Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
File: 1-w8AoW8RYMy3oFQNkqyohm6YeI.mft (raw, json)
Hash identifier: QTA0WueWCrJEGwRfzzSqgcQ6UKn4ylxzDDoKnVLO1+4=
Subject key identifier: AC:60:30:3E:76:3C:12:D2:30:1F:FE:67:08:53:8F:F2:39:AA:D3:50
Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
Certificate issuer: /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Certificate serial: 019923D63C3B11A5EAB2842C36C9E56750E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
Manifest number: 11
Signing time: Sun 07 Sep 2025 11:01:06 +0000
Manifest this update: Sun 07 Sep 2025 11:01:06 +0000
Manifest next update: Mon 08 Sep 2025 11:01:06 +0000
Files and hashes: 1: 1-w8AoW8RYMy3oFQNkqyohm6YeI.crl (hash: gGZwucCM3MOy4ZTSexqpabl3mQjUjZcTw/7DlqJToM0=)
2: I-zs-8rljmDPlErQ03m2L3NV_DU.roa (hash: UzoSi4X1KX7g6G8RqFjoqfYd2UGDWS9dFOixZ89hyRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:3c:3b:11:a5:ea:b2:84:2c:36:c9:e5:67:50:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2
Validity
Not Before: Sep 7 11:01:06 2025 GMT
Not After : Sep 8 11:01:06 2025 GMT
Subject: CN=ac60303e763c12d2301ffe6708538ff239aad350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6c:f6:e0:a2:f2:af:95:c6:0a:f2:df:b4:24:
4e:a9:ad:5f:32:2a:a4:67:3c:24:b0:2c:d7:c9:9a:
7e:2b:3f:ee:05:92:05:9a:ca:0b:51:1f:66:d0:fa:
ad:f2:05:61:7c:8a:9f:3f:d0:44:c3:1b:ea:86:29:
f3:27:72:5d:02:1e:dd:2f:cd:8e:63:5e:08:7a:c0:
1e:59:52:00:71:97:17:6d:41:80:7a:b7:0f:60:17:
77:d5:9f:24:af:dc:c6:a0:55:e6:86:08:5f:24:3c:
cf:3e:23:13:d7:f9:9a:c4:f2:64:ff:a9:ea:25:c2:
03:ee:9b:a4:80:52:20:cc:a3:f0:a6:3a:ac:a2:c0:
2f:be:c7:aa:1f:cb:ba:f8:49:df:51:a6:62:71:b0:
64:2c:0b:a1:2f:37:85:14:c9:0c:72:74:81:62:cc:
c4:2f:c2:ff:ee:34:85:95:f1:94:b1:0d:fd:f6:cf:
81:b2:64:ac:fe:fd:09:13:69:c2:b4:4f:d5:0d:00:
15:27:bc:b7:46:07:07:1f:93:1f:78:8d:a1:14:94:
e7:a1:f2:89:f2:60:77:6d:ef:b4:0e:d6:2d:f6:95:
da:bb:36:51:db:a3:ee:11:51:ab:86:e4:aa:73:4c:
5e:d9:40:41:1c:5c:12:d7:b8:a6:38:49:8e:7b:cf:
74:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:30:3E:76:3C:12:D2:30:1F:FE:67:08:53:8F:F2:39:AA:D3:50
X509v3 Authority Key Identifier:
keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ac:c7:10:2b:62:b8:35:12:8d:80:93:8e:ce:ec:63:a0:ea:
66:bd:fe:3c:8f:a8:22:d4:f6:65:74:97:02:1d:e3:50:d4:0b:
51:98:51:a0:67:ec:15:fc:7e:ae:57:79:06:b9:ea:46:d2:dd:
e7:04:d4:c3:36:cd:5a:d7:9b:41:79:d2:39:7d:29:9f:33:51:
33:3c:af:8a:8a:45:7b:38:31:a6:77:9c:a3:89:e9:0b:ce:38:
d0:5a:b0:7c:e7:dc:c0:50:69:f4:01:59:65:1c:01:f4:1c:25:
9d:3d:ae:65:0f:f3:ef:ed:3b:85:ca:52:a4:54:51:4b:e8:dc:
82:d8:33:fa:9d:9e:a7:3d:c1:8b:60:52:e1:d8:16:cf:f9:f8:
32:d3:ae:9f:ea:4a:ef:69:25:85:ea:44:70:a3:aa:98:21:ab:
95:4c:75:98:fd:9b:51:ee:06:10:17:b9:56:a3:6c:0d:86:a7:
b8:b4:b4:87:df:96:ab:83:36:4c:ee:69:fe:14:9a:87:00:0f:
35:0c:1f:5b:c8:c0:66:66:bd:87:9a:f2:d4:cd:04:52:85:98:
11:1b:49:e0:e2:01:32:57:4b:95:44:f4:e4:45:d2:f6:b9:a8:
0d:b6:50:fd:23:89:ec:11:6d:6d:cb:1a:60:d3:ce:2c:03:56:
cf:fb:b9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:27 2025 by rpki-client