Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: CR2T2Q69eyLOWObHwzXAAYi6c4syts00eXq40hVBSNE=
Subject key identifier: 22:6C:AB:D5:C4:F7:18:3D:3F:2D:B8:38:2C:D4:B6:B4:BE:9B:15:BB
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 0199338057C1D9B5AAEFA01494A44FD90790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 1425
Signing time: Wed 10 Sep 2025 12:01:13 +0000
Manifest this update: Wed 10 Sep 2025 12:01:13 +0000
Manifest next update: Thu 11 Sep 2025 12:01:13 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: 8FiWNuCmcJYppKvZYUI0Gyycy4S9ZyqCEkNskN2I70Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:57:c1:d9:b5:aa:ef:a0:14:94:a4:4f:d9:07:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Sep 10 12:01:13 2025 GMT
Not After : Sep 11 12:01:13 2025 GMT
Subject: CN=226cabd5c4f7183d3f2db8382cd4b6b4be9b15bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:59:3c:1a:d6:09:5c:3d:27:90:97:c5:3d:
90:f7:75:dc:07:43:3a:91:34:e8:36:e2:bb:05:14:
b2:1f:38:aa:25:64:43:1a:7d:78:02:77:dd:d8:3d:
32:44:ff:d6:70:20:5f:4d:7c:98:9a:97:52:06:19:
53:9c:09:fc:dc:be:16:df:0e:93:f4:62:a4:77:77:
09:3f:7f:b2:23:d8:00:9f:dd:37:e1:6a:e6:58:ac:
59:b3:6d:51:0a:bf:3c:d8:7d:17:36:3e:5c:d8:8c:
13:c4:43:a8:9a:0b:18:4a:3a:a1:85:72:02:3d:e3:
48:c8:28:56:90:0b:e6:75:63:5f:c2:5f:f2:5a:94:
5b:55:58:5b:51:1c:d2:cd:b8:1b:60:d1:34:d4:71:
a2:a0:03:fe:15:42:45:96:bf:12:c6:32:e4:3c:f9:
42:0b:8c:b3:41:28:03:29:00:4e:5d:5f:62:f1:fd:
45:9b:a0:df:28:15:d7:a0:ba:17:e5:76:01:b4:0c:
bd:ac:73:70:73:92:23:13:8f:56:ed:d1:66:00:79:
b6:a8:9b:88:e7:03:57:c5:f7:23:26:bb:a1:0c:28:
00:79:57:5f:cc:37:25:dd:b3:59:35:63:a0:e6:53:
23:eb:be:99:15:b3:b4:73:8c:cf:66:ea:7b:ca:60:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:AB:D5:C4:F7:18:3D:3F:2D:B8:38:2C:D4:B6:B4:BE:9B:15:BB
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4c:08:c5:36:f7:7e:f6:f5:ea:7d:ca:bf:e0:e2:e7:1a:66:
b5:b1:a6:d5:96:07:a0:68:49:d6:39:64:14:bd:9c:4d:ee:56:
b1:65:ce:bd:11:fb:db:a4:65:27:54:72:87:a9:9a:34:0b:78:
38:4d:d6:70:c2:d5:f3:bd:7b:48:23:27:6f:30:9e:a5:a9:28:
fe:b2:6d:29:04:f2:59:f9:9e:3a:38:d5:e2:de:9f:cb:1a:2d:
d9:44:4d:ac:b8:cf:17:fb:75:ed:43:c9:07:bb:63:01:36:99:
0b:85:eb:0d:4d:b7:4d:48:ed:fa:71:e1:b0:aa:32:fe:61:1d:
2d:7e:f8:dd:d9:4b:49:0c:fe:57:3b:3d:1b:39:3b:5b:09:bf:
c5:eb:a3:7c:01:e2:8d:2a:46:e8:5d:8c:20:d4:f0:b8:b6:8a:
1a:c6:f3:59:7f:5b:0c:0f:7a:a7:b4:98:51:8c:86:99:17:15:
d7:1c:b9:5d:63:3b:52:71:58:f2:71:88:02:bb:2b:06:fb:26:
a5:ed:33:9d:2a:d8:3e:ae:ca:ec:ca:01:64:0d:e4:65:9b:d2:
63:b3:35:ef:cc:2a:47:45:c9:c8:e5:ae:08:0d:30:e4:cd:fd:
1e:6a:24:45:a6:ab:9a:51:9a:72:b9:f1:e5:5c:52:2a:d2:db:
65:09:84:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:13:10 2025 by rpki-client