Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
File: wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft (raw, json)
Hash identifier: 3Xr5PvQE46Slwr5gSRUOJquaKtruT8lUBOGEJ56/1ZU=
Subject key identifier: F2:67:0E:8B:49:82:C3:70:9F:AC:EF:0F:59:CE:18:65:2C:B9:CA:00
Authority key identifier: C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
Certificate issuer: /CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Certificate serial: 019848C02F7B53217F4E3C3B2CF920C771F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
Manifest number: 0923
Signing time: Sat 26 Jul 2025 22:00:11 +0000
Manifest this update: Sat 26 Jul 2025 22:00:11 +0000
Manifest next update: Sun 27 Jul 2025 22:00:11 +0000
Files and hashes: 1: 0YAlpXVId3LHx7bUr5xQcDkFv50.roa (hash: TFSQN0O8fIRBDFY4jZJFLp3OndkfiZIj1gXdcop7ZBU=)
2: wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl (hash: NJ5d17ty9vN9KSnYtamRC+1kcPQn/rl+9UR39F+ntw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:2f:7b:53:21:7f:4e:3c:3b:2c:f9:20:c7:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21e32d047c5d1b9e26770c3840304cf6971de1c
Validity
Not Before: Jul 26 22:00:11 2025 GMT
Not After : Jul 27 22:00:11 2025 GMT
Subject: CN=f2670e8b4982c3709facef0f59ce18652cb9ca00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:1a:ac:0b:a3:f2:56:67:f4:e0:d6:07:38:
9e:73:d9:e3:34:d6:36:5c:fd:30:f0:b6:a1:8d:3e:
86:fb:e6:07:5d:2b:2b:bd:20:2f:a6:ee:f8:96:c2:
93:34:6a:b9:69:72:bd:6f:66:62:f8:46:d0:a4:c6:
52:99:44:1b:fd:26:c5:d1:88:6c:2f:f7:55:25:5d:
a6:81:91:a7:9c:56:07:42:c4:46:62:3d:a2:0a:5b:
97:c6:ed:4e:a2:87:a8:f2:c4:06:96:19:a1:a8:f4:
9d:6a:c3:83:f2:42:cf:d3:94:e8:c4:8a:c4:c1:9d:
5b:7d:7a:41:78:74:48:ed:39:a7:d2:7a:c6:e6:0f:
b8:48:85:99:83:af:89:ff:76:c4:e3:16:1b:54:e9:
48:22:77:f0:68:4b:6e:53:13:dc:0a:a8:c0:f2:da:
17:92:1f:c5:10:89:46:f2:00:81:f7:a3:69:12:ad:
9b:70:10:e8:68:22:eb:7c:ce:ed:7a:3b:57:20:6f:
94:32:8b:ce:88:ad:8c:1e:03:cb:57:9f:38:6c:ae:
ba:85:10:a4:7d:73:52:f9:f0:5d:fe:f0:57:b9:ac:
46:66:a4:70:bc:51:f4:bd:ff:e0:41:50:7f:b4:57:
b7:c5:12:25:2e:f1:b3:1a:8e:d1:33:67:76:f5:c6:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:67:0E:8B:49:82:C3:70:9F:AC:EF:0F:59:CE:18:65:2C:B9:CA:00
X509v3 Authority Key Identifier:
keyid:C2:1E:32:D0:47:C5:D1:B9:E2:67:70:C3:84:03:04:CF:69:71:DE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wh4y0EfF0bniZ3DDhAMEz2lx3hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/300bd4-0356-4c44-83cf-38efcfdc417b/1/wh4y0EfF0bniZ3DDhAMEz2lx3hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f8:43:b9:5d:06:01:a2:c5:d5:ab:bb:28:97:da:c7:aa:c2:
62:9a:eb:e8:c1:99:c4:90:1f:83:0e:3d:f2:54:80:70:06:fe:
27:aa:73:72:33:89:26:93:ee:e0:17:07:48:bb:57:49:4f:f7:
e8:e6:12:f5:ba:18:b0:a2:d4:5a:2e:a2:b8:6a:f0:34:e9:72:
aa:dc:e2:5b:cd:68:d4:a8:86:9d:24:1d:a0:e7:7d:d9:02:36:
3d:85:5c:e2:a3:c2:b1:70:47:76:3d:19:c0:bc:0f:a6:f7:76:
06:00:ce:7b:a2:b4:29:77:74:51:94:91:e4:04:3f:15:e2:da:
29:9f:77:9a:9a:f1:44:f0:c4:72:b3:72:15:8c:b9:df:05:30:
97:1a:e1:a0:e0:bc:37:6e:30:43:b1:99:9c:97:f8:69:7e:30:
bc:02:78:e4:16:b9:14:de:b7:03:47:b5:58:52:bd:ff:06:12:
c0:b8:a0:54:91:ba:18:25:32:2c:8e:b1:09:e6:83:a4:b1:d4:
7f:c1:95:2a:de:3f:c5:7e:dc:f4:0a:51:ae:62:36:42:d9:f0:
4e:56:65:fc:ec:db:69:49:6b:50:fc:be:23:45:b6:0c:cf:0f:
32:47:05:58:9a:e8:ba:65:91:8c:d4:fd:10:30:cd:5c:c3:45:
dd:93:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:55:45 2025 by rpki-client