Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File: w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier: JaTjegdmG/bjOXN44LgZ8dxM38n7zrb9NXmoxvMyK2s=
Subject key identifier: F0:A1:EF:EC:A0:0B:D2:30:F4:5C:EE:39:36:08:FB:4B:30:63:74:6B
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer: /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial: 01988D343E6CC04316BAFB0EF6A191872414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 05:01:07 +0000
Manifest this update: Sat 09 Aug 2025 05:01:07 +0000
Manifest next update: Sun 10 Aug 2025 05:01:07 +0000
Files and hashes: 1: GzCIBu4tHiFH76_Ly9Ei_0SMBpg.roa (hash: ucUps3PWBgmn642QIizMtNVpME3QV9nJ//n0R1ijDxA=)
2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: CSPK8dgL10UQIvGSTOtq60SQZt563B5aqUk8TiyXBkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:3e:6c:c0:43:16:ba:fb:0e:f6:a1:91:87:24:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Validity
Not Before: Aug 9 05:01:07 2025 GMT
Not After : Aug 10 05:01:07 2025 GMT
Subject: CN=f0a1efeca00bd230f45cee393608fb4b3063746b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:2d:ec:97:57:86:8b:1d:5b:d6:92:9a:2a:
ea:08:a1:96:2b:f3:e3:5c:35:07:41:91:61:3d:6a:
26:21:e2:b2:3e:93:52:80:e7:8f:e2:e8:46:7c:fa:
da:67:31:e1:0f:9a:6a:8f:75:37:7a:35:d6:da:c8:
8b:b8:67:37:7a:ea:f5:5b:b1:28:cc:b9:02:7d:b5:
be:51:68:52:3e:58:a1:7d:0f:ec:66:c2:8f:cc:d1:
4c:6f:39:97:8e:2b:88:f8:e3:08:87:38:0b:68:a4:
e7:de:e5:a3:4b:29:fb:1d:4a:de:82:5c:7a:33:e4:
46:34:3c:fb:29:ae:69:22:3d:3f:16:7a:d8:f0:43:
ac:19:38:49:4a:a6:46:dd:8b:a9:d2:8e:e7:6c:58:
2a:64:5c:54:db:d0:b4:45:51:da:fb:ae:e0:20:ab:
38:cc:68:1a:ef:4e:1c:44:69:74:1a:f0:af:05:db:
ab:f2:08:d4:f8:ee:d8:91:58:d8:da:cb:50:3f:f6:
05:b0:29:63:51:b9:5c:f5:2e:38:ba:f8:06:01:ee:
06:04:35:a2:e7:96:2e:72:4a:7e:73:54:10:ee:fd:
62:ff:b7:cc:99:62:3c:e4:13:47:67:59:b6:23:db:
22:ad:a3:db:53:28:13:b5:25:b4:e7:8f:7c:7a:cd:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A1:EF:EC:A0:0B:D2:30:F4:5C:EE:39:36:08:FB:4B:30:63:74:6B
X509v3 Authority Key Identifier:
keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b0:4c:90:64:47:8b:66:92:b3:03:13:f8:0b:c9:27:a6:90:
dd:ef:02:75:e4:6f:1f:23:3e:b1:33:84:23:35:7b:f3:ef:89:
b8:25:94:b1:a8:20:8e:c8:72:a4:67:52:f9:79:90:d8:f6:62:
d9:e9:bb:07:dc:a4:b1:dc:d2:62:bd:fa:9b:dd:6f:a0:ae:5b:
b6:4e:66:06:8c:01:ae:5d:0a:b2:4e:dc:e8:ed:2c:45:fa:44:
5b:a6:a4:87:14:ea:df:d4:a0:16:33:83:5f:82:4f:1e:72:f6:
c7:40:9d:d9:2d:7f:ae:11:33:45:1c:78:6f:fc:6a:6e:83:90:
68:81:f6:50:33:f9:18:66:e7:c2:f2:f7:b1:ec:ca:d7:ae:0f:
22:af:6a:c8:de:23:e9:0c:ef:d0:de:43:be:5d:db:94:6c:66:
ef:aa:06:31:d0:8c:27:4d:64:ad:7f:f3:f9:3f:c4:cb:f1:f5:
e9:a2:e8:e4:16:8c:4e:7c:23:ad:cd:4b:af:c2:23:fe:de:3d:
be:9b:08:92:cc:8f:54:ec:b6:ee:a6:10:10:a4:6c:b8:9b:5f:
40:b7:18:14:6c:ff:b4:2e:fc:d8:80:39:45:d0:bc:62:31:c6:
11:86:54:2e:27:49:00:66:f7:e9:e1:e5:2f:28:13:04:3a:6e:
10:14:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:42 2025 by rpki-client