Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
File: w3oiGyndRjBow6jVysFGsFe1qe0.mft (raw, json)
Hash identifier: Ic0n/0Q/Lw0uUZi9SRHYUm3t/jdJeft9orf6IAF+ItE=
Subject key identifier: 39:39:13:95:1F:D0:07:73:E3:31:A3:C8:1D:D5:21:71:10:31:47:DC
Authority key identifier: C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
Certificate issuer: /CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Certificate serial: 01985BA2B18723BD75435DF8713249771722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
Manifest number: 1266
Signing time: Wed 30 Jul 2025 14:00:45 +0000
Manifest this update: Wed 30 Jul 2025 14:00:45 +0000
Manifest next update: Thu 31 Jul 2025 14:00:45 +0000
Files and hashes: 1: I_YmXjobjQiqgaE7GnBooBc13Bo.roa (hash: uhenmFA0jnoDV3gl2RrmVWDxmBkSpRWlCD4TJWA6V5M=)
2: w3oiGyndRjBow6jVysFGsFe1qe0.crl (hash: UpJs9rVCXSWZd+pAc9l+rCoc+zFHCu1vtnXI4aZFVm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:a2:b1:87:23:bd:75:43:5d:f8:71:32:49:77:17:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c37a221b29dd463068c3a8d5cac146b057b5a9ed
Validity
Not Before: Jul 30 14:00:45 2025 GMT
Not After : Jul 31 14:00:45 2025 GMT
Subject: CN=393913951fd00773e331a3c81dd52171103147dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:9a:fd:d0:1a:a6:27:13:3e:77:c7:2c:03:
3b:33:2b:af:44:66:77:95:f9:cd:33:63:99:79:f9:
89:10:61:3d:ed:76:82:8e:65:bf:25:1b:0e:b6:e6:
e6:b4:60:4a:ef:3f:68:4c:69:86:d9:4c:b3:74:5a:
bf:68:3a:ae:4a:ff:54:34:82:e3:45:2a:3f:1b:e9:
69:5a:21:a5:95:c1:5c:7c:23:a0:11:fe:66:d9:ee:
9a:f4:a5:c2:55:80:cf:11:0b:17:bb:39:b8:ca:60:
52:7d:7e:f7:63:be:07:ba:cc:ae:ff:4a:d8:6f:71:
5d:c7:68:26:fc:d2:3c:2d:59:ce:c5:9d:c1:18:f2:
dc:0d:e3:18:2d:90:39:8e:b7:0d:01:b4:6a:2c:11:
be:12:fe:c9:d0:7d:93:f9:96:30:13:eb:a1:af:06:
d5:a5:95:81:0f:67:68:b3:5a:91:bc:74:c3:4d:fc:
b4:61:17:28:9f:e5:cd:4f:c5:6c:c6:dd:e1:8f:6a:
0c:12:d7:05:86:1e:30:b5:53:1a:c3:56:2c:2a:95:
bb:ee:39:eb:cf:1f:ea:19:77:29:59:a1:f8:e7:29:
ce:30:0a:d0:38:78:b0:1c:9c:99:6e:e7:6b:2c:fb:
ad:92:90:c7:5b:f3:92:2d:d8:e8:a6:60:be:7c:63:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:39:13:95:1F:D0:07:73:E3:31:A3:C8:1D:D5:21:71:10:31:47:DC
X509v3 Authority Key Identifier:
keyid:C3:7A:22:1B:29:DD:46:30:68:C3:A8:D5:CA:C1:46:B0:57:B5:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3oiGyndRjBow6jVysFGsFe1qe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3be914-9d1b-4e0b-bfd2-8bfcf906f76a/1/w3oiGyndRjBow6jVysFGsFe1qe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f5:ca:83:0a:33:8e:4d:1e:de:51:c0:15:bc:76:8f:9a:4c:
a4:76:a3:54:2f:4b:ac:21:65:5c:c1:19:c8:06:8d:af:f8:11:
d4:7c:5d:be:3e:4b:77:95:b3:f0:5e:6c:0f:58:ae:2e:f0:09:
9b:d4:0f:d3:73:8d:6e:e7:50:e9:87:bc:44:b5:eb:2e:98:c5:
d3:c9:fb:6a:45:b7:98:fe:60:b8:78:87:1c:b6:9b:92:0f:a9:
51:e8:2e:1d:5f:3f:57:ea:0a:15:d4:e7:17:41:92:0b:3a:42:
79:d6:09:0a:ed:27:8e:22:3a:5c:b6:c2:a8:16:bd:0c:14:37:
16:37:80:be:79:b6:f2:b3:fd:e0:94:bd:86:c7:da:29:73:e6:
24:c4:9f:64:3a:78:f1:f5:37:25:9d:5e:36:de:d9:01:04:c1:
c6:ff:3e:70:42:36:8d:d1:58:eb:8c:b9:29:a3:66:75:75:cb:
e5:78:dc:63:ce:db:5a:20:73:6a:d7:ae:bf:a1:5c:b1:01:0a:
69:aa:4a:7f:78:26:26:c4:47:e3:a8:50:68:f3:01:08:bc:ee:
7d:c0:f3:38:4d:87:ce:b5:d8:1e:11:d2:7c:4d:27:08:21:a6:
87:4f:8b:16:f2:fa:69:e0:73:81:1a:60:3f:b9:d5:a6:81:02:
0b:1c:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 16:05:26 2025 by rpki-client