Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier: vw2D4R2olkE4M9tht1UbDwX+iMEYNb0KwbusY+t8JJs=
Subject key identifier: 0B:8F:EE:62:64:4D:7C:1E:12:58:28:70:48:92:8A:08:82:4A:01:DC
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 019A4F62CCF94A21F907773FD9585F7A236B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number: 0DEE
Signing time: Tue 04 Nov 2025 15:01:06 +0000
Manifest this update: Tue 04 Nov 2025 15:01:06 +0000
Manifest next update: Wed 05 Nov 2025 15:01:06 +0000
Files and hashes: 1: lGKMR71wIiss24ARjCT6dglSzeg.roa (hash: pOKk5O831tF+GU5ZB5nOM1eHOcUVJqNluw5xZGpLXhs=)
2: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: RHr6ind/DLcUS2EM00aY0hbdTFnsJeKcxf8JYaxIwh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:cc:f9:4a:21:f9:07:77:3f:d9:58:5f:7a:23:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Nov 4 15:01:06 2025 GMT
Not After : Nov 5 15:01:06 2025 GMT
Subject: CN=0b8fee62644d7c1e1258287048928a08824a01dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:28:47:a2:34:9c:6a:9d:b5:d4:69:3b:a9:26:
bf:7a:49:71:53:4c:4e:b1:11:d7:2c:72:69:7e:d7:
dc:06:ec:8c:00:29:4b:c8:66:c4:3a:0e:15:3d:c7:
e3:ac:d1:75:5c:a8:a2:69:9c:0a:cf:63:bd:02:bf:
bd:e0:4c:93:21:fd:5e:60:b0:5a:5e:ca:0f:b4:ff:
57:c5:11:b2:ac:e8:a1:85:29:63:1e:78:70:38:6a:
45:f5:d4:c1:ce:5a:a2:91:f0:35:ec:bb:6c:35:a9:
0b:5e:d8:a8:3b:f3:55:eb:97:5c:88:fa:13:f4:dd:
29:bd:68:94:d8:29:e1:d5:30:83:f9:fc:e1:c4:9d:
a8:7e:a5:44:c3:01:07:81:fb:e5:5b:b0:35:c7:9d:
ca:62:3f:4d:0d:1c:4d:32:67:04:15:a1:e2:e1:10:
3b:e5:1f:c5:8d:43:bf:56:c6:43:d7:cc:cb:9a:e9:
73:9b:2f:dd:50:e8:63:e4:b9:ef:a7:ef:9f:2f:1c:
13:a5:11:22:e9:88:26:41:89:44:7a:ae:95:56:80:
22:eb:1c:4f:3e:ef:5c:fa:06:d9:83:2f:cc:cb:c1:
62:ca:6a:2c:a8:cd:53:06:33:03:d4:1a:8e:e5:ce:
14:d6:04:9f:bc:02:76:46:eb:55:59:78:e0:31:94:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8F:EE:62:64:4D:7C:1E:12:58:28:70:48:92:8A:08:82:4A:01:DC
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:54:0f:21:df:73:86:8c:60:74:4b:9a:d8:0c:9c:6c:7f:9c:
c0:b2:40:35:18:89:58:02:6d:c2:92:62:41:c2:ab:6b:24:22:
35:44:21:9f:77:e1:e5:a9:35:36:f2:e8:27:00:c8:33:d4:bf:
8e:db:c7:fb:52:96:47:1e:db:6d:c6:0e:2f:f0:5a:0c:de:d5:
1e:e9:1c:b2:e3:83:4a:7b:aa:f0:5f:df:49:44:de:1b:3e:85:
86:bb:ba:d2:ea:a8:f2:4f:2e:aa:35:f7:f3:48:d1:f0:0f:b1:
7b:e3:15:55:6d:a9:e2:16:36:ec:88:cc:cd:0e:0a:6c:88:7b:
85:d4:25:56:72:48:71:3f:90:63:b6:12:68:f8:6c:7d:7f:3b:
c6:f6:9f:8c:c2:66:af:ec:f9:a7:db:cb:79:6d:f4:08:15:93:
c3:89:b2:2d:e9:67:22:4b:4a:7a:f0:1a:8e:39:31:ec:c2:f5:
0f:67:2e:0c:ca:a2:30:9d:38:80:17:d1:a8:3b:3a:87:69:e2:
5d:2e:aa:d8:79:9c:4e:03:16:4d:fc:94:39:d6:16:6a:48:1e:
3e:6f:9e:a0:b1:3b:98:8a:f7:f7:e4:cc:7b:88:7c:82:95:b9:
2f:62:67:ca:d6:48:7f:41:93:80:63:fb:99:10:78:f5:a1:39:
1d:8b:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:27 2025 by rpki-client