Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json)
Hash identifier: IKKl6juNd/ZUZlwpHuCYvmYrG38NvX+hPoZ9uLU4UO4=
Subject key identifier: 49:19:74:02:35:0F:3D:84:B4:19:CB:B4:13:A3:91:4B:8F:8B:F6:65
Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Certificate serial: 019849663230C921F3B50243954753C374DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:30 +0000
Manifest this update: Sun 27 Jul 2025 01:01:30 +0000
Manifest next update: Mon 28 Jul 2025 01:01:30 +0000
Files and hashes: 1: TPJl-AnyNAOqe20bKX-5t3SrM4E.roa (hash: X6UgSBrAhCQSnYi9DhkcF/hdYKpsagcSW2GIdlVKxUg=)
2: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: ugYWwmk4cAOaGx+B0B5hmXRggSryQEvmLp74Gd+klA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:32:30:c9:21:f3:b5:02:43:95:47:53:c3:74:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51
Validity
Not Before: Jul 27 01:01:30 2025 GMT
Not After : Jul 28 01:01:30 2025 GMT
Subject: CN=49197402350f3d84b419cbb413a3914b8f8bf665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:de:12:b2:1f:c0:2b:1e:5c:c7:00:9e:16:61:
0c:9a:c3:b6:65:1d:54:d7:cd:b0:34:4d:ee:a5:7c:
aa:ec:5c:59:7c:06:71:f5:3d:35:59:a2:ae:50:6b:
ba:de:6b:50:ba:a9:73:d7:01:33:68:26:8f:51:9a:
47:32:e8:70:55:e4:3b:32:51:14:42:14:ea:76:95:
ac:39:ef:c0:a8:d5:81:67:07:ee:69:97:b0:9c:70:
b3:77:c7:44:81:de:75:c4:b2:99:b1:cf:28:f3:38:
4e:21:22:25:09:dc:4b:75:08:8e:fa:bf:1f:33:71:
f9:bb:b8:60:ae:a7:07:fc:b6:d3:2a:3c:7f:75:bd:
ae:74:44:c7:8a:2f:fb:26:bd:3d:eb:e4:65:0c:3f:
f8:b1:44:c7:42:13:27:e6:c2:60:79:b9:ca:9d:fa:
5e:37:65:78:c0:de:26:39:f0:9a:b1:bd:57:ea:aa:
b8:7a:9a:9c:c7:ed:bd:e5:f8:e5:ca:33:56:41:7d:
87:68:eb:a7:82:1f:e7:de:16:49:57:3a:ff:ff:bd:
64:06:12:a1:d2:6d:51:63:87:a9:1b:95:5e:3b:0f:
af:15:ff:91:b1:1b:f0:99:f3:33:38:8b:c6:97:0a:
67:3f:60:34:75:fb:73:c9:a7:1d:5e:57:d1:0c:7f:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:19:74:02:35:0F:3D:84:B4:19:CB:B4:13:A3:91:4B:8F:8B:F6:65
X509v3 Authority Key Identifier:
keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b5:80:57:bf:2d:f4:e6:ed:01:0b:72:9e:b3:ce:b0:c3:5d:
bc:5c:54:5c:99:12:74:19:e8:1f:62:99:92:1a:cf:b0:e2:4d:
49:17:65:68:ac:de:32:d0:21:37:24:05:9b:c6:ca:8a:f1:f7:
95:18:17:da:e0:f9:fd:15:1a:63:06:a6:32:57:97:e9:4a:8b:
d7:cf:35:ce:d2:e3:cb:41:97:2e:e7:8d:17:33:1b:f9:2b:a4:
26:80:38:72:11:85:50:8e:b3:2f:54:8d:bf:d6:1d:a0:a2:32:
35:56:51:8f:14:d0:59:bb:f4:7c:29:e7:1c:1c:1a:26:67:5b:
95:4c:03:41:b2:fa:a0:7e:88:32:ab:f7:54:7d:8d:7d:e9:75:
b5:77:b5:0c:77:33:3f:a7:66:18:17:31:3e:2c:be:8b:2d:6b:
d1:4a:22:c5:7c:dc:b8:3f:15:0c:80:55:15:c0:10:c1:6c:ec:
1f:3b:61:20:92:d1:48:00:b8:c4:ce:dc:58:16:68:b7:50:6c:
e5:4b:c1:85:52:48:68:f7:14:54:77:51:0c:e4:95:0b:e7:62:
5c:49:04:91:a0:40:23:76:48:ed:4a:7e:53:2b:6d:93:62:42:
94:be:56:28:16:d1:dc:87:f9:70:45:66:47:e3:75:28:a6:9e:
04:c3:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:43 2025 by rpki-client