Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json)
Hash identifier: 1KYEdQOHCVJC6t7MBrOOkbamS0N9f8FoK2or66gZw6U=
Subject key identifier: F5:9A:64:EE:43:21:3C:73:4E:7E:0B:98:02:0B:1F:A7:40:BA:09:C9
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 019936EE64B18FCB5EF0FAA93C9EDD1E2840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 04:00:16 +0000
Manifest this update: Thu 11 Sep 2025 04:00:16 +0000
Manifest next update: Fri 12 Sep 2025 04:00:16 +0000
Files and hashes: 1: mdzOjm97CLLzPCbjlPobKIT1pLw.roa (hash: t6RlQNOZ4r0YZ3Um/Nvgu1T4czU0EwLc7Ga8Lg+Wxu4=)
2: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: 9p1sZCo+I8NL8dsdJW1lMhr7eiEdL2TkURZzXLiUeLI=)
3: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (hash: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:64:b1:8f:cb:5e:f0:fa:a9:3c:9e:dd:1e:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Sep 11 04:00:16 2025 GMT
Not After : Sep 12 04:00:16 2025 GMT
Subject: CN=f59a64ee43213c734e7e0b98020b1fa740ba09c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:23:f6:7b:59:db:2a:d8:23:80:5f:14:75:
f5:0e:53:6a:92:ec:72:a9:c9:53:75:75:c6:07:9e:
e4:2f:7f:2a:e9:52:42:ac:d6:e2:09:6a:a1:4d:f4:
17:1d:59:9f:ce:e5:2b:31:e0:8a:eb:a2:0f:4d:cc:
21:1b:4c:de:54:c0:09:bf:81:2d:f9:2d:4c:93:8f:
00:03:47:91:25:54:0b:b3:75:d0:da:37:bd:1c:58:
51:59:e2:6e:07:9f:74:e5:6c:6c:2a:13:ca:22:c2:
77:9d:7a:f0:03:d7:6c:ff:e0:99:97:2a:1b:d3:c5:
48:bd:6d:be:e6:92:c0:9e:5a:77:5b:f7:14:22:50:
b7:ce:f8:ec:3c:a4:e5:5d:cf:24:23:3c:9b:89:c9:
c8:15:35:79:ad:ec:06:f4:e2:ca:d1:f6:4d:81:24:
86:91:d7:f9:d3:fd:95:74:4a:b8:bb:f1:9b:8f:8c:
c0:73:f5:84:ab:d5:cd:16:f7:7f:07:04:8f:18:f5:
d1:cc:e8:51:08:a4:f9:be:10:37:f3:93:2d:67:81:
a4:1c:47:28:f4:82:25:ae:51:88:37:da:9d:fd:72:
dc:1e:9e:c4:be:9b:7e:e7:76:e9:3a:95:13:ed:a5:
c6:39:2a:22:5d:6d:79:6d:60:de:80:75:57:bf:38:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9A:64:EE:43:21:3C:73:4E:7E:0B:98:02:0B:1F:A7:40:BA:09:C9
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5a:cd:a5:74:e7:81:22:5e:a0:67:36:97:99:1e:90:13:b3:
d7:22:68:45:9e:a0:d9:0c:c2:91:1e:99:14:73:15:aa:f6:29:
c5:e0:31:dd:18:63:02:84:fc:68:da:02:e1:9f:92:fe:8e:8b:
f2:80:1d:f1:e2:8a:a1:a7:88:83:ce:0c:f6:ca:21:75:e1:98:
29:f4:5a:71:0d:3b:10:af:c3:6c:28:88:33:bd:08:7f:c1:ad:
93:eb:d6:66:13:3c:36:f3:73:7b:30:56:93:14:d0:d9:e8:a1:
40:4c:8e:1a:56:9b:3e:3e:3c:d2:9e:16:ae:37:c6:3f:22:92:
c7:82:f8:11:29:ca:2a:b2:42:70:32:3f:50:c3:a1:9d:37:e2:
57:28:bb:6e:6b:af:6b:de:eb:71:8c:1b:f9:5b:c1:d1:b0:af:
0b:03:44:70:19:76:78:96:26:64:39:59:d3:39:64:97:d2:3d:
c8:19:16:9a:10:89:3b:5e:ab:b1:55:95:73:df:db:dc:87:e6:
dd:e2:b0:eb:bc:3a:bd:13:eb:58:1c:f6:c9:cd:47:de:90:c3:
2c:4d:c2:a2:7a:c4:02:4e:94:71:7d:71:ec:22:ba:0a:13:7e:
41:c2:97:d7:ea:a3:63:80:40:ef:e3:2d:fc:76:1b:6a:c9:b6:
b7:b0:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 12:35:59 2025 by rpki-client