Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
File: pW4itGIL0EL3OiqWIfDJJH1RJIo.mft (raw, json)
Hash identifier: OyNHrCREQDO2aMcQvgsDN0b/lVUZ2tCJEDO4pGsj89M=
Subject key identifier: DD:D0:BB:DE:D5:C8:5F:10:3F:BE:6D:35:5F:92:75:C7:0C:2E:1E:C1
Authority key identifier: A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
Certificate issuer: /CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Certificate serial: 019923A0950E65C48C93C48675CC1EE218E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
Manifest number: 95
Signing time: Sun 07 Sep 2025 10:02:30 +0000
Manifest this update: Sun 07 Sep 2025 10:02:30 +0000
Manifest next update: Mon 08 Sep 2025 10:02:30 +0000
Files and hashes: 1: nzgTTwbAHjDz2-zsShiAXUCqJOU.roa (hash: GBnP7tc+zXd9JtLmcvpJOSz2ArIIJJ/9cimz8hGmRDA=)
2: pW4itGIL0EL3OiqWIfDJJH1RJIo.crl (hash: 0m71TZoYKqAQxzZFvxUGmyq9ulO/YjHNapv95azIHEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:95:0e:65:c4:8c:93:c4:86:75:cc:1e:e2:18:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56e22b4620bd042f73a2a9621f0c9247d51248a
Validity
Not Before: Sep 7 10:02:30 2025 GMT
Not After : Sep 8 10:02:30 2025 GMT
Subject: CN=ddd0bbded5c85f103fbe6d355f9275c70c2e1ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:1d:f9:7b:54:64:f5:91:a2:de:a7:07:3f:
f7:76:19:e0:33:34:32:66:ba:21:5b:33:84:b8:3c:
c4:99:0e:20:3d:2f:5e:c1:e2:cf:9d:68:fd:c2:0d:
cd:1c:21:b8:70:3e:e8:0e:de:1c:15:ce:42:b6:cf:
14:9e:ef:aa:22:64:2f:e7:74:90:ab:42:97:2d:0c:
7f:53:fc:43:16:3f:30:85:cf:b1:a3:82:fe:68:d0:
b7:61:70:53:21:1b:74:c3:54:2d:eb:58:97:c8:e3:
59:e5:25:3a:99:f5:25:98:57:e7:72:11:33:18:63:
4a:72:aa:3f:39:04:31:c9:a0:cb:eb:2b:0c:44:6a:
55:87:8c:4d:e4:d3:44:9e:91:cf:55:bc:23:e4:8e:
b8:73:e5:a9:73:e7:93:1d:ba:da:f6:e5:8c:d5:7b:
65:52:3b:aa:8c:5a:9c:4d:8b:98:2a:76:f7:3a:5f:
0a:ec:c0:0d:9b:24:cf:9e:5f:8c:ba:48:79:31:19:
03:c7:5f:70:0c:70:69:02:7b:63:db:20:71:d8:0b:
82:27:e9:76:0e:d0:85:39:45:27:dd:9a:6c:69:ca:
f3:12:26:bb:31:71:22:58:91:16:91:21:56:cb:13:
53:9e:f6:a7:12:9a:23:48:c0:e1:b5:87:4e:43:2b:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D0:BB:DE:D5:C8:5F:10:3F:BE:6D:35:5F:92:75:C7:0C:2E:1E:C1
X509v3 Authority Key Identifier:
keyid:A5:6E:22:B4:62:0B:D0:42:F7:3A:2A:96:21:F0:C9:24:7D:51:24:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW4itGIL0EL3OiqWIfDJJH1RJIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b7818d-3298-4069-8290-c6e1cfd60661/1/pW4itGIL0EL3OiqWIfDJJH1RJIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:40:87:21:5b:83:2e:86:39:94:28:8a:f5:9c:7e:b2:7e:cc:
8c:9f:79:fe:e6:af:86:28:18:95:46:61:db:9f:e5:46:5e:f1:
4d:ea:56:be:5b:3d:03:27:b9:c7:41:cf:c5:e9:6f:c2:79:4a:
cc:7e:33:2b:41:45:98:17:e4:3b:ea:16:22:ec:23:3f:2c:ba:
cc:88:34:b9:13:83:bd:03:42:b1:1a:78:a2:d1:2d:32:a5:84:
84:8b:d3:7d:7a:d9:65:96:b5:f1:9b:74:6d:a3:17:b9:03:5c:
2d:18:ae:8e:d9:24:a8:eb:0e:12:c4:8a:f7:20:b0:11:86:23:
67:db:83:17:74:62:bd:70:91:3d:d4:0c:de:24:00:3f:ae:f0:
53:34:13:f7:93:64:ad:4e:4f:a4:77:30:78:ec:41:47:75:e0:
fd:0b:19:71:6d:d4:cc:3c:aa:99:88:0f:17:29:12:0f:da:d6:
cf:70:58:4b:54:b0:ea:81:13:19:01:69:d0:40:b9:42:f4:a9:
38:e3:07:aa:99:a4:4d:f1:fa:14:3b:d2:92:49:89:80:7b:de:
c6:d1:ec:56:87:c8:be:73:1d:49:4d:44:79:ff:a8:97:b8:da:
70:ee:91:47:03:eb:75:e1:2c:b6:3a:01:06:20:f5:f0:5c:2f:
ca:79:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:33 2025 by rpki-client