Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File: w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier: Y3/5c+tLDgdjiQdwUJTRDo8s7LJwTD6AvQEn2qnoaVM=
Subject key identifier: 8F:37:ED:B3:A4:6F:5C:F7:AC:E8:36:D8:18:3F:0B:27:5C:FD:46:EA
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer: /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial: 019937CA4F78ABA5BFD4C9A578537A60DD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number: 0F7D
Signing time: Thu 11 Sep 2025 08:00:29 +0000
Manifest this update: Thu 11 Sep 2025 08:00:29 +0000
Manifest next update: Fri 12 Sep 2025 08:00:29 +0000
Files and hashes: 1: 2u_bcZkkSvx-ZcsdCRFCGyh5HjM.roa (hash: 7lJhGCJBImviva4lcJI32wc+2zEbO+nn7NwKLsiaeHg=)
2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: rowElG9io2XI3AXbvPUOd/kp4stf8Cd9Q2zijaiI/TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:4f:78:ab:a5:bf:d4:c9:a5:78:53:7a:60:dd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Validity
Not Before: Sep 11 08:00:29 2025 GMT
Not After : Sep 12 08:00:29 2025 GMT
Subject: CN=8f37edb3a46f5cf7ace836d8183f0b275cfd46ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:3e:d8:06:b3:f6:b0:da:2d:d2:3b:55:86:
15:53:93:03:34:3b:e5:16:66:88:1e:e8:fc:6d:de:
67:8f:2e:c0:20:7d:dc:88:58:37:0b:0d:fc:7f:ec:
5b:12:0f:5a:aa:33:4c:61:7e:d2:c5:1c:77:8a:e7:
c0:9e:53:8e:90:1b:94:7f:28:58:17:04:42:aa:bf:
c9:57:09:24:9b:4c:9f:17:b3:f9:8f:fb:d3:e3:1f:
0b:95:c1:12:89:63:b2:8d:6b:c8:b3:89:f4:04:66:
db:44:4a:81:48:cc:2c:36:63:00:56:17:8b:51:ad:
79:d9:6c:6e:4f:b8:11:fc:9f:77:d5:bd:03:d8:ca:
e4:a9:98:2b:07:92:c9:61:df:7d:17:08:b2:08:3e:
a1:7e:35:77:00:99:24:69:7d:75:bf:6d:9a:04:29:
1f:8e:02:48:58:28:9e:66:61:df:b6:5d:82:83:c7:
d3:c4:9e:0b:c3:d2:6f:cb:9c:f5:f9:20:7c:28:4a:
89:4c:c8:64:3c:90:b0:92:c7:d9:83:54:65:70:f7:
77:f6:e6:5e:3d:92:7b:f1:9d:1c:17:06:bf:9d:ca:
9d:a7:cf:2a:93:d1:89:57:64:ab:72:be:2a:20:42:
ca:6e:37:53:f6:29:bc:75:d5:a9:dc:e7:c0:5d:02:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:ED:B3:A4:6F:5C:F7:AC:E8:36:D8:18:3F:0B:27:5C:FD:46:EA
X509v3 Authority Key Identifier:
keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ca:20:31:60:4b:aa:87:9d:10:da:2d:8c:2a:4f:f4:81:74:
ff:a3:ec:36:ae:20:32:e7:b6:40:12:7d:3d:8d:2f:5c:7b:45:
2e:d2:1b:3d:3c:38:cf:69:75:e5:c8:72:5f:35:44:f6:55:99:
77:de:f1:0b:e3:65:6f:7b:e5:2a:64:0f:7f:48:f3:4a:20:8e:
b7:18:aa:36:09:36:17:82:e0:30:04:8a:04:47:d5:3a:5e:b5:
44:c1:68:3c:df:2b:c4:6f:25:b5:db:16:ea:0a:ee:f8:cf:3c:
2c:f2:a0:62:5b:c4:92:2d:aa:9d:5c:75:15:2b:24:83:e7:08:
7b:2f:11:95:cc:5f:41:03:8e:96:7c:14:ef:98:2b:9e:11:a7:
34:eb:49:79:3b:e4:61:ae:7c:cb:eb:16:51:9d:77:35:40:38:
b5:b9:76:bd:ae:7f:01:80:e5:2b:44:63:62:73:46:12:28:87:
7a:f2:19:18:50:96:31:b8:41:8b:48:6e:73:a7:08:71:a8:d3:
ae:17:39:8e:1e:72:8d:a4:29:d9:a1:95:b5:7a:e9:31:10:d0:
0b:68:f2:d9:6e:b8:01:a1:3d:58:f3:10:92:80:2d:44:ae:60:
62:16:61:43:f1:12:ad:8d:b0:14:53:36:24:13:f9:e6:07:2a:
91:d2:1a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:02:17 2025 by rpki-client