Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
File: w8YbUevIQYDwprIy6H351hyQ-qs.mft (raw, json)
Hash identifier: n9P7P26OnQUQXMRW73+FJ7gXc4Dw8ub92kO4lJMBCzI=
Subject key identifier: 31:9A:2B:CD:00:76:7B:4F:6E:9F:43:F6:61:2C:50:1C:05:F9:E4:80
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 019922C33146F1BBFF47B934286B67A4EDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 06:00:41 +0000
Manifest this update: Sun 07 Sep 2025 06:00:41 +0000
Manifest next update: Mon 08 Sep 2025 06:00:41 +0000
Files and hashes: 1: 1-ndEryzCguWCGvVWWmkd8W4KbQ.roa (hash: W7EqtKjOdrRjfIUBcKhssjKWmvswGN88L1U5twVHTxE=)
2: 5fWADeIk4d10ZbIqGhJnIwZyHH8.roa (hash: QzLL6CT6LeM4dPuY4ZTi6ISO36hu50lOly24fxPuWC4=)
3: w8YbUevIQYDwprIy6H351hyQ-qs.crl (hash: yS1oAT7MRFU68xwujg3bcu4XLp0NF3iYBX+xPejo6mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:31:46:f1:bb:ff:47:b9:34:28:6b:67:a4:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Sep 7 06:00:41 2025 GMT
Not After : Sep 8 06:00:41 2025 GMT
Subject: CN=319a2bcd00767b4f6e9f43f6612c501c05f9e480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:a0:7d:02:f9:f3:a5:12:c0:fb:81:3b:c1:
5f:a5:8d:c7:dc:cf:93:04:7e:a6:48:77:e5:14:9a:
8b:af:fb:ad:ef:7a:69:da:19:6a:35:85:b6:bb:08:
de:1d:6f:07:34:e6:3a:bd:bc:8b:0e:37:35:1e:a1:
0a:e0:1a:0e:c6:ab:67:61:2c:46:a9:c4:2e:2e:8e:
5f:1e:b7:73:a0:7b:73:43:d5:a8:ed:c2:22:78:b7:
2b:70:f6:5e:96:f8:61:21:6d:c8:e4:f9:72:0e:5d:
b2:4a:bb:55:4f:83:ed:37:4d:ff:81:28:53:0e:e8:
fa:60:9e:72:dd:53:bb:2f:47:01:a4:6e:2a:d9:ae:
90:e2:af:ed:51:76:a1:d6:73:7c:c2:44:e3:5d:bc:
33:b3:12:12:e1:8d:e0:7c:da:89:34:9c:22:f7:d2:
f9:ad:e5:e5:2e:b5:82:37:9d:86:77:f7:8d:92:3a:
c9:43:b2:61:20:91:54:e8:4b:c3:9e:d5:d3:6c:60:
1e:13:04:5e:1d:45:aa:7f:91:4b:75:e3:48:f7:c2:
f2:39:7f:5e:30:3c:2c:c0:e6:96:4a:c2:72:43:ba:
46:a5:f4:0f:75:6a:37:e3:28:ab:12:71:d1:22:db:
fc:40:a3:48:60:1d:d3:ed:b5:76:c8:b0:14:71:35:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9A:2B:CD:00:76:7B:4F:6E:9F:43:F6:61:2C:50:1C:05:F9:E4:80
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:84:80:c6:4c:12:64:db:cd:4e:2a:45:95:f7:2a:11:b6:10:
a8:12:f7:31:c4:cb:42:ab:5a:09:3e:f4:92:1a:f1:7f:c0:4f:
fc:59:b6:87:f6:a0:cb:03:e0:75:05:95:6d:db:14:e2:0b:ac:
25:a7:37:1e:d5:bf:90:22:76:51:c4:39:9b:28:e6:75:c9:fc:
6d:13:d6:8b:24:98:4a:3b:55:87:43:6f:84:c1:3a:56:e8:b3:
4a:9e:41:b2:29:cf:28:6b:9a:55:a1:92:63:e5:0f:36:4e:ec:
10:4a:8a:9f:44:b6:07:75:99:82:b7:b3:67:e7:fc:c7:e7:0c:
9a:e4:af:7e:23:e6:ce:04:b4:fd:8c:ac:74:af:5f:00:93:2a:
0b:ce:0f:78:b9:70:8e:2e:a7:5d:54:81:9f:3a:ca:f1:28:a0:
16:4b:f9:3c:5d:a6:32:5e:bd:80:ea:92:50:3d:a7:d0:8e:ff:
db:14:4f:a9:ed:2c:72:fd:2e:1d:f5:2a:d3:a8:94:f0:32:7a:
58:7a:ca:33:d2:54:e1:77:78:2e:59:36:67:cb:14:b7:ce:8f:
37:62:e1:9d:a5:8d:a1:c9:ef:4e:7e:85:fd:fc:ad:30:51:1b:
cb:d7:bf:c7:7d:12:90:9c:b9:d3:34:6e:59:3c:64:58:da:a8:
93:18:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:31:37 2025 by rpki-client