Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: emk+/YeB/SWF6ZhpEZasUkQTb/Ff4Rh/6TRGHVtW3+Q=
Subject key identifier: C7:93:43:7B:41:62:19:22:80:76:6C:E3:56:D0:40:6E:61:C7:63:C1
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 019847E586424C0C98BC35593254EA77420D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 13AB
Signing time: Sat 26 Jul 2025 18:01:21 +0000
Manifest this update: Sat 26 Jul 2025 18:01:21 +0000
Manifest next update: Sun 27 Jul 2025 18:01:21 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: 0MYaG+TiAjF7qCLTNz1jRd7lQBtE5QG4bwj+hOz+u4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:86:42:4c:0c:98:bc:35:59:32:54:ea:77:42:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Jul 26 18:01:21 2025 GMT
Not After : Jul 27 18:01:21 2025 GMT
Subject: CN=c793437b4162192280766ce356d0406e61c763c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:96:4c:79:3e:36:94:64:f6:f6:b3:1b:5e:
41:c6:99:f1:87:f9:19:6f:ae:d6:1a:3b:61:06:98:
6d:42:6c:c0:b0:58:32:f8:f2:27:c2:74:a6:16:9a:
f8:51:1f:fe:56:0c:eb:30:0f:30:3a:2c:04:a8:46:
86:a7:b7:7c:85:7b:f7:1e:24:4b:0e:07:0e:4f:1e:
38:34:41:2e:3b:98:00:e4:60:da:e5:8b:01:11:b9:
03:85:ab:30:1a:78:cf:8d:52:00:1f:29:39:7f:1a:
a4:85:89:c8:d0:5e:81:de:5b:14:aa:00:3a:fd:d2:
3f:63:9c:46:0d:72:08:f9:22:41:fe:3c:24:c5:56:
f6:d6:2b:65:58:a7:0a:e7:72:86:ff:23:5d:1a:c8:
9a:d5:12:c2:4d:c2:53:cb:12:2f:48:de:35:d3:ad:
79:ca:30:cf:d0:fb:e8:ee:e2:7e:9a:15:a2:22:cb:
b3:7c:87:82:fe:fb:40:ed:a2:f4:1f:51:7e:2e:63:
c3:7d:7a:41:7b:08:6d:2d:ad:91:67:e6:0d:77:4e:
bb:a3:07:46:af:37:ee:08:22:7b:1f:fa:c8:06:af:
5d:25:a5:f4:dc:11:d4:8f:8a:f4:ae:d1:54:13:88:
e0:8f:72:43:d6:d3:1c:ef:bf:2f:33:03:a4:9d:19:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:93:43:7B:41:62:19:22:80:76:6C:E3:56:D0:40:6E:61:C7:63:C1
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a8:cc:a9:32:85:2d:e7:78:14:3a:32:0e:c9:d9:85:aa:37:
c4:25:20:54:87:a7:9b:ab:ec:e8:3c:5f:d0:bf:83:b3:f3:94:
6e:6b:82:07:19:ce:18:89:a3:96:41:36:02:02:ff:49:a8:e7:
5b:06:4d:cf:95:29:d5:78:bd:80:33:c7:b6:e8:d9:db:99:4c:
2a:45:c8:44:89:6c:4e:0c:54:bf:f9:d8:ff:2a:55:10:a7:b8:
18:27:66:5d:fa:2e:1f:e2:61:b3:8e:a8:f6:a8:af:82:65:13:
b0:c7:67:19:75:d3:2c:53:d0:9b:8d:39:2e:1b:9c:58:18:8a:
53:3e:84:db:31:af:92:54:e2:b9:12:d9:cf:aa:70:2c:26:d0:
0d:c8:04:cf:9b:c2:0c:93:37:a7:55:d4:c4:14:e1:c7:b3:13:
df:6d:3b:4c:58:c5:e0:4e:3e:0a:fb:b5:c0:95:83:e6:c4:e7:
ff:24:81:83:b6:28:37:91:9b:78:49:93:c8:3a:bc:01:e6:88:
ce:0a:bf:ba:a5:3f:ba:ee:0f:9a:dd:a0:5f:92:63:18:b0:80:
cc:da:04:57:7f:8c:4d:2c:b0:3e:9d:56:91:06:f6:88:4c:de:
f5:b7:31:af:85:7d:12:68:eb:98:07:a0:01:0a:87:1c:42:22:
1b:b4:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:41:38 2025 by rpki-client