Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
File: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft (raw, json)
Hash identifier: XvGuVeoMl/rs++Gz7hD7314AcPCWhJ8GZrDFvYmumsA=
Subject key identifier: 50:94:A9:B3:3E:CB:9B:76:72:BB:B9:4C:4D:7F:7B:6C:1A:1F:90:2F
Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Certificate serial: 0199221F5441F4600B1247C8CDB8F6024436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
Manifest number: 104D
Signing time: Sun 07 Sep 2025 03:01:42 +0000
Manifest this update: Sun 07 Sep 2025 03:01:42 +0000
Manifest next update: Mon 08 Sep 2025 03:01:42 +0000
Files and hashes: 1: HwLDpTIt6plI2sCVLbeUjnqOAJc.roa (hash: yvIMoIjc3gOAvuIICfd6lLbgjDWXL7Ecab2rJN91n/I=)
2: wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl (hash: ddBBDipe+oMRXLF78peTKfB41FGjgwjdKNcPORQm7ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:54:41:f4:60:0b:12:47:c8:cd:b8:f6:02:44:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa
Validity
Not Before: Sep 7 03:01:42 2025 GMT
Not After : Sep 8 03:01:42 2025 GMT
Subject: CN=5094a9b33ecb9b7672bbb94c4d7f7b6c1a1f902f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f1:14:49:ce:0e:a6:af:aa:c4:dc:75:38:6e:
c5:b1:49:2c:1b:cb:63:e0:54:74:b8:23:1d:fd:04:
b6:b2:84:51:e6:cf:03:d5:54:b8:b5:ba:49:22:15:
1f:5e:69:bd:16:8f:bb:ea:cd:a1:34:2d:aa:7e:af:
a4:6c:08:95:23:62:d1:b9:d4:22:88:d1:70:5e:9f:
9c:76:e8:fc:27:d5:58:fa:f7:34:2e:99:e9:28:80:
1c:1d:c8:9e:2e:1a:d5:ae:75:2d:b7:94:87:34:6a:
8c:1a:e7:34:96:33:3e:13:07:3c:29:08:ab:63:91:
d8:f3:8b:87:d3:04:e5:2b:80:ac:09:a9:f0:c0:93:
54:13:bd:71:46:a0:33:08:b3:16:40:e4:d9:8f:4b:
70:23:af:a6:c5:72:ed:76:99:57:bd:67:d7:30:70:
d6:ec:2b:15:15:5a:7e:4e:1b:8c:db:d6:c4:aa:34:
06:e0:d8:f4:d4:43:26:13:42:a8:f6:71:74:3c:54:
ec:88:81:44:52:97:29:37:ca:22:3e:db:21:7c:93:
30:7e:ba:57:6a:5e:9e:a8:78:04:0e:98:17:11:87:
13:70:a0:ad:cf:a4:90:0a:72:5f:34:50:dc:0a:6c:
d7:bc:32:85:f7:df:29:f2:68:5a:bd:12:16:5e:8a:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:94:A9:B3:3E:CB:9B:76:72:BB:B9:4C:4D:7F:7B:6C:1A:1F:90:2F
X509v3 Authority Key Identifier:
keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:00:73:a7:35:be:85:ef:b0:e8:f5:07:0b:ba:40:d3:f6:
38:5b:87:f8:9f:c4:31:dd:8d:49:eb:06:7e:43:11:f3:17:d3:
7b:4c:0d:8c:49:0e:13:74:f7:38:32:56:bf:31:9a:f1:a1:6f:
a3:8f:43:da:ef:53:d2:ea:19:bd:92:93:95:8a:ca:8c:47:95:
09:ef:75:fe:eb:c9:7d:a1:48:09:0b:56:96:14:86:5f:bb:c6:
9a:58:ae:6b:de:51:2d:20:db:ec:68:fb:7a:92:2a:da:9f:73:
5e:f8:58:7d:15:c3:4b:19:37:4d:ff:e4:57:0f:42:c2:5b:29:
ec:70:76:20:ee:5b:bd:9e:a1:ff:30:ea:3a:f5:4f:dd:22:f6:
39:54:de:ef:ac:b7:bc:3b:89:2e:8f:bb:81:ed:7b:62:fd:a0:
57:54:45:9f:41:94:a0:f3:43:24:c8:74:c2:c9:39:ae:b6:20:
31:10:ce:04:75:19:fb:62:3d:b7:11:7c:9e:d5:35:8a:be:51:
83:45:ee:64:cf:c8:30:17:15:bf:a3:ca:43:fd:ad:ea:24:12:
bd:c7:9a:d3:9c:30:0d:1b:2a:c1:2f:80:b1:14:b5:c7:42:0f:
24:ae:3b:22:17:52:f3:e5:18:4c:02:2d:c7:cf:a5:62:97:e8:
dc:73:e7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:50 2025 by rpki-client