Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
File: IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft (raw, json)
Hash identifier: wfqLYAy6nBJCbzrrLnFyLm7jrBR7HQASE6DPd0a3Da4=
Subject key identifier: 3F:DE:51:E7:36:EE:7F:17:77:2A:B6:01:78:13:CA:96:BE:AC:F0:79
Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Certificate serial: 0199239F394A4378835881573BC2D07FA05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
Manifest number: 04BB
Signing time: Sun 07 Sep 2025 10:01:01 +0000
Manifest this update: Sun 07 Sep 2025 10:01:01 +0000
Manifest next update: Mon 08 Sep 2025 10:01:01 +0000
Files and hashes: 1: IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl (hash: tsgbWZukU16y32wVc+wj60QkCh23D51SvGY6zBIEYCE=)
2: _zFGaif6ktuPRSZOOpcbI9GW7qg.roa (hash: 9+34ErT+7YS3/gqguf6KZOausCEOcTWh/OEHzcUf2rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:39:4a:43:78:83:58:81:57:3b:c2:d0:7f:a0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188
Validity
Not Before: Sep 7 10:01:01 2025 GMT
Not After : Sep 8 10:01:01 2025 GMT
Subject: CN=3fde51e736ee7f17772ab6017813ca96beacf079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:da:48:48:3c:a2:db:31:1d:b9:5f:8c:db:
88:e1:84:c6:86:d2:0e:f5:64:06:2d:a3:46:40:45:
eb:08:5d:76:80:14:88:09:e2:92:8f:d8:80:2c:ae:
94:cf:75:90:98:a9:94:b8:34:29:95:ac:28:ce:74:
53:d5:9a:4b:0e:76:c3:d8:88:9e:43:e6:3d:db:1f:
75:79:0b:7f:c8:89:c3:2b:40:a7:4c:5f:20:f6:93:
31:7a:d1:87:c5:84:cf:4a:51:47:d2:81:61:9b:88:
64:ea:db:06:5f:32:59:9f:22:76:91:70:95:e3:17:
d4:ca:28:48:fa:69:7d:32:6c:08:b8:1f:e3:6e:81:
36:98:90:61:fc:87:d1:f3:24:f5:e4:81:2e:58:40:
1b:84:26:7c:16:18:d6:25:54:69:11:c2:82:7c:46:
d0:ab:32:a2:66:3d:7f:4a:86:11:d0:a6:46:6e:12:
8a:f2:11:ad:d2:d5:65:aa:7b:77:48:6f:b0:c6:65:
95:4f:d8:7c:f2:a4:92:fc:50:d4:5a:f0:67:63:68:
49:7d:4d:1a:a7:90:b3:c6:43:34:a3:8a:93:64:74:
16:19:e2:6d:1a:65:9f:9e:a4:fc:e4:ab:00:e3:2d:
2d:f2:c9:51:8d:3a:73:36:a1:58:7b:23:d2:86:f2:
9e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:51:E7:36:EE:7F:17:77:2A:B6:01:78:13:CA:96:BE:AC:F0:79
X509v3 Authority Key Identifier:
keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3f:9c:44:97:f5:06:76:0d:97:48:28:f9:1a:d3:20:68:e5:
04:55:f9:6c:c4:9e:8f:b5:a7:30:32:05:89:ef:47:06:c8:21:
51:37:97:46:fe:09:99:77:80:20:c0:86:74:a7:8d:63:1e:bc:
35:18:61:75:f0:e3:82:e2:c8:3c:1d:76:f0:1d:61:9d:4f:b6:
55:52:28:66:f5:08:56:e9:44:5f:9e:28:ce:79:94:6b:96:df:
79:b1:dd:b1:0c:71:3d:f4:ff:de:65:f8:c5:87:99:dd:28:a2:
7a:f2:e1:07:30:ce:e2:76:e0:78:39:76:4f:e0:e7:59:59:4e:
b7:a1:7d:f9:7c:44:02:c1:ed:79:40:e8:0b:5d:66:ba:92:06:
e9:4a:34:6d:23:ed:45:8c:43:7b:cc:d3:6e:d7:e3:a9:05:22:
65:6b:5a:18:8b:89:b7:e2:35:83:15:f8:18:a0:d8:fe:9e:8a:
bb:dc:f1:64:d8:fe:7e:e5:2b:ab:e9:98:e2:ec:cc:0a:91:b6:
b6:6f:0c:17:a7:c4:61:60:9c:91:0f:9d:26:67:e2:58:e0:94:
ea:fa:f4:15:bd:ac:42:8d:6c:bd:56:46:76:9f:7c:92:c3:16:
0d:c0:2e:8e:e8:f1:b4:ca:6d:3c:d1:62:c3:9b:0c:2a:bd:12:
21:f1:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:34 2025 by rpki-client