Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier: P7MLwRNwt/KFu3QQyaCE1GDJT12idCsF52sfolgkrCE=
Subject key identifier: CB:1C:F1:22:48:0B:E5:AD:69:B9:30:4A:6C:61:67:12:21:74:A5:0C
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 0198D4E0CAD5AF8D39429707B14CD39259B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: lGKMR71wIiss24ARjCT6dglSzeg.roa (hash: pOKk5O831tF+GU5ZB5nOM1eHOcUVJqNluw5xZGpLXhs=)
2: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: 1EHFzWInHRApAoRPafawnG0aACrxYyAyhZhOb5VIDbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ca:d5:af:8d:39:42:97:07:b1:4c:d3:92:59:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=cb1cf122480be5ad69b9304a6c6167122174a50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:20:46:99:23:b1:2c:1b:51:0c:b8:04:62:
42:1d:53:27:96:24:eb:1f:e4:b5:e9:8f:83:44:d6:
7a:93:6e:d6:57:cc:98:64:b8:09:62:c0:45:ab:bb:
cc:9d:49:84:03:70:37:38:28:8e:af:5c:06:c8:12:
21:71:69:c4:ca:20:33:14:36:fd:d1:36:9a:a5:42:
fc:e6:ff:e5:b2:cb:f6:2f:4a:1f:f9:72:50:a1:3a:
30:3f:08:a4:51:3f:46:90:39:82:a2:0f:4e:35:a3:
3f:7a:95:f9:4b:52:84:53:3e:56:0c:e4:33:cb:48:
53:32:67:8a:3d:64:2c:6d:40:7e:ca:1e:0b:ee:9f:
c8:8b:ec:b1:82:58:28:4b:2b:2a:a2:d9:bb:88:20:
ba:4b:95:d3:56:c6:8f:7d:be:36:17:88:6c:be:da:
1a:b1:ab:34:da:80:d6:7d:c6:46:2a:de:ff:ac:e6:
9e:cd:50:e4:95:79:35:d5:a3:8a:f6:1c:e7:cc:88:
56:1c:67:ab:5c:20:25:7c:bb:8f:43:c8:15:3c:08:
e2:11:fb:0c:77:28:6b:fe:0a:a4:e0:a1:a0:a0:84:
94:e6:12:9e:bc:c3:63:bd:a5:dc:03:8c:2b:31:26:
5f:e7:58:b8:d8:34:c2:79:06:99:61:c2:5e:02:6b:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1C:F1:22:48:0B:E5:AD:69:B9:30:4A:6C:61:67:12:21:74:A5:0C
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e6:15:95:fe:71:9d:4a:41:80:b8:d7:7e:7b:8a:93:aa:da:
46:77:b0:a6:7d:de:aa:c6:f5:41:41:18:69:22:34:4c:1f:7d:
89:b5:20:8e:ba:64:3f:1d:d3:1b:e7:62:73:1f:d8:03:cf:ce:
f2:54:82:f0:16:0d:16:74:77:fd:b1:47:47:b4:36:94:a5:15:
35:37:ee:cf:18:53:6e:02:f9:37:63:eb:b3:da:d0:ed:64:b6:
b5:03:35:c9:96:42:3d:db:22:d7:8e:fc:aa:46:92:34:3e:6b:
7b:4e:b6:46:bb:36:87:b1:8f:c3:ad:c9:3a:fb:03:68:f3:d8:
d1:01:2c:b8:5f:f4:48:79:7c:15:39:46:fb:50:85:7d:2b:a2:
5e:e7:92:ce:fc:d0:c1:3d:6b:da:20:0f:36:9d:c0:1c:ef:6c:
08:a4:51:98:d8:99:48:8d:74:de:f6:7d:0d:62:20:8e:c8:a4:
b1:11:8d:34:ee:84:50:8a:3d:44:aa:ed:ad:bc:56:b1:1e:8a:
68:de:e5:f9:df:c0:29:43:f7:24:6a:b0:e3:d6:98:d5:d5:d7:
21:3c:ae:96:1a:67:68:42:26:00:39:5c:99:3c:a3:3d:c6:10:
56:53:4d:f1:e5:79:9f:97:d5:63:69:6f:f2:05:e4:ea:3a:51:
87:8f:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:17 2025 by rpki-client