35:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4C:95:01:8B:36:FB:75:4E:2A:DD:EB:B8:C4:D3:0B:7B:C3:1A:8C
X509v3 Authority Key Identifier:
keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:16:aa:38:e4:de:ab:c5:65:f8:0a:95:ad:af:5d:f0:76:c5:
04:2c:19:35:51:99:ff:59:66:99:90:20:70:56:0d:87:aa:c5:
8d:13:80:f1:7c:03:59:8d:03:b3:4b:51:9c:e3:23:e3:1d:8f:
81:57:95:df:d9:b1:71:ff:15:97:01:21:27:f8:c2:80:58:0b:
01:2d:71:ef:b9:15:84:a0:25:a0:c5:ef:0d:d5:d4:e1:f8:e1:
2a:2e:2b:57:68:1f:1a:0f:99:78:35:d7:04:37:c3:94:53:57:
c8:1e:16:bf:34:2a:0b:56:39:2e:79:10:a8:a8:52:6c:e2:f0:
cf:1e:a2:75:08:e6:83:b5:e8:17:db:e2:2c:56:b5:68:ac:cf:
ad:c5:3e:3e:06:d4:ad:08:83:df:dd:b0:b5:20:0e:7a:58:ed:
c6:4e:5a:a5:12:2a:ff:d6:12:58:07:97:e6:44:31:61:5e:47:
66:26:fb:a3:2f:7f:e4:55:04:7c:55:50:21:da:64:dd:50:82:
c1:d7:86:ff:70:31:f1:ed:d4:b3:2f:3d:98:c1:e3:7d:30:5c:
d0:b2:d1:4d:d0:cf:a6:f4:eb:4c:ad:19:b8:3d:19:0b:7d:9c:
9c:92:99:c4:4a:36:17:a1:56:20:30:67:2a:30:dd:1f:c7:11:
b9:c0:2f:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjfc9sxBhjCs+EFgT5jhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzN2EyMjFiMjlkZDQ2MzA2OGMzYThkNWNhYzE0NmIwNTdi
NWE5ZWQwHhcNMjUwODIzMDUwMjA5WhcNMjUwODI0MDUwMjA5WjAzMTEwLwYDVQQD
EyhkNDRjOTUwMThiMzZmYjc1NGUyYWRkZWJiOGM0ZDMwYjdiYzMxYThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhyg4P2JD6LZhG9wv15d5ILywRf2
J1vJyjTomXHpNlXYx+D57D+HVhk7MEuXUfRTsam2Bpp1Guo/BfyO/hVRn+crM/7z
qHN1ScyxCQ07pIJHEtfrbJCnTL6cPqlrKygAvbuAGdhqQygtK61NQzy4V1et43qU
Ld0Gkefx6cbGPyHTXZHEPcKYisNm4/mI54VCLXBVyRI6RgtXstv3NRuRTsg3KATx
tnLjnHbTC7du7rbzv/Br5swzYZ75NpRXBix+kmz5b8piAshsxvgwcC3wCZlKPIHq
DEk3TdAuXUeeBaJAsjWlYG6+VRTUcPqBAtWqlwQMRJeS/L5LM+5ylDUKjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRMlQGLNvt1Tird67jE0wt7wxqMMB8GA1UdIwQY
MBaAFMN6Ihsp3UYwaMOo1crBRrBXtantMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDIt
OGJmY2Y5MDZmNzZhLzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDItOGJmY2Y5MDZmNzZh
LzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhaqOOTe
q8Vl+AqVra9d8HbFBCwZNVGZ/1lmmZAgcFYNh6rFjROA8XwDWY0Ds0tRnOMj4x2P
gVeV39mxcf8VlwEhJ/jCgFgLAS1x77kVhKAloMXvDdXU4fjhKi4rV2gfGg+ZeDXX
BDfDlFNXyB4WvzQqC1Y5LnkQqKhSbOLwzx6idQjmg7XoF9viLFa1aKzPrcU+PgbU
rQiD392wtSAOeljtxk5apRIq/9YSWAeX5kQxYV5HZib7oy9/5FUEfFVQIdpk3VCC
wdeG/3Ax8e3Usy89mMHjfTBc0LLRTdDPpvTrTK0ZuD0ZC32cnJKZxEo2F6FWIDBn
KjDdH8cRucAvGg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:05 2025 by rpki-client