Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
File: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json)
Hash identifier: v110PqccJmJVB749JJeyGjtRyginhNSauPE7RgsNnt4=
Subject key identifier: 5A:10:33:0F:1F:A2:33:D1:83:6C:3D:0F:A9:74:27:F9:68:6F:F9:D2
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial: 0199228C874B04952C073A386232D8A4FEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
Manifest number: 0A7E
Signing time: Sun 07 Sep 2025 05:00:58 +0000
Manifest this update: Sun 07 Sep 2025 05:00:58 +0000
Manifest next update: Mon 08 Sep 2025 05:00:58 +0000
Files and hashes: 1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: qbzz11Fl1pp/3NkTKZ4heRcv/iLym/tyo75Yw2yByUE=)
2: k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa (hash: yZJ6vuAHa/37ymvkns64WkhZR926EDrpu1i04hE/yKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:87:4b:04:95:2c:07:3a:38:62:32:d8:a4:fe:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
Validity
Not Before: Sep 7 05:00:58 2025 GMT
Not After : Sep 8 05:00:58 2025 GMT
Subject: CN=5a10330f1fa233d1836c3d0fa97427f9686ff9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4e:04:38:22:4d:af:f5:2a:74:11:46:d5:b4:
b2:22:88:f1:92:ec:43:4a:4a:a4:32:c8:18:0f:68:
f2:23:83:4c:78:98:e2:c7:0f:e7:71:c2:f2:44:9e:
dc:2b:93:3e:b2:7a:7b:ed:45:95:6a:76:94:eb:63:
76:bb:1d:19:48:e8:6f:d4:0e:64:44:77:14:02:43:
bb:7b:7f:70:a3:de:b4:96:1b:fe:c2:e3:71:9b:25:
c7:f5:ba:97:35:19:3a:54:26:4b:f4:9b:94:9a:26:
b2:bd:7d:16:48:44:78:13:b8:dd:81:66:da:7a:e3:
13:cd:b0:d9:d8:f0:06:13:8d:78:f6:6d:1c:df:35:
b8:e6:d7:96:78:97:43:17:4b:60:cf:74:07:11:7c:
55:1d:94:d8:93:36:fa:58:c0:7d:fb:be:06:ae:9a:
e0:7a:f6:36:23:85:e0:ea:be:0c:f9:f0:f7:68:ef:
63:14:49:13:dd:22:8d:1f:22:be:99:82:7d:de:c3:
e2:af:1b:cd:76:da:3c:7b:c1:85:7f:5b:79:fa:f0:
39:43:8a:09:42:21:4b:e2:e4:be:8b:c2:39:6e:99:
7e:4f:06:c9:ff:82:86:e1:fd:e8:5c:33:92:95:ed:
54:44:f1:34:4e:a5:21:4f:5d:83:67:1b:ad:4c:04:
f3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:10:33:0F:1F:A2:33:D1:83:6C:3D:0F:A9:74:27:F9:68:6F:F9:D2
X509v3 Authority Key Identifier:
keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:da:02:f7:b1:1e:e3:c7:05:d4:07:f8:3d:dc:f8:91:d6:56:
6a:db:54:11:7e:e3:98:75:b5:b7:0a:84:32:13:af:92:9b:8a:
1e:1e:7c:03:7d:d4:29:0f:aa:9c:69:f6:33:1e:0b:45:92:e8:
ba:7c:8f:57:ea:5f:ec:34:3c:f6:94:d3:1c:e3:17:8e:b4:a9:
95:14:c9:6d:53:13:41:bb:dd:1c:f8:24:a9:47:a8:3d:09:86:
d2:52:9b:33:18:fd:d4:b6:71:8e:97:9b:c1:b6:23:4b:57:3e:
91:ca:0e:20:bf:6f:2b:8e:fc:f4:5c:ca:34:cc:5d:f0:72:14:
89:27:2b:5d:b2:d0:e2:ca:b3:e5:08:13:c8:02:a2:d3:69:aa:
e9:32:0a:f7:22:82:bb:72:04:3d:de:0b:af:8b:5d:bd:4c:b5:
5e:7b:aa:e8:19:57:c9:5f:43:3c:2a:bb:a3:82:9b:3d:7d:e7:
07:28:c8:c6:40:65:b5:35:e0:f3:e8:51:2d:af:38:6c:73:b6:
f1:27:46:53:f3:bd:47:c1:05:70:bc:ad:5b:cb:c6:5c:ca:73:
e4:10:ac:ac:01:2c:bf:07:66:af:5e:31:84:16:b5:2b:10:15:
03:ed:f1:f2:0b:b6:38:56:57:c7:e1:45:cb:93:f8:3a:7e:99:
50:d2:91:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:12 2025 by rpki-client