Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
File: w-cV2UkPUh42oFb5mb-1bg8h_IY.mft (raw, json)
Hash identifier: C9zBmUXtkG+ZU1ehbbI9EKO6enEm04mGHX1SrQjPvdo=
Subject key identifier: ED:39:35:74:22:86:D4:15:1B:2F:43:CF:43:DE:41:8E:A3:56:78:60
Authority key identifier: C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
Certificate issuer: /CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Certificate serial: 0198D54DF8A4519C53EA81FA722FB732C9B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: 93cxze7c4JAF56bmAgg1bcYIt74.roa (hash: iEbAMOM9WFYV3hM+y+EZ0P2K3mOE4Q2PoJ4nGQhO9MQ=)
2: w-cV2UkPUh42oFb5mb-1bg8h_IY.crl (hash: J89iFpRGXokkXz7M30af//u+TwulJ0z6Px/ha6sUMTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f8:a4:51:9c:53:ea:81:fa:72:2f:b7:32:c9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=ed3935742286d4151b2f43cf43de418ea3567860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:b9:87:67:ba:0d:0f:c7:06:72:5a:90:f3:
56:0e:b5:23:f2:7d:62:a5:b6:2f:3f:d2:f6:4b:a2:
83:bf:26:ee:66:ad:92:fc:92:f2:98:1c:69:42:64:
f7:35:bb:55:fc:f3:4c:2f:e6:61:ab:f2:3f:6f:16:
18:58:d9:eb:62:fa:39:f2:94:c4:ec:f3:a3:51:5f:
d5:1e:70:7c:54:29:2a:e2:a8:be:cc:1e:a6:d2:12:
49:7b:34:10:73:e2:da:e3:3f:ee:03:d5:2e:83:98:
b7:78:eb:8c:51:af:56:91:c9:3d:c7:f7:2b:a3:a5:
99:e3:68:40:f4:d8:2a:8e:0d:50:e3:e9:6a:7c:1b:
48:0d:6b:6b:a7:52:2b:29:2f:38:e9:70:6a:76:b8:
7c:66:19:00:99:69:0e:a8:70:74:96:9a:92:6e:b9:
82:73:75:3f:6b:3a:e1:bf:d7:e5:ce:5a:43:86:fe:
0b:7e:94:d6:a6:1f:af:70:8c:2e:c2:2c:12:73:b9:
bb:c0:f6:05:6c:03:88:ce:16:ac:fe:6a:b2:11:3f:
34:12:a6:ec:d1:2d:0b:44:b4:42:54:91:08:88:4f:
f0:f0:87:a2:69:1d:bb:30:39:b2:8b:3e:fb:04:25:
22:a7:5f:0d:3a:7c:39:06:21:9f:02:5a:ac:47:71:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:39:35:74:22:86:D4:15:1B:2F:43:CF:43:DE:41:8E:A3:56:78:60
X509v3 Authority Key Identifier:
keyid:C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:fd:74:5b:db:b5:c0:ec:a2:64:6e:ce:55:e6:1f:8f:3d:bc:
ac:17:2d:80:db:71:66:79:e1:13:71:3e:2f:71:64:df:bc:b3:
31:f0:03:e6:d4:f3:55:4d:a6:07:11:ee:f5:47:ab:27:69:cd:
37:e3:26:e0:51:db:0c:b7:33:a1:ed:c7:44:0c:6c:a0:c8:5a:
10:6a:d7:11:ae:71:90:3d:de:1a:db:cc:c7:a3:40:87:1b:fd:
58:43:50:5b:13:fa:a8:79:10:15:74:7a:f8:53:1e:cb:c0:4f:
ec:8a:a6:10:3e:c9:58:89:53:5c:73:a7:a3:3f:b3:ca:6f:c3:
7d:1a:d4:63:52:4f:06:f9:df:e2:1d:08:ed:e3:1c:cc:32:27:
c4:78:ba:ff:07:3a:59:fb:07:be:a8:f8:00:19:87:04:d7:64:
d4:0f:5d:62:c4:f0:5a:fc:90:67:af:c2:ef:68:b5:37:3a:fb:
45:48:8a:c8:ae:c9:3b:26:9c:bb:f9:8a:dd:8b:f2:96:58:0a:
77:8f:3e:19:9c:54:92:cf:f9:66:34:1e:48:b0:26:b3:c7:02:
57:74:61:49:48:a2:fe:21:ea:69:94:e0:33:f4:65:05:2a:2c:
ed:1e:cf:f7:25:27:b7:eb:38:fa:ed:62:ac:ee:82:cd:b8:2f:
93:ed:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:16:54 2025 by rpki-client