Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
File: w9yyPepY-X-tWnl7RXdB1b_msbA.mft (raw, json)
Hash identifier: RFatxkWtdo6N9EUjRFTYvhIg7O035jJ2EfZ+7/xDnvY=
Subject key identifier: D8:E4:B6:C6:3A:B5:4A:8A:E6:62:A7:8D:27:BA:63:8B:3D:20:DF:95
Authority key identifier: C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
Certificate issuer: /CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Certificate serial: 0198D5BC0E50CB81878FF5D7A4975A2B2C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:02:08 +0000
Manifest this update: Sat 23 Aug 2025 07:02:08 +0000
Manifest next update: Sun 24 Aug 2025 07:02:08 +0000
Files and hashes: 1: KvTnsIcL8m_pQPoNHudO5mxyd6I.roa (hash: LQX5cYypJwp0YO63rbhroJGzv3tgP3X96RXpqlbq7V0=)
2: w9yyPepY-X-tWnl7RXdB1b_msbA.crl (hash: p3UzYaMql57AN9GSijxHMASTC40NF51L7bWfPn0YJvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0e:50:cb:81:87:8f:f5:d7:a4:97:5a:2b:2c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Validity
Not Before: Aug 23 07:02:08 2025 GMT
Not After : Aug 24 07:02:08 2025 GMT
Subject: CN=d8e4b6c63ab54a8ae662a78d27ba638b3d20df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7f:50:4d:fb:b1:39:51:8b:71:67:79:c3:62:
c1:cc:25:71:a2:85:41:ef:c3:ae:d5:db:73:28:a7:
2e:66:76:92:1c:98:c8:ea:7a:73:ab:81:87:7c:7b:
28:cd:01:40:1e:3c:36:ef:8d:dc:b6:09:de:49:17:
c9:c6:fa:df:25:c7:76:5b:2e:b5:83:3a:5a:f2:ec:
59:de:ad:13:b1:b9:01:20:0b:f3:b9:a8:81:71:55:
8b:dd:19:9b:ae:d2:3e:a4:6b:ee:77:84:fb:2d:6d:
4e:da:9d:0e:41:12:73:a8:af:62:33:26:01:cc:97:
b2:47:16:dc:12:e8:2c:67:df:84:26:8e:0a:60:b6:
73:2f:78:35:db:c0:15:17:70:b9:72:25:5a:f6:a8:
bb:23:d7:1f:27:09:0b:dd:02:58:13:08:67:3d:d0:
55:f2:54:31:b6:f7:4a:f9:93:30:61:4b:7f:03:95:
59:ad:a4:56:45:67:7f:34:aa:ea:6a:b5:8e:42:8e:
2a:00:09:04:79:49:70:3c:e3:3c:04:ef:9d:43:fc:
cb:00:dd:2d:7e:cd:d8:f6:f2:f7:c4:3a:b0:27:da:
76:3a:62:f2:f8:de:90:50:b4:0f:3a:eb:e0:8c:27:
71:47:a2:0f:cb:3a:50:22:2a:36:da:3a:39:50:5b:
a2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E4:B6:C6:3A:B5:4A:8A:E6:62:A7:8D:27:BA:63:8B:3D:20:DF:95
X509v3 Authority Key Identifier:
keyid:C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:da:61:1e:d3:cb:b1:48:85:f9:f6:4f:a3:ca:ff:1a:10:ae:
b1:9f:c5:95:7c:e0:8e:4d:25:5a:d8:9d:d8:38:37:dd:65:6c:
aa:b2:0f:7d:c3:a0:93:18:12:62:8b:38:e6:e3:12:96:e9:8b:
50:8e:db:2a:72:d5:b2:14:c7:34:9f:55:90:12:97:b3:58:18:
cb:75:a9:85:d0:c3:16:3e:4e:d7:2e:1e:b3:2e:8c:e7:51:6a:
bf:8a:f2:fb:b3:14:03:5c:56:96:96:34:a8:7f:f7:59:11:11:
04:47:e4:28:f8:18:14:06:73:15:8c:90:91:9c:27:35:f0:57:
7b:11:68:6b:7e:b6:f1:a5:27:8c:95:d3:4a:78:5a:90:ab:1b:
2c:05:ef:09:1a:4c:8c:49:20:92:ef:b8:37:96:27:3a:25:20:
c1:90:6a:e8:d7:44:b8:89:e4:ed:23:76:95:fc:db:fc:36:41:
c3:34:86:7c:89:e3:51:82:d5:37:38:8c:e3:3d:81:d0:c5:d8:
ca:4b:d1:95:26:2d:ba:e3:58:31:89:fc:a9:2f:c3:d9:94:b9:
f0:54:80:c1:87:b3:1b:5a:4b:db:03:89:e7:a9:2b:13:1a:9b:
2d:64:e9:9b:8a:61:24:21:2c:44:68:c8:b9:56:5f:ab:3b:61:
0b:81:23:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:51 2025 by rpki-client