Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File: w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier: 9veMGMY4PK10/camAQvLrFyHPm06QPmRmtFJsCcaxYQ=
Subject key identifier: 03:12:2C:ED:6E:BF:F7:34:FD:9C:FB:41:92:63:A2:39:8F:FE:11:D6
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial: 019874BE59737BCD632478A957070FF333C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number: 1273
Signing time: Mon 04 Aug 2025 11:01:28 +0000
Manifest this update: Mon 04 Aug 2025 11:01:28 +0000
Manifest next update: Tue 05 Aug 2025 11:01:28 +0000
Files and hashes: 1: I_YmXjobjQiqgaE7GnBooBc13Bo.roa (hash: uhenmFA0jnoDV3gl2RrmVWDxmBkSpRWlCD4TJWA6V5M=)
2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: DODOu4qnxLZiPyWI9c1K9tpiXouAQBvZ4c5hIluxiQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:59:73:7b:cd:63:24:78:a9:57:07:0f:f3:33:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Validity
Not Before: Aug 4 11:01:28 2025 GMT
Not After : Aug 5 11:01:28 2025 GMT
Subject: CN=03122ced6ebff734fd9cfb419263a2398ffe11d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:1d:28:39:3b:26:2f:35:a1:a1:39:d0:c0:
bc:e0:dd:85:3e:31:f0:a5:4a:fb:6d:d1:96:ea:a5:
bd:1f:9d:ab:1e:ea:91:cc:1b:73:68:0b:d6:ff:8c:
e3:a7:95:ae:14:12:d3:16:96:01:85:4d:02:b3:a9:
2b:af:36:fd:2a:03:94:4d:e2:bd:ba:7a:9c:da:99:
e5:ae:e4:df:15:1c:8c:25:52:b7:ae:39:51:44:f0:
3d:56:a8:26:fb:ab:cc:9f:a1:05:bd:e3:1a:1d:89:
5a:d1:78:e0:24:b3:dd:7c:7d:2f:5c:6f:c0:82:9f:
0b:c0:c5:f0:6c:3a:0e:da:34:5e:a2:d5:30:18:41:
29:c8:8e:68:ee:0f:6b:cf:a4:79:15:52:6f:c0:05:
37:1f:1a:9f:2a:47:0f:6d:93:99:93:ee:6d:2e:cf:
67:07:24:24:92:45:9d:da:37:98:c5:8a:4d:e2:3d:
f1:2a:17:54:21:6f:75:3f:4b:ac:93:ce:1b:0f:81:
49:0e:1b:23:89:5d:c1:96:e4:1a:a3:f4:5c:8a:21:
9b:37:f5:0f:9e:a4:1d:16:5e:d4:d9:f7:a9:29:8f:
7b:14:1c:91:e5:c5:8e:47:68:fe:83:8e:83:32:ea:
b5:fc:b9:4f:88:ce:be:0b:af:5e:72:4d:57:df:d4:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:12:2C:ED:6E:BF:F7:34:FD:9C:FB:41:92:63:A2:39:8F:FE:11:D6
X509v3 Authority Key Identifier:
keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0e:55:21:6d:32:62:ec:62:ec:3a:fc:a2:55:41:81:71:a3:
2a:ad:a2:ed:d7:e9:44:c2:ab:33:f3:9b:89:17:bd:7c:95:35:
14:67:83:b4:03:25:d6:57:f1:de:6e:fa:56:51:ad:e4:8c:0d:
94:9f:e3:08:1a:9e:bf:39:7f:7a:a0:78:0a:d0:74:32:fb:12:
95:d5:fa:9a:f0:4c:de:0b:f1:6d:6c:00:93:23:ee:09:9e:67:
ea:11:90:20:6a:21:bc:db:14:07:33:73:a0:d0:8f:57:b9:fe:
2d:89:9e:58:25:ae:a2:7d:d0:7f:a3:f0:3b:fd:a2:3b:d1:2a:
5c:22:57:2e:32:5e:90:94:77:bd:1e:6f:43:fd:9e:2a:7e:10:
70:6d:a9:b1:12:73:fb:b8:80:a3:10:d7:6e:d9:77:c0:42:66:
6b:6d:ea:9c:6c:02:c1:fc:3b:66:0f:4b:d6:b2:e6:9d:cc:7e:
37:eb:f7:d7:28:67:76:69:0d:c4:a7:31:88:f4:84:e7:27:2e:
bc:38:fc:21:dc:09:8d:c4:cb:c2:a9:d2:2b:f5:ef:1c:2e:cd:
6e:b2:2c:da:70:ca:b1:af:ad:cf:4a:fc:8c:99:35:d6:ca:88:
d0:9b:d7:c5:87:4a:f5:59:3f:97:12:98:43:8a:da:48:09:23:
be:7a:bd:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0vllze81jJHipVwcP8zPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzN2EyMjFiMjlkZDQ2MzA2OGMzYThkNWNhYzE0NmIwNTdi
NWE5ZWQwHhcNMjUwODA0MTEwMTI4WhcNMjUwODA1MTEwMTI4WjAzMTEwLwYDVQQD
EygwMzEyMmNlZDZlYmZmNzM0ZmQ5Y2ZiNDE5MjYzYTIzOThmZmUxMWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF4dKDk7Ji81oaE50MC84N2FPjHw
pUr7bdGW6qW9H52rHuqRzBtzaAvW/4zjp5WuFBLTFpYBhU0Cs6krrzb9KgOUTeK9
unqc2pnlruTfFRyMJVK3rjlRRPA9Vqgm+6vMn6EFveMaHYla0XjgJLPdfH0vXG/A
gp8LwMXwbDoO2jReotUwGEEpyI5o7g9rz6R5FVJvwAU3HxqfKkcPbZOZk+5tLs9n
ByQkkkWd2jeYxYpN4j3xKhdUIW91P0usk84bD4FJDhsjiV3BluQao/RciiGbN/UP
nqQdFl7U2fepKY97FByR5cWOR2j+g46DMuq1/LlPiM6+C69eck1X39TiJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMSLO1uv/c0/Zz7QZJjojmP/hHWMB8GA1UdIwQY
MBaAFMN6Ihsp3UYwaMOo1crBRrBXtantMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDIt
OGJmY2Y5MDZmNzZhLzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zYmU5MTQtOWQxYi00ZTBiLWJmZDItOGJmY2Y5MDZmNzZh
LzEvdzNvaUd5bmRSakJvdzZqVnlzRkdzRmUxcWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFg5VIW0y
Yuxi7Dr8olVBgXGjKq2i7dfpRMKrM/ObiRe9fJU1FGeDtAMl1lfx3m76VlGt5IwN
lJ/jCBqevzl/eqB4CtB0MvsSldX6mvBM3gvxbWwAkyPuCZ5n6hGQIGohvNsUBzNz
oNCPV7n+LYmeWCWuon3Qf6PwO/2iO9EqXCJXLjJekJR3vR5vQ/2eKn4QcG2psRJz
+7iAoxDXbtl3wEJma23qnGwCwfw7Zg9L1rLmncx+N+v31yhndmkNxKcxiPSE5ycu
vDj8IdwJjcTLwqnSK/XvHC7NbrIs2nDKsa+tz0r8jJk11sqI0JvXxYdK9Vk/lxKY
Q4raSAkjvnq9tA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:36 2025 by rpki-client