Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
File: mWsinL82Z6zid7FgBcOQctBnP88.mft (raw, json)
Hash identifier: bDxkULs1LL+hIF/OJo+inAA+Pz6J2rehZyxnkoxcvO4=
Subject key identifier: 09:D5:99:6C:FE:C8:2D:00:4A:34:24:2E:CA:35:14:15:CF:B8:BA:0F
Authority key identifier: 99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
Certificate issuer: /CN=996b229cbf3667ace277b16005c39072d0673fcf
Certificate serial: 01987486FA5C424C10ACCDC6F34B80C2A1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
Manifest number: 047D
Signing time: Mon 04 Aug 2025 10:00:59 +0000
Manifest this update: Mon 04 Aug 2025 10:00:59 +0000
Manifest next update: Tue 05 Aug 2025 10:00:59 +0000
Files and hashes: 1: YKl2f2IPF1HilabBLdWdBFhWqWU.roa (hash: Ji5xPVt5I1nXvu8659S7ksrNu2RDx/GRkGsd+dxvHXE=)
2: mWsinL82Z6zid7FgBcOQctBnP88.crl (hash: h32akFoRgU9lN5rubuKSSl6J1KYvrKwQoCvAhu54icc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:fa:5c:42:4c:10:ac:cd:c6:f3:4b:80:c2:a1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996b229cbf3667ace277b16005c39072d0673fcf
Validity
Not Before: Aug 4 10:00:59 2025 GMT
Not After : Aug 5 10:00:59 2025 GMT
Subject: CN=09d5996cfec82d004a34242eca351415cfb8ba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:3a:cb:f2:ce:43:f3:3d:8c:40:c9:ed:8c:
65:33:f1:3a:0c:3a:15:fc:7e:08:4d:d4:44:a6:ed:
4e:37:65:6c:6d:8b:34:7a:7e:30:83:2a:e4:2c:38:
10:5f:93:40:26:dc:96:bc:c6:16:3c:6d:61:e4:7e:
b1:aa:a7:54:39:24:c8:a9:9e:c3:de:c6:30:ca:4c:
6b:f8:a7:db:fa:db:03:5a:82:da:64:df:6a:40:c2:
57:dc:57:e5:77:62:00:3c:d4:6d:1f:8a:83:38:7b:
55:f8:fa:c8:32:68:6b:c8:62:ff:24:ee:ef:cb:6e:
be:7b:1d:7b:a2:6a:9d:9d:c6:67:81:80:01:12:24:
a1:c4:ee:31:0d:fe:24:02:e1:b0:8d:8e:92:9c:4b:
7d:ef:7c:91:6a:b3:b7:d9:38:c3:9f:9c:3c:0c:6d:
20:15:9b:21:bd:d7:5e:cf:1b:38:77:4e:5f:0d:77:
e2:30:15:b9:a5:ef:af:6c:b8:36:84:0f:61:7d:49:
db:1d:df:ac:22:df:13:22:2f:30:8e:9d:ba:98:76:
dc:1d:01:63:d9:82:49:83:83:65:11:2f:0a:1f:21:
21:c8:36:d3:de:0b:dd:c8:ee:b9:92:ca:1e:73:89:
c5:10:d9:1e:77:52:01:d0:a4:78:e1:be:d1:d3:99:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D5:99:6C:FE:C8:2D:00:4A:34:24:2E:CA:35:14:15:CF:B8:BA:0F
X509v3 Authority Key Identifier:
keyid:99:6B:22:9C:BF:36:67:AC:E2:77:B1:60:05:C3:90:72:D0:67:3F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWsinL82Z6zid7FgBcOQctBnP88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3663ba-a80d-4108-8708-0b15d97ad561/1/mWsinL82Z6zid7FgBcOQctBnP88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0a:f7:2f:c6:6a:9c:25:6e:9b:63:fe:ac:f1:fc:d3:f8:5a:
e4:72:b0:dc:98:b4:82:02:ca:5e:85:b3:9a:43:d7:e2:83:e5:
a0:1b:cc:69:db:16:88:8d:1c:0c:cc:70:71:d1:11:02:14:62:
d4:6a:7e:0d:79:fa:69:a1:4a:4d:cd:74:ea:bc:19:56:c9:4b:
a7:e2:b3:d0:95:cd:5c:2e:fe:a9:70:23:ee:20:93:24:a3:e3:
a6:8a:a0:e9:31:59:db:25:1c:b8:19:02:db:a1:3f:b0:d3:31:
71:61:2a:7d:3a:32:6b:9a:92:80:f2:8e:47:bf:4e:fd:0e:65:
53:82:10:ee:19:ce:13:83:53:48:e8:e6:33:f1:8f:0d:d7:d2:
09:b0:46:30:8e:83:20:db:58:89:d9:da:ed:0b:a0:53:18:2c:
19:9e:51:5a:75:06:33:6b:08:00:be:f4:6a:4d:fa:88:00:3a:
82:62:cd:c0:11:07:35:83:75:3f:24:f4:0d:6e:33:7e:6c:46:
50:d8:8f:a2:8d:86:61:83:31:00:ef:26:2a:d3:d9:2f:f7:55:
01:75:f9:a5:48:9a:06:b3:13:de:4e:0a:dc:9f:0a:b9:e7:c0:
f5:6c:38:a8:8d:99:0d:9f:25:a1:a4:97:3f:e7:63:3b:02:66:
53:6b:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:30 2025 by rpki-client