Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: 9QcPwaXKOvVYrsgp8ROdJ5JZ2lKIh1UH7OSGND4PuIE=
Subject key identifier: D6:34:EE:E3:11:9F:EB:B7:1C:1C:B6:B3:A2:FE:B0:D5:02:0A:66:5E
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 01984B54199B77FAA2677E3E1C284F6BD620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 04CA
Signing time: Sun 27 Jul 2025 10:00:59 +0000
Manifest this update: Sun 27 Jul 2025 10:00:59 +0000
Manifest next update: Mon 28 Jul 2025 10:00:59 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: kEF6tiz2Xsyj/WTxvPkKY06H6VnVZPwvodIY9HOh26s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:19:9b:77:fa:a2:67:7e:3e:1c:28:4f:6b:d6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Jul 27 10:00:59 2025 GMT
Not After : Jul 28 10:00:59 2025 GMT
Subject: CN=d634eee3119febb71c1cb6b3a2feb0d5020a665e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:89:16:98:f1:4d:73:63:8c:e1:02:b3:78:
24:7a:9d:5d:1c:72:22:ab:03:fe:67:61:c3:e1:4d:
0d:54:4b:51:ca:58:4b:be:be:51:8a:eb:14:f3:a9:
0b:5c:07:82:3d:84:53:26:69:f0:d7:b1:f3:ef:01:
55:4a:17:55:c5:1f:26:28:a1:a7:56:01:64:71:fa:
81:85:92:a3:ba:d0:fe:ec:53:e8:fe:8a:32:71:fa:
80:f3:f1:10:09:22:e0:db:75:e2:bc:29:d5:97:9b:
42:8d:dc:a4:57:b3:2e:6c:82:9a:24:cf:80:ce:83:
0e:50:9d:8c:12:88:50:24:60:cf:63:67:45:b5:01:
ce:20:a3:59:1b:3f:02:d7:d8:30:fe:87:90:e4:16:
4a:11:60:20:7e:41:cc:55:32:f2:ac:a9:b3:4a:99:
55:1b:de:c1:ac:81:68:a9:a8:81:9a:32:14:24:e8:
78:84:02:81:1d:27:f0:09:bd:2c:ae:4d:13:0b:c8:
8c:b7:d0:b9:7a:6c:3c:4e:12:b6:6b:56:db:a5:50:
fa:1e:15:ad:b5:c0:85:45:45:79:c0:fd:a5:48:ba:
89:fd:71:17:20:2d:c4:4d:55:a1:ec:30:ce:4a:9d:
e6:46:b4:c4:73:f6:ae:58:fb:8e:4f:1d:70:c6:64:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:34:EE:E3:11:9F:EB:B7:1C:1C:B6:B3:A2:FE:B0:D5:02:0A:66:5E
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e5:be:b2:32:eb:92:4b:53:49:32:50:6b:fa:55:cc:e7:0c:
26:62:ac:2e:1f:1a:66:ec:ce:b1:d6:5f:9b:c5:af:23:b3:3d:
d9:93:be:57:48:27:73:1e:50:2c:e8:69:e5:32:ff:aa:32:82:
3d:59:44:de:28:91:3d:d1:d2:33:4e:6d:af:f2:7d:85:6d:27:
45:09:5c:a3:76:bc:b6:48:15:53:6c:65:a2:1c:2f:df:e4:88:
d1:e6:8f:75:ec:13:f8:88:78:42:ff:e2:27:86:d6:ab:f5:be:
15:89:37:bb:e2:f8:31:90:e5:c4:4f:56:df:15:7e:5a:27:3d:
b6:8a:2f:68:a1:fc:31:94:68:78:4b:b1:1c:6b:41:a2:2d:e5:
77:4e:6c:91:ce:92:ad:96:a7:51:5e:0b:59:be:62:ab:df:35:
8f:5f:ea:c8:ee:64:06:b1:dc:b4:7b:88:30:a7:83:e4:71:69:
1c:21:e9:91:66:e6:aa:4d:08:cc:cc:1b:84:29:d6:2a:b7:c3:
f6:31:51:95:f3:b2:92:04:9b:8b:f9:e1:63:a9:68:ea:92:cd:
8b:cc:40:33:e5:5b:9b:bc:10:dd:eb:19:d5:42:9a:4b:97:cb:
a6:4e:08:04:09:b5:e1:f4:3a:b7:76:34:f2:6a:61:65:5d:dd:
24:75:cf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:53:50 2025 by rpki-client