Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: QinVbkUTa7nZb6ki5uyjPj/ixqZZg4Hqc0iE2gmIenc=
Subject key identifier: A1:B3:67:77:3C:B9:FC:0E:B7:BA:74:1B:17:06:C0:6B:AC:70:F0:91
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 01987F0AD11E3EC34A2C97EECB270D74B3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 01A1
Signing time: Wed 06 Aug 2025 11:01:12 +0000
Manifest this update: Wed 06 Aug 2025 11:01:12 +0000
Manifest next update: Thu 07 Aug 2025 11:01:12 +0000
Files and hashes: 1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: 8WxZkXLBvVh4W4MBYVvcvCBfSBsUMMHnbb5qKTUAYg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:d1:1e:3e:c3:4a:2c:97:ee:cb:27:0d:74:b3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Aug 6 11:01:12 2025 GMT
Not After : Aug 7 11:01:12 2025 GMT
Subject: CN=a1b367773cb9fc0eb7ba741b1706c06bac70f091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:e6:e9:e8:fd:49:eb:15:63:75:af:74:b1:
31:01:f9:ef:bf:a0:4a:86:99:8d:03:1e:32:91:ad:
81:ce:6a:23:62:b3:4c:e1:23:4b:02:8a:47:61:14:
3e:73:3e:ad:4d:86:15:09:f5:6c:74:c8:3f:42:1a:
59:df:b4:d8:5d:b3:bc:2f:05:db:2f:f2:ce:94:de:
50:3a:0b:8b:d6:13:c5:89:36:82:73:19:e9:57:bc:
6d:f9:56:24:79:6e:86:f9:97:d9:f7:bc:63:95:00:
d8:9f:f6:a0:51:54:80:2e:9b:a4:a9:cd:ee:72:3f:
0b:64:30:ce:3d:cd:e1:91:5e:f1:6a:32:f3:51:b3:
88:13:e7:aa:f4:55:21:4e:79:bb:52:2e:49:21:0f:
f6:8e:69:4e:01:0c:df:8b:51:76:80:39:88:fa:dd:
4e:2a:be:1a:b8:1e:e9:31:42:e8:d9:bb:dd:a7:44:
54:28:fe:34:bc:ce:a9:dd:52:6c:07:bb:08:2a:c6:
1e:c6:5f:d3:8e:7b:00:4e:31:7f:36:28:e0:01:25:
15:a3:18:64:f3:5b:5f:31:b3:a1:37:82:7d:3b:2b:
4e:bf:47:60:70:1c:72:42:9f:36:9a:21:0e:09:d3:
d4:2f:0f:1d:dc:ad:29:d6:be:42:5e:db:7d:1b:04:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:67:77:3C:B9:FC:0E:B7:BA:74:1B:17:06:C0:6B:AC:70:F0:91
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:57:6b:9f:36:aa:dd:7a:fb:96:43:a6:45:00:83:ff:29:b2:
ac:46:02:57:39:1d:5d:c8:bd:cb:29:c8:05:3d:6b:38:0f:a2:
32:58:d8:56:b4:8a:7d:91:3e:e2:64:00:85:3a:bc:08:cc:cd:
f0:19:32:0d:f0:5c:44:a2:11:d9:b9:64:2c:ec:ee:67:6c:6c:
3d:46:5a:ed:e8:0e:b8:01:7d:8e:85:04:b6:50:5a:3b:f5:f8:
77:48:e5:00:c9:a0:2d:d0:24:c9:e6:64:6b:da:66:da:01:ca:
e8:b9:1d:5b:e2:30:e5:fd:d0:27:de:06:61:8d:f7:6e:c9:26:
4c:f8:d7:22:1f:15:cf:46:b9:c2:6e:9b:ed:10:6b:cb:3d:47:
4a:11:75:a8:9d:6a:a0:05:fc:f9:42:6c:ec:77:d7:ba:6f:1f:
9e:04:5b:85:b9:3b:8a:b8:df:b1:ba:86:62:50:9d:d4:96:54:
59:e7:1b:cc:f6:5a:c5:8c:49:75:62:27:52:54:3a:de:cd:d6:
2a:fe:5e:87:d9:20:ec:17:6d:7c:4c:b3:62:75:97:40:e7:22:
56:2d:6d:7b:a8:08:91:a5:43:a5:71:6b:07:b3:f6:46:75:44:
20:bc:51:e1:38:6e:45:e4:76:b4:32:13:80:02:78:e9:33:59:
0d:31:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:05 2025 by rpki-client