Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File: w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier: E9+ojKgNYv39/QPaqUz34QT/QEuOdyWLgQuZ6z3de3g=
Subject key identifier: BD:E2:3F:61:BB:54:77:79:00:08:27:A6:2B:15:4C:0F:06:AD:C8:15
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial: 0199616BB5644C47673F02F9B504E1DC87A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number: 2A
Signing time: Fri 19 Sep 2025 10:01:12 +0000
Manifest this update: Fri 19 Sep 2025 10:01:12 +0000
Manifest next update: Sat 20 Sep 2025 10:01:12 +0000
Files and hashes: 1: V7FxeBgowMJ9uzRZi_USZCw6XMI.roa (hash: tBwxfUXaS851zDbs0JMu4PFLXBxOjlI4hBYncc4yuPg=)
2: gta_CV4VsMLNGYUcD6KeSin1qIk.roa (hash: CqR6PCZd4+xIrIGvqQbxq/eCIMwfufZ7Ry7DhUE2Kas=)
3: oHhBM0eh3kpL8GEfJJJ0Ngip_BY.roa (hash: diXsuAimM9t3bJl4JLm8In0ZaXQuUyb3au0Ntj45m9Y=)
4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: M0oZCN1iYjC1bpTtC0uxtsFlHrrGg7MP/egb17Hd57U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6b:b5:64:4c:47:67:3f:02:f9:b5:04:e1:dc:87:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
Validity
Not Before: Sep 19 10:01:12 2025 GMT
Not After : Sep 20 10:01:12 2025 GMT
Subject: CN=bde23f61bb547779000827a62b154c0f06adc815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:ed:ee:71:66:38:49:a2:4c:60:4d:3a:cf:
11:2d:ac:a8:4c:05:02:b6:8e:27:4d:d8:09:8b:f2:
83:4d:9e:56:04:c1:97:41:9a:1c:23:db:35:e0:cd:
02:28:92:49:d1:85:79:56:13:57:2d:02:ad:70:b7:
71:6a:20:b7:37:c3:29:e2:cb:f8:65:62:f5:63:fe:
aa:82:40:90:fd:04:ae:63:3c:64:fb:9c:52:b9:53:
ff:d8:80:3f:e3:20:6f:84:87:04:2b:a9:80:f2:41:
ac:07:1c:8a:cc:8a:8e:65:60:f8:b9:87:11:77:60:
f2:eb:7f:53:16:74:bf:eb:4c:37:d7:1c:be:1c:82:
b1:15:27:5b:f3:7a:10:db:ce:ba:38:c8:bb:64:0e:
ab:f0:72:5e:1d:90:6a:9c:5c:ba:00:7a:da:7b:9e:
4e:a0:b4:2b:96:c8:a9:ce:5d:88:4e:2c:5f:cb:d3:
ce:31:3c:bf:f7:39:db:b5:17:6b:3e:83:fa:8b:29:
d1:60:f8:4e:f5:05:87:58:d5:b9:bf:7e:4c:b0:a7:
d5:f7:be:64:f5:ec:0d:04:18:26:4f:32:01:1b:31:
55:df:d3:79:13:bd:6b:37:91:4c:bf:1c:23:c1:02:
46:fc:4b:70:d0:41:1b:32:5c:e5:69:a4:e6:da:0e:
1e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:3F:61:BB:54:77:79:00:08:27:A6:2B:15:4C:0F:06:AD:C8:15
X509v3 Authority Key Identifier:
keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:20:56:59:3f:de:76:7a:c1:1a:7c:aa:7e:d3:d3:40:bf:17:
77:56:39:75:3c:ce:8c:bb:e7:04:c0:76:38:93:25:6e:4e:44:
b6:51:d3:0f:4e:e8:32:36:3e:9d:e0:da:18:c1:97:ba:7d:3f:
b6:80:56:8c:b8:35:26:85:78:e1:f2:d9:5d:8d:5c:c3:ec:7a:
5a:33:79:90:ea:f5:da:af:03:1e:ab:da:b4:3b:ac:9f:75:55:
dc:bb:5b:97:e7:8e:3d:b2:24:03:b2:9c:f3:e8:48:f1:6f:d7:
93:da:17:ea:28:3b:e9:8e:de:83:66:37:8d:d2:0f:03:17:5c:
3b:1a:3c:20:ef:6a:83:8e:5c:e8:e3:21:50:59:12:c2:25:31:
c3:53:05:ee:f0:66:9c:06:be:71:e1:a5:20:14:1c:df:1a:00:
30:7d:52:70:64:7e:30:99:89:16:2d:84:79:fc:e5:d3:a4:31:
ef:f5:68:6f:68:f2:fc:2f:73:73:cc:c7:4e:e2:92:0f:e1:b1:
bc:96:24:d6:8b:a0:37:ff:34:60:4d:ec:ee:fb:e8:fa:4b:f6:
16:0c:82:4f:a2:e0:96:61:6a:8e:28:9f:f1:80:54:1f:95:c9:
2d:f8:a0:fe:b8:d6:22:58:7f:91:38:55:8a:e2:52:ee:85:8f:
83:50:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:31:58 2025 by rpki-client