Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
File: W2c0Iu_35BxeBteOUp9JH1kVD_k.mft (raw, json)
Hash identifier: hyWBNVoZSwA68uNHCfYTTWRCMpP1gp6FWXt+ORPDGIw=
Subject key identifier: EC:7D:00:43:57:D8:8B:7E:B0:73:D8:03:83:52:CE:D1:07:D8:BA:F8
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial: 0199221E5753E36F4F7A5C06935809C91A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
Manifest number: 13B2
Signing time: Sun 07 Sep 2025 03:00:37 +0000
Manifest this update: Sun 07 Sep 2025 03:00:37 +0000
Manifest next update: Mon 08 Sep 2025 03:00:37 +0000
Files and hashes: 1: W2c0Iu_35BxeBteOUp9JH1kVD_k.crl (hash: Q8y52uD+iOhZmT5qas+pcn5iTKiyVr3fY3zXPqk7fys=)
2: f2eeaIi_NtiLs6nRUcClmpkBy5k.roa (hash: 8pw5kFZ35WiQs2DDHCW04FDgssajvxmkQJ4ITw5fsyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:57:53:e3:6f:4f:7a:5c:06:93:58:09:c9:1a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Validity
Not Before: Sep 7 03:00:37 2025 GMT
Not After : Sep 8 03:00:37 2025 GMT
Subject: CN=ec7d004357d88b7eb073d8038352ced107d8baf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:d4:53:2d:13:d1:1c:fb:06:25:e9:14:b0:
75:52:8e:80:4c:5b:8d:b4:62:ee:0e:3b:3b:ec:23:
ea:1b:b4:6f:08:4e:48:ae:19:0d:3b:68:d6:2c:a9:
d1:a5:38:5d:d5:a2:a9:d8:59:ae:a5:f5:27:43:90:
1f:6e:d8:f6:1a:e2:dd:98:e6:48:e1:d4:b4:68:28:
ba:79:e3:c9:dd:32:35:d7:f8:78:98:9f:f7:1d:39:
89:81:42:0d:d8:5e:b2:0c:6a:b4:4b:8e:be:95:7e:
f6:64:3f:11:53:01:0e:7a:79:26:63:b7:bd:0e:82:
21:3a:00:dd:cd:49:3d:13:0b:1b:33:89:5b:ab:24:
48:f4:59:6f:08:71:fd:c1:77:5a:aa:b8:bc:14:2f:
9f:f8:4b:92:31:75:a6:93:4c:ad:75:35:52:de:16:
13:cb:74:66:7c:66:58:6b:5d:05:e3:b1:76:16:15:
5b:84:df:af:89:25:ca:7e:4e:39:30:65:52:79:d8:
b9:ef:ef:6e:bd:08:f1:49:35:1e:c4:d8:d5:77:94:
69:69:37:87:14:7a:2c:6c:2d:35:0c:46:47:ba:1b:
46:ff:44:1a:2c:84:e0:12:ed:cf:2e:84:e5:8a:1a:
f3:be:67:b0:ac:c0:ce:7c:f7:68:90:03:cd:35:00:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7D:00:43:57:D8:8B:7E:B0:73:D8:03:83:52:CE:D1:07:D8:BA:F8
X509v3 Authority Key Identifier:
keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:25:3a:f0:4d:dd:72:1d:84:6e:06:3a:27:f2:06:f7:af:
11:33:10:46:de:2b:14:d6:d3:b7:f0:b9:7d:3c:5b:4e:fc:69:
89:46:5b:a0:cd:38:c3:20:2b:bf:16:9c:9d:eb:1e:02:3f:cb:
d9:93:97:c7:c2:20:08:cb:cf:2c:cf:47:c1:e2:6a:d2:53:99:
a8:12:2c:50:ab:c8:48:59:3f:85:7b:5b:92:97:75:10:33:67:
0b:4e:d3:e5:d8:10:28:e7:75:48:8c:7d:74:28:13:a3:66:4e:
50:3f:63:15:8f:b0:ee:74:45:91:c3:20:5d:d1:b8:17:84:4a:
70:c0:65:a5:a3:01:96:f9:27:9f:61:53:61:be:7a:d8:27:d2:
89:b1:b8:e0:d9:18:50:23:96:86:ce:fc:c1:80:42:5e:20:fd:
ae:49:f7:8f:ee:92:d4:d8:6f:3e:7a:6d:4f:b3:18:52:1f:40:
c4:91:b5:47:3b:1f:53:7a:e2:30:80:ae:de:fb:9e:e2:03:fb:
c2:c9:76:72:08:27:01:2f:e2:81:2b:38:b3:aa:e2:80:61:7a:
b8:81:fa:22:b5:01:96:b8:d5:56:a5:c7:52:7e:be:1d:9d:1f:
e5:79:ba:bf:06:e0:90:1e:25:38:e5:2c:6c:d9:5c:79:91:75:
42:94:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:18 2025 by rpki-client