Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: e+iYfrNXaip+RssS4Z2vfwAevfVVCAiH/ZtyywYihmE=
Subject key identifier: 87:0E:25:B4:6E:C8:96:B6:CD:0B:DA:4A:2B:AC:F6:9E:AE:0D:D4:8E
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 019896A4C54896AB99C6B1BCAE3C0CC22B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 0E24
Signing time: Mon 11 Aug 2025 01:00:37 +0000
Manifest this update: Mon 11 Aug 2025 01:00:37 +0000
Manifest next update: Tue 12 Aug 2025 01:00:37 +0000
Files and hashes: 1: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (hash: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=)
2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: v/jE2kJPUdSeA58Kj1qXMvAKe3b5NN5hVcY7vj7K1Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:c5:48:96:ab:99:c6:b1:bc:ae:3c:0c:c2:2b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Aug 11 01:00:37 2025 GMT
Not After : Aug 12 01:00:37 2025 GMT
Subject: CN=870e25b46ec896b6cd0bda4a2bacf69eae0dd48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:c4:cf:4a:0f:37:87:81:b6:b7:9d:53:87:
27:3d:3d:89:f4:d9:17:81:b1:f6:dc:de:5c:c4:97:
c6:78:97:ea:d8:3e:44:f6:47:fb:82:b6:8c:af:7b:
c1:15:b7:3e:6a:59:47:78:03:88:42:cd:41:60:b6:
55:c6:6f:aa:db:58:5e:54:fb:5c:24:81:45:b7:c3:
14:88:76:c6:45:8b:62:13:e8:6f:6b:60:e6:bd:d5:
88:f0:0b:3f:a0:8f:91:a9:1a:4d:8d:8d:d2:79:58:
b8:03:10:ae:98:21:3a:e8:25:44:41:b3:50:51:6d:
ba:f6:f4:68:ef:9b:3a:e5:0c:a0:5e:29:cd:86:d9:
31:21:09:76:44:38:81:6d:d1:d3:e4:33:50:60:f3:
f2:93:1c:c8:3f:2d:14:d8:18:9e:e7:c4:76:cd:5e:
ba:40:8f:aa:46:7a:54:2a:d3:72:77:11:e4:1c:d0:
6d:63:4d:30:63:61:b6:bc:54:96:50:79:12:f9:2b:
02:7d:4d:5a:bb:03:67:36:86:01:92:4f:4d:a1:9c:
c0:c2:32:d5:27:a3:46:e3:d0:a8:44:70:06:0f:3c:
99:e9:e7:e4:03:c5:fc:9e:08:68:c5:91:b7:3a:22:
27:49:5f:2f:23:b2:cc:8f:fd:24:22:8d:8b:93:9a:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:25:B4:6E:C8:96:B6:CD:0B:DA:4A:2B:AC:F6:9E:AE:0D:D4:8E
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8a:a5:ae:ba:25:c8:a9:a7:87:c1:1f:78:e9:04:57:db:2c:
50:35:62:11:a7:cf:7c:b4:95:a4:35:0e:2e:90:87:30:53:0d:
58:e2:3a:08:af:6f:2b:a6:59:38:d8:d9:2f:5b:bf:65:6e:b8:
64:d0:63:42:67:bd:23:f5:cf:cd:95:0d:ff:dd:58:0d:8b:81:
5b:3c:6c:10:47:3b:57:22:3a:61:19:28:e0:f3:2c:28:56:e2:
25:f2:84:13:63:ae:95:6e:51:7e:81:d1:5c:a5:52:e5:db:80:
20:1a:3e:7e:ab:8e:ef:39:eb:11:e9:23:4c:63:d9:56:dc:3b:
3c:6b:83:b8:83:df:d9:97:ab:b3:76:24:b0:d2:52:84:9a:68:
6b:82:b4:5a:8f:14:8a:2a:75:d3:f1:6c:46:21:15:d2:1c:45:
ec:04:bb:3b:0f:85:4b:68:67:31:a8:97:07:65:be:bf:8b:cd:
18:df:de:e5:8b:99:3f:11:75:6e:14:0b:c1:04:79:42:cc:86:
d8:fa:b5:d4:f9:1d:31:b1:b0:42:dd:15:f2:51:ea:68:ff:6c:
96:04:b7:37:b3:92:d7:88:31:2f:fe:f3:c2:d4:fb:a8:13:56:
a9:29:b9:28:96:a9:51:82:65:22:d1:e4:8b:36:1f:74:3f:50:
25:24:cf:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:43:18 2025 by rpki-client