Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier: yN3Hy0l7REJdVBRqUoJ1a8VeRAd3CJ824Hl3bPpfuJ0=
Subject key identifier: D9:44:6B:C1:7B:29:1A:54:7A:00:C7:1C:E0:E5:54:65:44:E9:C6:ED
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial: 01992330DDA3AB29DC77BA8263DDC531FE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number: 0FBE
Signing time: Sun 07 Sep 2025 08:00:28 +0000
Manifest this update: Sun 07 Sep 2025 08:00:28 +0000
Manifest next update: Mon 08 Sep 2025 08:00:28 +0000
Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: 0fP7wMxWs4wQri3FIMT3lALOInvHAKTrsFvwQvQDbWo=)
2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:dd:a3:ab:29:dc:77:ba:82:63:dd:c5:31:fe:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Validity
Not Before: Sep 7 08:00:28 2025 GMT
Not After : Sep 8 08:00:28 2025 GMT
Subject: CN=d9446bc17b291a547a00c71ce0e5546544e9c6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:fd:2e:a7:f4:72:39:7a:d7:67:c7:45:91:
80:6f:e7:f3:c1:57:55:a5:5c:cc:d5:fd:62:84:97:
8d:13:d9:31:9d:7d:c7:11:49:bc:2b:97:29:54:9d:
1e:67:6f:1c:a2:5f:3c:53:e7:32:0b:bf:42:fc:c7:
c3:98:cf:96:92:88:b7:90:19:a9:4b:3c:35:0f:53:
23:a9:3d:43:f0:06:23:91:39:77:6d:41:a6:f5:e9:
f9:b4:12:ed:45:71:c2:54:62:8f:55:74:5e:11:e6:
f4:71:08:39:fa:ed:dc:75:69:3e:77:3a:6d:f5:db:
0f:c3:f2:00:e0:8c:56:56:e0:0d:69:43:03:37:ca:
36:49:39:3b:fb:5f:88:5e:1e:00:f2:bc:02:88:df:
68:48:fd:c0:ae:c7:a6:bf:1a:1f:78:e1:f1:e3:ad:
69:f2:5c:f4:74:b5:a4:c2:f0:02:cb:f5:7a:ac:49:
0c:3f:0b:78:fb:a6:0a:24:d2:ef:9f:f3:a5:57:29:
6d:ae:22:4f:52:cd:0e:54:35:6f:2d:bc:a8:0e:62:
40:7f:ef:2c:59:c5:7a:a5:bd:fe:e3:b8:c0:bf:d7:
3a:18:bc:c9:e1:d8:98:c4:3d:31:80:5b:bb:41:72:
40:ab:2c:d1:2c:dc:6d:7e:f9:8e:f3:31:21:39:85:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:6B:C1:7B:29:1A:54:7A:00:C7:1C:E0:E5:54:65:44:E9:C6:ED
X509v3 Authority Key Identifier:
keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f2:d0:d6:99:f4:67:37:6e:80:0b:59:84:5e:c1:5c:b8:0c:
65:8a:3f:8f:17:7f:4b:ce:9b:ab:44:b3:24:26:cd:01:ee:24:
b0:3f:8a:ff:7c:49:11:9a:2d:9a:8d:42:b4:ee:0d:7c:66:a6:
09:9a:02:5b:6a:d8:e3:05:88:f8:50:21:fb:f3:f5:ce:4e:0d:
03:fa:df:e2:94:68:14:be:50:e7:73:e2:30:b8:ba:ee:78:ff:
20:c9:1e:22:f7:3b:bf:df:d2:6b:f7:7f:71:d6:bc:a1:5d:ca:
a0:b4:d8:1b:06:05:09:22:60:f1:cc:44:25:2e:28:d4:4d:63:
25:2f:86:7a:82:0a:bc:9c:6d:d8:ff:ff:3b:50:3b:76:7c:b7:
25:7c:83:0b:29:02:e6:8a:a9:49:7b:4a:e3:0b:19:10:03:a3:
b9:8e:f2:51:cc:24:3d:74:05:73:c9:43:0b:87:99:8f:3a:dd:
56:b2:1e:fa:c8:aa:91:08:0e:06:3a:7b:dc:30:ad:84:b5:f4:
df:41:8e:a8:f5:c2:e0:33:79:6d:0f:84:71:6f:5c:b3:8a:e4:
4d:ab:5d:dd:31:e9:03:d1:93:86:1c:5f:f4:d9:42:1d:cc:18:
73:b4:ae:65:19:d6:5d:21:fc:6e:97:a9:f0:c9:5c:dd:ad:5a:
71:73:2b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:09 2025 by rpki-client