Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
File: we7iyrhrXuQPwncMqMtcUMYrdVs.mft (raw, json)
Hash identifier: E10E4Z0SOOTQ8tihzA065qLq6D8t0MECDr0D3mVO92o=
Subject key identifier: 3D:39:00:EA:48:37:05:74:39:03:EF:DA:10:D4:F6:53:E7:5B:D2:62
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 019896DC1F241E92E5E6F128CB15D6FB5BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
Manifest number: 12A3
Signing time: Mon 11 Aug 2025 02:01:04 +0000
Manifest this update: Mon 11 Aug 2025 02:01:04 +0000
Manifest next update: Tue 12 Aug 2025 02:01:04 +0000
Files and hashes: 1: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (hash: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=)
2: we7iyrhrXuQPwncMqMtcUMYrdVs.crl (hash: whFcwzI80FEd3oEeynSmMUgr79t6maIYsW4yT1YuGKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:1f:24:1e:92:e5:e6:f1:28:cb:15:d6:fb:5b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Aug 11 02:01:04 2025 GMT
Not After : Aug 12 02:01:04 2025 GMT
Subject: CN=3d3900ea483705743903efda10d4f653e75bd262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:10:33:02:4c:fe:5e:74:b1:b1:e4:8d:2c:
8f:68:da:81:e4:65:df:5b:89:fb:38:42:04:e3:5d:
48:65:74:c7:8b:7c:c6:e8:7b:80:73:7f:7a:f7:11:
22:71:70:2c:3e:b0:ac:04:2f:02:1a:5b:95:dc:00:
eb:86:39:8d:47:0c:fa:7d:17:4e:80:18:38:e3:21:
54:3c:0c:3a:17:fd:f3:a0:4a:23:d6:3a:c6:af:5a:
3e:e7:46:3b:91:b9:a1:f3:52:75:09:b9:3a:a0:8b:
a5:e1:25:c8:01:c4:cf:6e:7c:c5:e6:0d:88:2f:37:
88:fc:1f:5b:9b:58:69:55:8e:20:36:96:9f:bd:f7:
3c:76:fa:3c:31:15:58:5b:0d:2e:a3:7c:56:01:33:
10:cb:57:b7:cc:a1:49:77:e1:f9:c5:2c:f7:26:5a:
7e:82:b7:ec:2f:be:71:cb:a1:11:94:06:6e:33:ab:
8a:80:f5:28:86:eb:44:67:0f:13:3d:66:48:da:a5:
c3:3c:2f:8a:9d:50:e5:91:12:fb:76:0e:48:3d:46:
d4:c2:77:43:2d:d7:de:9d:f3:d6:4c:33:ac:c8:4a:
f4:4f:66:ae:4f:02:de:5c:4a:94:e5:b0:d0:c8:59:
05:a9:9f:01:78:d8:ba:f3:97:42:df:44:48:d2:05:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:39:00:EA:48:37:05:74:39:03:EF:DA:10:D4:F6:53:E7:5B:D2:62
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ee:35:92:93:32:95:73:44:d2:e9:28:3e:52:98:52:0b:74:
11:08:17:f0:24:03:0e:36:11:52:35:b6:4a:77:99:e3:48:b4:
c4:8f:24:7b:85:ef:99:26:94:d8:e4:5b:ac:1b:49:a7:69:d6:
03:14:2d:e4:4d:70:ef:54:6f:28:e1:13:72:c7:62:e2:60:7b:
0a:c5:44:d3:a6:98:0b:b6:1d:1d:46:96:c1:c9:64:1b:7d:cd:
87:4b:9a:5a:72:7d:67:ad:a4:19:a5:cf:bd:fa:e7:ae:d4:68:
46:e8:f6:2c:83:63:73:63:57:16:5d:0b:57:10:af:14:ff:c6:
73:fb:e0:ff:c3:18:ee:d8:fa:d9:75:78:bf:06:d0:bd:0c:8e:
13:9d:d5:0a:79:6d:76:b9:80:06:a6:84:6e:85:65:ff:c6:1e:
10:21:1b:6e:29:10:ea:33:65:16:15:8f:a1:8c:43:4f:15:f4:
8e:a0:8e:04:7f:b8:18:10:68:a8:8d:be:6b:86:4c:7e:e3:5c:
47:a6:06:cb:da:a5:eb:7e:0b:2e:df:4f:0d:2b:52:75:be:14:
75:5d:0b:17:c0:f1:4c:a6:67:e7:02:a3:e7:04:10:10:0c:85:
61:93:fa:d2:1f:03:68:24:06:78:fd:f9:66:a8:af:b0:89:1c:
df:55:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:06:29 2025 by rpki-client