Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
File: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft (raw, json)
Hash identifier: LJDhW8EU+W8TP6Xm3E5rLNJAG9vSm/4diVxuLrJp0wo=
Subject key identifier: FF:0E:D3:6C:EC:B6:E6:0B:8F:26:E2:49:E1:91:92:89:4B:41:E4:8A
Authority key identifier: C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
Certificate issuer: /CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Certificate serial: 019889570A6A1A2F6165E393EAFBB29B58EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
Manifest number: 08D5
Signing time: Fri 08 Aug 2025 11:00:39 +0000
Manifest this update: Fri 08 Aug 2025 11:00:39 +0000
Manifest next update: Sat 09 Aug 2025 11:00:39 +0000
Files and hashes: 1: w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl (hash: mh30AkvGfaCP9Zc5xYzKijig0X/JbOJUz9KnPs6yE6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:0a:6a:1a:2f:61:65:e3:93:ea:fb:b2:9b:58:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c373fae99d651298845d22f89d8d2b2e1d13bc04
Validity
Not Before: Aug 8 11:00:39 2025 GMT
Not After : Aug 9 11:00:39 2025 GMT
Subject: CN=ff0ed36cecb6e60b8f26e249e19192894b41e48a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:7c:75:51:78:2f:72:b2:db:b1:4f:ea:11:
75:4d:3e:05:c9:1f:0f:85:53:bc:33:28:37:bf:13:
6a:d1:f0:b5:bb:49:f8:1e:33:ef:56:0c:06:c9:d9:
cb:3f:3f:1a:d7:38:1b:9c:d8:98:f7:76:00:07:2c:
22:7a:00:0b:56:58:ad:b1:b6:43:5a:60:37:04:19:
7f:25:28:c2:cc:1e:04:e0:a4:0a:f1:e8:e0:30:c4:
5c:27:67:32:34:a9:af:03:13:a9:c2:d6:8b:a9:6f:
5b:ef:92:66:b1:45:df:ca:2f:92:67:68:1e:2a:2a:
5b:8f:55:8c:45:e4:2e:18:1d:e7:a6:eb:8c:d4:f7:
88:f3:87:6b:d2:7a:89:3b:0e:70:cc:68:74:48:ec:
b9:1a:d2:73:4f:2e:67:f9:f7:f0:96:4e:de:da:52:
76:8b:b3:87:2d:60:be:dd:b3:6c:03:93:39:75:4d:
af:53:1e:7c:73:ed:94:e9:72:52:52:d3:89:49:9d:
6f:a3:5b:5c:e7:72:e6:15:64:3d:ac:4b:0c:59:c5:
85:2b:55:df:80:fd:8f:42:ee:27:7c:69:e5:78:ce:
81:c8:6d:41:5e:bd:06:e3:db:c1:df:bc:72:a4:8d:
3e:ec:38:a6:70:18:c8:61:66:9c:dd:6d:7b:be:87:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0E:D3:6C:EC:B6:E6:0B:8F:26:E2:49:E1:91:92:89:4B:41:E4:8A
X509v3 Authority Key Identifier:
keyid:C3:73:FA:E9:9D:65:12:98:84:5D:22:F8:9D:8D:2B:2E:1D:13:BC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8ce795-3fa9-4cb7-831a-1de56e475fbf/1/w3P66Z1lEpiEXSL4nY0rLh0TvAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:82:22:f9:d6:b1:2b:46:1a:f7:e6:4d:10:20:92:9a:ac:
ec:44:a6:c8:83:fd:2a:36:15:df:71:32:b8:d8:76:18:33:53:
c1:e7:c0:10:84:0e:69:a4:41:f6:e4:df:b6:e7:cc:77:d6:ff:
0a:0b:97:b4:df:21:7e:6d:51:e0:29:b7:fe:93:d7:5d:b1:60:
04:49:14:65:f2:c4:6e:39:96:64:51:56:90:ec:a8:bd:5a:3e:
f8:57:8c:bc:2a:17:1c:e1:2f:a5:b6:aa:4a:fd:7d:82:85:db:
d3:26:63:da:f9:16:22:c4:49:f8:27:19:ff:5e:ed:dd:1d:2c:
b0:b2:0a:f8:24:e3:ae:f2:38:31:ac:6e:46:fb:9f:84:0c:57:
2c:52:82:eb:c4:5c:d1:99:47:e4:47:49:21:0e:42:70:99:5f:
dd:90:2e:2d:16:ed:d7:92:59:43:2d:45:f9:51:5f:1d:04:cb:
6b:ff:8f:f0:0f:89:53:fc:84:36:64:c7:c1:b6:c4:4d:5a:aa:
ae:15:e7:07:31:ad:36:2b:ee:2b:9c:32:a4:3f:97:e2:a0:9e:
03:ae:6d:21:cb:c6:63:38:b5:b9:95:77:ef:3d:71:3f:da:a4:
f1:d3:9c:c1:f9:9d:26:c0:6d:46:5a:2e:e6:d1:67:76:83:49:
87:7b:fe:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:37 2025 by rpki-client