Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
File: w9yyPepY-X-tWnl7RXdB1b_msbA.mft (raw, json)
Hash identifier: Fo7ORkRnI4Jto3cltmTMPQ79CvIepD/ovAy9xHDOnUw=
Subject key identifier: 0A:71:EC:36:B9:C4:F0:E8:64:38:2A:21:C4:E5:C2:C8:AC:B2:1D:5D
Authority key identifier: C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
Certificate issuer: /CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Certificate serial: 019846D23F9E31EA0FAE1A2A3D784041064F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 13:00:40 +0000
Manifest this update: Sat 26 Jul 2025 13:00:40 +0000
Manifest next update: Sun 27 Jul 2025 13:00:40 +0000
Files and hashes: 1: KvTnsIcL8m_pQPoNHudO5mxyd6I.roa (hash: LQX5cYypJwp0YO63rbhroJGzv3tgP3X96RXpqlbq7V0=)
2: w9yyPepY-X-tWnl7RXdB1b_msbA.crl (hash: Xq2o/kKMpSXvuZJdT0LY7YHpbu2HgsAFVdnsg8TP6YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:3f:9e:31:ea:0f:ae:1a:2a:3d:78:40:41:06:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3dcb23dea58f97fad5a797b457741d5bfe6b1b0
Validity
Not Before: Jul 26 13:00:40 2025 GMT
Not After : Jul 27 13:00:40 2025 GMT
Subject: CN=0a71ec36b9c4f0e864382a21c4e5c2c8acb21d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bb:01:49:92:c8:98:ad:75:e0:9a:22:79:f3:
f2:27:f5:bb:58:91:f1:e2:5e:61:cd:93:bc:31:f6:
6d:fc:98:a4:12:01:fa:6c:71:68:0b:0e:5f:b5:14:
4c:90:a3:88:4d:a0:e0:2e:b6:c6:41:dc:c4:d6:e1:
ad:eb:cb:2b:68:14:ba:70:54:6f:ff:9c:47:de:32:
d5:77:59:84:df:7e:19:e1:ca:99:e8:94:0d:e9:59:
98:51:64:74:d4:38:df:fd:9b:44:60:51:29:37:f6:
97:8e:33:f9:f1:c9:d9:46:5d:b0:2b:75:0c:d0:44:
cf:c8:9b:f8:7d:3e:04:0a:fd:d1:f7:72:e8:c1:30:
03:d1:b9:14:f2:75:bd:34:41:59:fc:be:a2:8f:71:
19:51:ce:36:b5:d1:ec:6e:77:32:39:ce:f2:62:53:
25:37:f5:7e:59:20:19:0a:eb:3a:e4:f6:b5:b8:fe:
cf:9b:34:ea:dc:d4:75:e4:79:b6:95:54:6f:f2:ad:
fe:96:f1:38:38:7c:2d:c5:33:25:3f:d9:78:c2:54:
ec:63:16:44:9c:de:0a:9c:95:68:10:37:e0:60:bf:
f2:cd:ad:e3:d0:af:2c:88:45:1b:da:4a:89:24:46:
ae:05:1f:29:0e:ee:26:f6:5d:bc:74:a8:10:b1:ad:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:71:EC:36:B9:C4:F0:E8:64:38:2A:21:C4:E5:C2:C8:AC:B2:1D:5D
X509v3 Authority Key Identifier:
keyid:C3:DC:B2:3D:EA:58:F9:7F:AD:5A:79:7B:45:77:41:D5:BF:E6:B1:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9yyPepY-X-tWnl7RXdB1b_msbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6ec66d-d6b6-430f-8fcb-e70a911a1c7b/1/w9yyPepY-X-tWnl7RXdB1b_msbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:95:29:2e:9f:5b:a3:97:63:73:1b:8e:c1:60:11:f2:0c:bd:
ae:f2:9c:41:d1:57:f8:12:ad:af:35:e0:fe:da:25:9f:7e:12:
74:77:1b:3b:19:0c:1b:58:68:53:41:1e:92:ec:d6:43:3a:f0:
ed:41:1b:85:c4:4c:e9:1e:21:8c:83:7d:76:97:89:f0:6f:02:
db:e7:ac:10:f5:e5:42:a0:c0:c0:3b:94:03:a5:8e:0f:24:94:
b1:23:61:b0:43:78:c6:58:c2:89:20:f5:15:65:db:7c:46:b1:
f9:7c:7a:a6:3e:92:5d:53:a3:ed:7c:fd:be:76:9f:b0:42:35:
55:a8:d0:e8:38:3a:9c:66:b3:6a:58:85:96:f1:59:24:0e:c3:
88:3f:20:05:08:cf:45:f7:df:80:11:8c:0f:9a:44:c8:3f:cf:
32:59:73:81:9e:d0:67:ab:87:04:f1:b2:8f:34:41:c4:74:e2:
1e:85:8e:d2:7d:f1:75:35:e4:99:95:3b:0d:4a:c9:f9:86:dc:
5f:12:b7:32:91:82:fa:9b:17:36:2a:c5:79:45:f1:e8:3a:f0:
95:e3:ce:e4:96:68:18:b1:42:67:12:fa:7a:69:35:c3:81:70:
c3:d4:1b:c5:aa:a3:20:eb:08:8a:01:7a:c9:cd:70:f2:72:b6:
f5:38:28:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:22:40 2025 by rpki-client