Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
File: w5VnlKe5iREVrTr5RXPnlhsWS6w.mft (raw, json)
Hash identifier: WhT6osXF3vsjVZ/brXBxfxmRcCPM27fraPHV0raemXI=
Subject key identifier: 3F:98:34:35:31:31:5B:D9:6B:69:5E:BD:B3:EB:71:7A:22:F4:0A:97
Authority key identifier: C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
Certificate issuer: /CN=c3956794a7b9891115ad3af94573e7961b164bac
Certificate serial: 01993500476A24A8D307BAC3D98A71961945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
Manifest number: 0A6C
Signing time: Wed 10 Sep 2025 19:00:34 +0000
Manifest this update: Wed 10 Sep 2025 19:00:34 +0000
Manifest next update: Thu 11 Sep 2025 19:00:34 +0000
Files and hashes: 1: Peoo9gs9EBNgjwn3QmaIgoVdA2I.roa (hash: o5UcaRmySAHefVpyYqfIuBk+qGysWoCNDWxnf1QQroQ=)
2: w5VnlKe5iREVrTr5RXPnlhsWS6w.crl (hash: r8uLQSN2JUgqkFVxpJV10/GAiNETqBeLN+sngyV9d4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:47:6a:24:a8:d3:07:ba:c3:d9:8a:71:96:19:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3956794a7b9891115ad3af94573e7961b164bac
Validity
Not Before: Sep 10 19:00:34 2025 GMT
Not After : Sep 11 19:00:34 2025 GMT
Subject: CN=3f98343531315bd96b695ebdb3eb717a22f40a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:2f:c9:b4:1a:3f:57:86:24:7e:4f:78:64:
ba:e5:a8:a1:38:00:8b:01:c0:0e:fc:91:05:2f:ef:
56:19:10:f0:3a:30:06:7f:38:13:86:70:73:de:8d:
e2:27:8c:57:71:aa:f3:95:13:fc:cf:a0:8a:b1:ad:
2c:2d:04:8a:38:46:d9:82:9c:2e:ac:7a:1f:fc:b2:
1c:bc:3f:6a:ac:b1:d1:49:8e:c7:d2:75:5f:90:b1:
97:f4:d4:88:cf:45:f0:74:89:ec:8a:ff:a9:04:b5:
ca:b5:41:b3:34:00:e3:c2:db:24:24:52:cd:75:89:
9d:d7:c4:13:fb:78:54:cc:e3:f0:31:1d:c2:5b:66:
6a:b1:d4:23:8a:f1:2d:d3:4a:4e:a8:68:2e:aa:6b:
a8:e5:c7:58:6b:72:33:f3:68:70:37:d2:67:ad:b8:
a8:21:79:24:44:7a:eb:07:5a:d5:b3:95:af:a9:3d:
cd:6d:71:dc:91:8b:fd:85:f6:e2:ea:f6:da:80:0c:
60:da:36:d0:a3:31:6b:83:6e:16:ee:3b:86:1e:03:
ad:ae:72:c8:68:76:c0:fa:ac:c0:a1:68:11:c9:a8:
05:f2:56:83:48:1b:ab:67:60:b9:45:67:6b:b4:63:
ed:cb:a5:85:cd:b2:fb:b6:e0:90:c1:a1:bc:8b:5b:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:98:34:35:31:31:5B:D9:6B:69:5E:BD:B3:EB:71:7A:22:F4:0A:97
X509v3 Authority Key Identifier:
keyid:C3:95:67:94:A7:B9:89:11:15:AD:3A:F9:45:73:E7:96:1B:16:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5VnlKe5iREVrTr5RXPnlhsWS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e8935b-e959-4629-beef-5004fb28884e/1/w5VnlKe5iREVrTr5RXPnlhsWS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2d:31:17:11:f4:df:78:f5:77:43:d9:f0:bb:88:1e:0a:53:
26:61:15:d0:e7:00:dd:51:bb:6f:f8:64:ed:75:d0:29:5a:55:
d8:b8:d1:7a:5a:b6:24:97:a2:b2:b0:d6:25:1e:4f:76:2f:77:
bc:b9:bd:6b:35:f7:a5:95:d8:b6:27:94:4d:29:9c:56:8c:de:
e3:a4:eb:a8:2c:e4:64:01:f9:6a:a6:42:05:09:d3:ee:a9:e1:
5b:05:15:08:01:b3:ff:fc:34:81:92:65:b3:82:dc:67:ad:17:
0f:f4:3d:1f:e4:53:3c:78:e6:7c:71:0e:12:be:af:13:ae:4d:
00:f5:d5:8d:03:6c:ce:04:82:b7:75:17:18:a0:37:d2:60:8f:
e2:96:30:f9:fa:35:ae:e4:d9:93:51:d6:8d:df:02:82:26:04:
dc:2a:d0:0d:fd:37:7e:88:8d:36:98:1a:0f:e1:42:40:e2:6e:
8d:d6:7f:eb:75:90:91:71:f6:b5:ab:33:de:95:b1:34:79:9f:
2e:89:af:d3:5a:c2:1e:1e:39:2d:1e:7f:41:da:e9:9f:dc:a8:
13:f5:08:74:91:b1:60:37:23:08:ce:3d:ce:04:0c:16:90:ae:
98:41:af:f9:e7:f8:41:df:f2:91:b2:3b:e6:ea:c7:0c:79:ce:
da:5b:94:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:46:57 2025 by rpki-client