Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
File: w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft (raw, json)
Hash identifier: RpufYonVBw+M4gnoFk1TreFvoSTdTzdDLP7cu7E+Lo8=
Subject key identifier: 44:61:F3:FB:E6:FF:F1:14:18:A0:57:D9:C2:84:11:79:09:CC:4F:3D
Authority key identifier: C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
Certificate issuer: /CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Certificate serial: 019A006C183A83B9B51C9ACE988A8F2FF8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
Manifest number: 0CC1
Signing time: Mon 20 Oct 2025 07:01:15 +0000
Manifest this update: Mon 20 Oct 2025 07:01:15 +0000
Manifest next update: Tue 21 Oct 2025 07:01:15 +0000
Files and hashes: 1: fZsTaHsMiRTOQx_qTx-PLjSdXVE.roa (hash: 7tvMPnX4kI566+vmNqApn9A48bhDZNJ8LvI46Pf6Yd0=)
2: w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl (hash: ZMiizSqHHhjqU3bVTc1ivxX7AOKAFdhLATrII2GB6+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:18:3a:83:b9:b5:1c:9a:ce:98:8a:8f:2f:f8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b3962aee4e8ae4c6ccd8979e539802ea0e4ce7
Validity
Not Before: Oct 20 07:01:15 2025 GMT
Not After : Oct 21 07:01:15 2025 GMT
Subject: CN=4461f3fbe6fff11418a057d9c284117909cc4f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:c4:e2:06:8d:4c:5b:69:13:c9:e5:41:34:
c6:08:b6:c2:01:3f:96:07:99:4a:13:69:2d:91:d9:
7b:49:97:a2:00:34:51:f7:d7:c4:bc:34:04:78:39:
a7:cb:e8:21:cb:14:a2:b4:a4:2b:a0:64:3f:66:28:
fc:3f:12:5d:61:c5:4c:02:7f:a1:7d:dd:22:05:a3:
e8:60:37:28:73:16:d3:51:2c:56:3f:c1:7b:8b:1e:
c2:03:a6:cc:2f:ae:95:43:87:fe:82:e1:33:ad:a7:
5b:45:5f:06:ab:e1:5e:31:6d:d4:79:b2:7d:73:b4:
f4:76:7f:ea:73:01:67:7d:98:94:a8:af:1c:ba:6b:
1a:63:0c:7e:aa:aa:41:ad:7c:16:06:cc:fe:90:9e:
1f:20:2c:d7:1d:5a:95:31:e0:1e:81:d2:0b:88:b5:
8d:ce:bf:5b:38:88:16:e1:03:1f:49:80:01:7e:78:
db:8f:2f:8a:f4:ab:f9:c3:4f:d8:19:84:1d:9c:61:
93:45:7f:e7:96:ca:13:66:2b:28:22:1c:bd:80:46:
0d:8c:70:31:8d:d3:40:a4:ae:ad:38:59:37:70:eb:
3b:41:86:0b:14:ce:1d:c1:85:67:87:1c:f4:16:d1:
dc:c1:55:83:fe:27:cf:3c:3c:31:d3:36:bc:3a:68:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:61:F3:FB:E6:FF:F1:14:18:A0:57:D9:C2:84:11:79:09:CC:4F:3D
X509v3 Authority Key Identifier:
keyid:C3:B3:96:2A:EE:4E:8A:E4:C6:CC:D8:97:9E:53:98:02:EA:0E:4C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7OWKu5OiuTGzNiXnlOYAuoOTOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2645a7-532c-4fa1-bcdd-ea5dad8b4765/1/w7OWKu5OiuTGzNiXnlOYAuoOTOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:69:cb:f3:a8:45:68:5f:e4:8a:f5:d0:99:a0:1b:3c:2a:42:
77:75:36:02:dd:f7:20:ef:41:dd:57:53:98:f7:47:8c:3a:7a:
ef:21:00:ef:1f:8f:72:34:2c:c4:40:c6:e5:d1:cf:e0:57:61:
6c:9e:ff:4c:bd:15:84:e1:da:37:e1:a4:d5:97:26:b3:11:43:
de:d9:ed:3b:e6:54:47:49:61:e9:d3:bf:5c:aa:fb:80:80:7f:
d9:d9:6d:66:b1:d8:f5:2c:cf:2b:7e:64:28:3f:d9:71:c0:cb:
91:83:43:7a:2e:dd:ef:69:3c:7d:9d:4e:26:37:8a:ab:ff:85:
d9:41:b1:b1:17:29:57:03:4a:98:46:d8:f1:2f:1b:b2:de:00:
23:ce:37:1a:a6:30:a3:c3:65:d7:f1:f3:65:4b:fd:54:9c:de:
04:d7:0e:2d:4f:61:01:3f:6b:7b:39:0a:4f:a6:a5:37:be:d5:
0d:78:2f:32:ec:21:ce:49:28:3d:03:d3:91:fb:35:35:6f:7c:
05:7f:8b:47:bd:9e:71:47:2e:4b:8a:96:2e:06:c5:66:52:a0:
c3:f5:59:d3:a7:92:5b:b7:ac:cf:6f:0a:53:73:c8:3a:1a:f2:
52:3d:8c:41:8a:56:5b:ce:f0:10:d1:4e:a2:1a:ad:58:78:e7:
aa:01:5e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:59 2025 by rpki-client