Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File: mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier: /5Q0LoT4BwNYXpdW1vbZwnkKq2SyclYyC+kccBQjstg=
Subject key identifier: F8:1D:F1:FF:74:13:D1:38:3B:9B:03:2C:C3:C4:E9:0A:4C:CD:0E:B2
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer: /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial: 0198D515D60F3EBDEBD2F2CA65C6D050A946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number: 04AF
Signing time: Sat 23 Aug 2025 04:00:34 +0000
Manifest this update: Sat 23 Aug 2025 04:00:34 +0000
Manifest next update: Sun 24 Aug 2025 04:00:34 +0000
Files and hashes: 1: YKl2f2IPF1HilabBLdWdBFhWqWU.roa (hash: Ji5xPVt5I1nXvu8659S7ksrNu2RDx/GRkGsd+dxvHXE=)
2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: VvLCky4Z7B1X/AeRrrF81OkAzsuWoSV+sWAIdAdBgGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:d6:0f:3e:bd:eb:d2:f2:ca:65:c6:d0:50:a9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
Validity
Not Before: Aug 23 04:00:34 2025 GMT
Not After : Aug 24 04:00:34 2025 GMT
Subject: CN=f81df1ff7413d1383b9b032cc3c4e90a4ccd0eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:39:64:88:94:c7:87:dd:d5:9f:d6:92:c6:cc:
9e:70:f9:bc:73:64:a6:58:ce:42:69:0d:da:85:8a:
c8:03:e4:90:86:8c:f8:c8:40:80:c9:4f:36:37:4f:
68:8b:46:7c:5d:23:fe:5c:0a:54:d2:bc:27:c4:a7:
8c:5f:21:ec:76:87:ae:47:f9:ca:a9:64:80:93:76:
d6:22:05:3f:bd:d1:61:a0:a1:9d:08:cc:6c:7b:ad:
cb:6e:6b:b9:33:59:ce:31:10:44:ba:f5:73:8b:98:
48:b5:7f:c6:0b:cd:12:70:dc:74:7f:c9:53:cf:8e:
83:14:e0:7f:17:d2:2d:06:ef:c0:66:70:e4:5a:bd:
81:72:66:45:7e:d3:fc:73:be:a8:8f:b7:1e:c5:15:
3f:d5:a7:1a:15:b1:2b:ec:2a:73:75:44:e0:cd:1a:
f0:a3:21:d0:37:67:83:1d:00:da:a0:b0:0c:33:03:
71:f3:ad:61:25:aa:df:44:ce:fd:76:be:58:94:fe:
4a:87:d7:fc:71:f7:98:f9:ec:7d:74:a6:2d:56:73:
ab:94:1f:fb:dc:16:9d:c1:90:d3:ac:75:ce:32:1f:
33:f8:01:19:00:2a:ff:ad:60:8b:5f:93:f4:17:69:
13:9d:a8:10:e0:6e:d7:a2:57:fa:8a:05:0f:33:84:
27:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:F1:FF:74:13:D1:38:3B:9B:03:2C:C3:C4:E9:0A:4C:CD:0E:B2
X509v3 Authority Key Identifier:
keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6f:13:da:40:f7:d9:08:df:f3:e2:9b:15:20:e4:e0:e1:31:
fb:a2:e0:46:c2:9e:25:63:3d:98:28:9a:b1:f5:36:79:8f:90:
4c:1a:ca:2b:20:3d:aa:24:d3:b2:fa:ed:d6:cc:44:d5:3b:61:
fe:54:92:c1:46:ea:b4:05:b6:87:81:13:4c:0c:04:75:1f:6e:
fb:fa:ea:36:7d:6e:6e:08:a8:15:38:ff:01:9c:40:60:55:b2:
64:96:69:cb:c8:77:fd:68:e9:de:67:a2:cd:b2:d7:ab:b3:da:
93:de:5d:89:a0:ab:93:65:c8:6a:09:54:d3:55:40:2c:64:22:
59:1e:7e:a7:48:65:a6:15:00:3a:7e:dc:b5:b0:52:21:5e:91:
01:69:2d:c2:67:5d:88:2f:8a:52:80:04:df:ef:43:a2:74:4a:
8a:86:36:05:ea:50:d7:2d:5f:ed:56:50:43:60:09:2f:36:c1:
74:c7:d2:34:30:6b:6a:9a:8d:3c:f5:7c:14:a4:c3:70:5b:76:
e4:e3:56:fa:de:7b:86:44:e5:0f:0d:e2:54:41:60:d6:85:c9:
f9:60:c6:6b:6e:83:f2:44:3b:b1:cd:6f:b3:30:99:93:08:cf:
3b:4d:5f:8c:49:cc:c9:fa:45:88:74:03:0b:f9:fb:a5:48:d2:
ae:47:cd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:28 2025 by rpki-client