Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json)
Hash identifier: aXo+DHaHteS6uIpnqtaoWzWDAbCp2Rj5tXH7k0rgrf4=
Subject key identifier: E8:EC:32:79:F7:E3:5D:8D:31:91:90:0F:33:AC:E9:1F:6A:9E:C3:FB
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 019935A545022D8E0A01928FAEFA6AE700CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
Manifest number: 0D5C
Signing time: Wed 10 Sep 2025 22:00:47 +0000
Manifest this update: Wed 10 Sep 2025 22:00:47 +0000
Manifest next update: Thu 11 Sep 2025 22:00:47 +0000
Files and hashes: 1: H5zExKsN_X1SPJQSwEakZzqeC2I.roa (hash: FjXiEi3V3MLLSMvrOdppNODHARmQ2b/yPySFztutI1Q=)
2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: psKU8SdzAYKCTgaxD75rwFtPIcgD93GJuJSth3ohFFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:45:02:2d:8e:0a:01:92:8f:ae:fa:6a:e7:00:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Sep 10 22:00:47 2025 GMT
Not After : Sep 11 22:00:47 2025 GMT
Subject: CN=e8ec3279f7e35d8d3191900f33ace91f6a9ec3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:0c:b6:1e:0a:d9:73:31:08:70:ad:61:e3:
c5:0b:9a:ad:0f:52:94:0f:43:38:3a:8b:db:1f:4c:
83:8f:22:80:b0:22:70:0e:99:c4:dc:ee:db:b0:c7:
9b:ef:d8:3e:3a:f6:57:33:5f:30:19:0d:0c:da:05:
d1:9e:6a:1d:ea:49:6c:d6:a7:49:ea:57:b7:dc:6a:
e0:99:9a:24:3d:0e:a2:6e:74:2d:6d:70:d3:51:d9:
46:1b:93:48:29:a5:e3:77:ab:9e:f7:e9:d6:9a:22:
eb:09:bd:52:c2:ed:a2:3d:61:74:bd:db:25:b1:79:
47:25:43:ab:3a:09:2b:98:b4:c8:51:2d:5c:f8:22:
9c:a5:04:10:49:e0:1c:fa:36:f5:fa:f1:0f:b2:bb:
8b:68:5c:dc:bc:d2:54:5b:2e:32:4e:12:fd:69:b8:
cf:cd:64:db:5f:b1:84:37:63:da:7b:37:a7:79:6b:
34:84:11:03:b4:71:da:f2:69:fb:d4:7d:42:23:b9:
2b:3b:cd:56:61:10:68:cd:57:25:72:b2:29:b7:6c:
16:91:c5:bf:4a:18:0e:b8:c8:6a:be:35:f4:84:1c:
0f:95:b5:dd:db:27:bf:e7:42:ee:ce:c1:e9:82:ef:
70:b9:9e:b7:0f:3e:88:53:03:e3:43:28:7c:f6:7e:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EC:32:79:F7:E3:5D:8D:31:91:90:0F:33:AC:E9:1F:6A:9E:C3:FB
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:3e:eb:e0:e0:3e:bc:74:4b:d6:40:3d:a2:7d:c1:72:da:
8f:b3:6b:15:52:55:0a:0a:7c:8f:d4:14:3e:79:56:d6:7d:bb:
0f:2b:f9:4c:ab:85:65:e3:81:62:1d:3e:21:12:18:85:70:4d:
df:19:1f:fc:cb:fb:1e:81:39:60:79:86:46:3f:58:0b:62:31:
ef:40:54:fd:c0:86:ac:e4:d1:0c:49:c5:1e:6a:1e:11:2c:88:
14:80:20:7e:a3:3a:86:a8:14:87:4d:eb:32:8c:df:05:b5:c8:
d1:64:97:d7:35:e1:41:df:05:99:92:a6:d8:02:cd:25:04:f9:
c8:ab:86:e7:87:a3:04:d7:79:56:a4:e2:8d:ae:e5:9c:c2:47:
d2:08:8f:85:c3:fb:bf:3a:0d:01:bb:b0:44:7f:95:f7:c8:a1:
d9:92:88:23:76:10:2a:ea:f3:64:76:d8:84:b1:ad:03:03:37:
96:a7:41:49:73:24:0d:8d:4a:1e:66:a1:4f:9f:ae:ea:7c:9d:
5d:36:a3:16:d5:be:6c:b3:13:16:e5:37:16:bd:24:18:e2:22:
23:b6:6f:b4:70:af:20:d0:f3:ac:e2:03:65:93:b4:dd:6a:16:
8f:fb:81:42:c9:8d:34:32:65:d3:a9:23:da:3d:86:de:5f:b7:
28:47:77:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1pUUCLY4KAZKPrvpq5wDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzY4MGVlMWIyN2MzYTZmMDcwMTNjOGZjMjVlYmZmMGM2
N2ZiOWQwHhcNMjUwOTEwMjIwMDQ3WhcNMjUwOTExMjIwMDQ3WjAzMTEwLwYDVQQD
EyhlOGVjMzI3OWY3ZTM1ZDhkMzE5MTkwMGYzM2FjZTkxZjZhOWVjM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcAMth4K2XMxCHCtYePFC5qtD1KU
D0M4OovbH0yDjyKAsCJwDpnE3O7bsMeb79g+OvZXM18wGQ0M2gXRnmod6kls1qdJ
6le33GrgmZokPQ6ibnQtbXDTUdlGG5NIKaXjd6ue9+nWmiLrCb1Swu2iPWF0vdsl
sXlHJUOrOgkrmLTIUS1c+CKcpQQQSeAc+jb1+vEPsruLaFzcvNJUWy4yThL9abjP
zWTbX7GEN2PaezeneWs0hBEDtHHa8mn71H1CI7krO81WYRBozVclcrIpt2wWkcW/
ShgOuMhqvjX0hBwPlbXd2ye/50LuzsHpgu9wuZ63Dz6IUwPjQyh89n55BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjsMnn3412NMZGQDzOs6R9qnsP7MB8GA1UdIwQY
MBaAFP3GgO4bJ8Om8HATyPwl6/8MZ/udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMt
N2JlZDI2NzQzYmNjLzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMtN2JlZDI2NzQzYmNj
LzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAM+6+Dg
Prx0S9ZAPaJ9wXLaj7NrFVJVCgp8j9QUPnlW1n27Dyv5TKuFZeOBYh0+IRIYhXBN
3xkf/Mv7HoE5YHmGRj9YC2Ix70BU/cCGrOTRDEnFHmoeESyIFIAgfqM6hqgUh03r
MozfBbXI0WSX1zXhQd8FmZKm2ALNJQT5yKuG54ejBNd5VqTija7lnMJH0giPhcP7
vzoNAbuwRH+V98ih2ZKII3YQKurzZHbYhLGtAwM3lqdBSXMkDY1KHmahT5+u6nyd
XTajFtW+bLMTFuU3Fr0kGOIiI7ZvtHCvINDzrOIDZZO03WoWj/uBQsmNNDJl06kj
2j2G3l+3KEd3Hw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 04:23:58 2025 by rpki-client