Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File: w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier: CZ5/Sgvh49pjpNBnYaY0WumXHbrlD8oM86cv9LmZPV8=
Subject key identifier: 60:C1:84:6E:4D:0A:73:DA:51:14:93:C3:A5:08:85:BE:52:0D:02:6F
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer: /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial: 0199368133319F6C9133E2E1A7004A76DC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number: 0200
Signing time: Thu 11 Sep 2025 02:01:00 +0000
Manifest this update: Thu 11 Sep 2025 02:01:00 +0000
Manifest next update: Fri 12 Sep 2025 02:01:00 +0000
Files and hashes: 1: 2x7OqnJPBLrGZL2rttYvcbQz8Tw.roa (hash: WNGnFlqIRITx+enQw6qGHRhLudWi7SmIAW5VCe5iYGY=)
2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: zv54PSztf2uBSC6RJu+Gak0WR12FV0bC4+qKZYYOQUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:33:31:9f:6c:91:33:e2:e1:a7:00:4a:76:dc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Validity
Not Before: Sep 11 02:01:00 2025 GMT
Not After : Sep 12 02:01:00 2025 GMT
Subject: CN=60c1846e4d0a73da511493c3a50885be520d026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:33:ef:42:e8:0a:25:9d:4e:4f:fa:00:55:
f5:12:cf:7a:4a:5e:06:88:d8:41:d4:cc:a3:12:d6:
41:72:f9:dc:93:15:52:d2:be:31:19:04:6e:5b:f0:
6e:5e:cd:96:e4:39:a4:97:f9:ce:a7:91:1a:7f:d6:
8f:a4:13:36:b3:30:d9:64:18:c2:4b:97:e3:bd:45:
23:14:a4:7c:92:16:9f:c5:46:0b:20:42:bb:ae:4e:
00:73:9d:db:08:99:11:49:17:99:c5:d3:ee:f8:01:
2f:45:79:7d:e0:09:a4:23:60:25:93:4d:0b:41:1f:
86:9f:5c:de:7b:78:4d:59:f5:96:2b:22:aa:93:f8:
65:4d:10:ca:af:b1:c0:9f:0c:54:2c:91:98:1f:d2:
ca:a8:4d:4c:30:b0:b5:ee:cb:a5:ba:ae:40:9c:dc:
1d:ca:58:1e:0d:24:79:07:f5:fc:82:2b:9d:1f:d2:
5d:6c:4b:46:9b:c1:bc:92:d7:05:e1:1f:39:8b:67:
76:e6:40:fa:da:ec:1f:4d:a4:6d:4f:1c:8f:fb:f1:
2f:08:65:93:68:58:c6:45:fd:8a:8b:9d:f3:f5:83:
c3:60:c4:b9:7f:89:da:2e:42:ee:c4:7f:b8:af:4f:
7e:6d:ac:27:b4:76:68:ce:e7:68:75:51:b7:21:bc:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C1:84:6E:4D:0A:73:DA:51:14:93:C3:A5:08:85:BE:52:0D:02:6F
X509v3 Authority Key Identifier:
keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:85:aa:37:ca:ba:bb:84:3f:54:5a:d1:0d:7e:dc:3e:f5:f6:
62:3d:c7:10:8a:02:bb:5d:19:fc:6b:7b:37:08:45:6a:bc:93:
2b:30:19:a1:d4:ea:eb:96:55:98:7b:57:15:6b:26:6a:7c:9c:
03:5f:5e:8c:89:22:c1:bc:e3:87:12:c7:e6:5e:3e:f3:b4:c6:
37:8d:63:d0:7f:be:1b:bc:e1:df:ee:11:39:af:61:a8:d2:c9:
72:50:2f:83:9b:6f:f0:5c:f7:cb:a9:c8:fc:b7:fd:03:f4:d9:
a4:2b:e5:8a:b8:b7:4d:d5:3a:ea:f3:91:ca:12:de:29:87:ee:
84:3d:bd:aa:c8:43:5c:9f:c4:56:a2:19:12:97:ea:13:36:d3:
87:24:f9:97:af:99:d5:b6:2d:05:45:1f:86:17:fb:b0:f5:07:
57:2f:8f:a6:c9:a3:b7:a7:96:16:45:c5:05:29:2f:fd:a8:4f:
24:35:e6:74:da:65:eb:f6:fb:21:d4:b2:25:a9:fd:e3:58:e3:
e8:9f:d5:36:f0:29:96:96:4c:42:4e:c8:5a:c3:06:8e:49:d1:
d2:04:33:4f:14:15:6e:f0:97:bd:23:33:a1:fe:a4:d9:f4:0b:
af:da:d8:2b:b3:b4:d0:49:43:00:6f:d0:d9:80:f5:0f:eb:15:
a1:09:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:37:54 2025 by rpki-client