Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: 7U7li3w0sbHO6wzM9yyorQzdDEkP1AlmQ3eZk4Nyovk=
Subject key identifier: 2D:1B:D2:A9:16:40:FD:90:F2:85:69:85:0F:0E:7A:29:8A:CE:9A:94
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 019873E24BFEA3FE99D6CF0CD92FDBFC1A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:01:07 +0000
Manifest this update: Mon 04 Aug 2025 07:01:07 +0000
Manifest next update: Tue 05 Aug 2025 07:01:07 +0000
Files and hashes: 1: TPJl-AnyNAOqe20bKX-5t3SrM4E.roa (hash: X6UgSBrAhCQSnYi9DhkcF/hdYKpsagcSW2GIdlVKxUg=)
2: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: An5rnAWZNNtQOQnwqN2XXWvoBsYIU2fyRUZHtW0VYmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:4b:fe:a3:fe:99:d6:cf:0c:d9:2f:db:fc:1a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Aug 4 07:01:07 2025 GMT
Not After : Aug 5 07:01:07 2025 GMT
Subject: CN=2d1bd2a91640fd90f28569850f0e7a298ace9a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:81:fb:09:d5:2a:eb:99:2e:1a:fd:e0:35:cd:
62:31:b3:c3:a6:33:67:19:47:44:41:7b:46:bf:2d:
d0:3a:62:4c:00:72:dd:d6:b1:63:e0:ff:ad:03:e5:
8b:39:1d:5e:a7:d8:10:72:3c:67:46:76:90:8e:cb:
5d:b8:dc:10:ad:79:51:74:e7:ec:77:ad:28:62:1a:
55:70:15:91:79:e0:04:6b:a7:fb:50:aa:c0:da:7e:
ff:cd:07:cb:ba:0f:33:ae:3a:6f:7d:3c:f0:b5:67:
9d:f1:84:f9:ea:77:3d:8f:64:1e:ff:27:36:ee:75:
5a:23:2f:04:37:94:e6:63:45:1f:69:b9:a3:23:6b:
e2:5b:cd:e6:4c:00:f2:84:8d:76:5c:dc:54:f2:db:
d7:45:d2:7f:cc:a5:64:04:aa:a9:25:4e:3a:75:a1:
32:be:84:5a:74:87:3e:e4:d3:9d:f0:16:6b:ad:8b:
15:41:32:eb:55:3e:15:3e:9f:6b:9b:12:45:b9:bd:
89:93:38:47:92:3f:95:83:96:42:af:6d:38:14:da:
0e:31:c0:f0:c5:3c:55:39:4e:79:b6:14:8f:7b:21:
d4:1e:c7:57:56:a4:82:99:47:38:85:13:f9:76:f7:
5f:c6:f0:0f:64:76:d1:4a:89:a9:8f:c8:3d:0d:a1:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1B:D2:A9:16:40:FD:90:F2:85:69:85:0F:0E:7A:29:8A:CE:9A:94
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0c:ea:5d:b6:10:b3:80:8d:fb:96:63:cd:fb:52:a0:fe:8e:
dd:50:14:94:b8:7b:71:4b:5a:95:64:9b:4a:c9:37:ef:99:bd:
24:b7:bb:44:7d:27:2b:ee:09:aa:54:16:e5:9d:5e:1c:da:da:
52:83:1d:6d:9d:06:02:5a:46:15:3d:ee:a2:da:9d:c8:b1:3f:
08:23:a2:30:47:74:9f:6d:f3:c5:79:55:25:04:e2:28:25:ce:
fe:f0:54:5c:c1:90:fb:78:f6:56:2f:bf:14:78:21:d8:ee:ff:
c7:5c:a7:be:2a:d3:59:ce:2f:69:55:f6:b9:2c:54:c0:7e:29:
7b:08:06:e8:a7:aa:6b:d6:28:f0:9b:21:3a:3c:b2:24:ae:46:
46:99:b5:9c:e0:8a:e3:88:c5:75:fb:f3:d9:c6:5d:ab:40:7c:
68:ea:b7:1e:21:a1:46:f1:d8:3e:8f:25:bd:7e:29:64:9a:94:
d4:5f:9e:e4:db:d6:5a:d3:f7:b3:4a:81:74:23:ee:32:e4:81:
57:f5:ac:82:8f:3a:7a:40:f3:3c:f2:91:6f:68:07:4a:2f:b0:
12:3f:5e:c8:10:28:05:c1:29:2b:b3:b1:16:3c:17:fd:ac:19:
8a:80:10:17:81:5c:16:43:87:02:df:0c:bb:be:68:42:4f:38:
0b:b0:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:00:04 2025 by rpki-client