Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: /oxqSejkvbhnvzG9o+0bh8WwJGu17h2BpTx/2/xZAUw=
Subject key identifier: 3C:EF:7A:9A:26:94:2A:67:B5:30:59:61:0A:31:E5:D1:1E:8C:56:BE
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 0198D4047B0FFCBE520BE62941B04D3F18A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 01CD
Signing time: Fri 22 Aug 2025 23:01:59 +0000
Manifest this update: Fri 22 Aug 2025 23:01:59 +0000
Manifest next update: Sat 23 Aug 2025 23:01:59 +0000
Files and hashes: 1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: MQtv7jIvf7Yr0NpKMB7Db6Zgx6FEzgcXszsJpY13GTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:7b:0f:fc:be:52:0b:e6:29:41:b0:4d:3f:18:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Aug 22 23:01:59 2025 GMT
Not After : Aug 23 23:01:59 2025 GMT
Subject: CN=3cef7a9a26942a67b53059610a31e5d11e8c56be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:69:8a:4d:34:38:5f:26:99:c2:a4:fa:14:
79:c1:7a:83:c7:9a:d3:a2:88:d4:7a:22:0d:1f:cd:
a3:48:fb:2f:94:35:da:be:f9:86:d7:5a:53:96:ec:
ea:01:65:7d:55:46:98:e1:2b:4c:0f:a6:56:f2:e8:
26:e2:80:60:54:82:a1:2b:39:7b:d7:9b:d6:1a:70:
50:6b:48:9a:90:80:8d:af:86:b1:d1:8a:35:27:92:
42:dc:72:63:5f:76:09:50:5b:c7:a4:c9:6b:23:6a:
d4:d1:e3:f3:34:ff:8a:24:02:50:5a:7b:87:37:23:
f7:0a:37:35:2c:5d:de:94:85:c6:59:8d:47:3b:6c:
29:89:fd:e4:91:5e:bf:cb:32:2f:64:76:06:3c:26:
cf:96:19:99:01:ec:bb:2f:e6:7b:8b:ef:87:4b:a6:
a4:7a:95:bd:51:04:cc:46:c0:75:40:eb:e2:31:c8:
39:b0:ce:b0:bb:46:94:fc:c0:77:c6:1d:c4:bc:c9:
a4:a2:d2:e8:62:16:76:c6:3b:95:8b:f8:37:6d:88:
d5:b6:5e:5c:a4:98:50:1a:ef:30:01:c4:59:c8:71:
b8:ec:c5:91:c8:b8:d8:e7:a7:6c:1e:c1:b8:30:96:
58:a1:ed:b0:ea:f1:5b:31:9e:f6:62:0b:f2:4c:6c:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EF:7A:9A:26:94:2A:67:B5:30:59:61:0A:31:E5:D1:1E:8C:56:BE
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b5:70:42:1d:57:53:2a:c9:0b:be:61:03:72:5f:65:6a:e2:
da:86:a1:fd:61:3e:a8:4e:71:4b:89:1b:99:a0:55:36:4c:ec:
cd:d0:ff:b3:66:23:1d:c2:32:c1:86:14:98:e6:a0:32:aa:32:
04:18:7a:a9:17:74:64:e6:78:e6:0f:90:52:1e:a2:26:96:02:
b4:eb:fc:41:88:43:8a:a5:d3:8c:16:39:bf:42:c0:6f:4c:c3:
19:6a:d3:85:55:2f:cc:4b:e4:e0:ab:63:40:ed:3f:72:5e:db:
a8:aa:5f:df:b6:fb:b4:f2:02:07:39:e9:b3:63:cf:67:02:3f:
a8:76:62:b9:72:91:c8:d5:0b:2b:0a:0e:77:e2:d5:c1:d0:45:
a5:74:ca:40:80:18:26:42:0c:ac:5a:63:5c:92:e0:14:72:61:
be:c5:51:a2:39:38:45:46:d0:42:01:7b:70:3c:5e:0b:e7:14:
1d:a0:eb:c9:c1:d8:41:4d:c7:85:3f:11:df:e1:50:56:3e:c2:
a9:3b:e8:ec:4c:70:51:af:4f:59:21:2d:f6:d0:d2:b3:0e:b8:
43:d7:29:29:ab:98:34:35:44:5e:b5:b0:17:31:33:c1:0b:c6:
8b:69:55:40:62:41:5d:2e:e3:00:96:47:38:be:04:95:2c:61:
9d:54:59:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:53 2025 by rpki-client