Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
File: w_sAsiDqeEoEaDBU_L9OS0ietCA.mft (raw, json)
Hash identifier: yc8cZ3PgthWN4QDbgtAgbrUKQ1VXf8SGt0hBY0uypi0=
Subject key identifier: A7:0A:BD:85:D8:D3:48:5D:F9:AF:22:F4:B6:8D:14:E1:6A:80:4C:31
Authority key identifier: C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
Certificate issuer: /CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Certificate serial: 0199240D61A4F40CB7986D78FFEB9A427EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
Manifest number: 0A31
Signing time: Sun 07 Sep 2025 12:01:20 +0000
Manifest this update: Sun 07 Sep 2025 12:01:20 +0000
Manifest next update: Mon 08 Sep 2025 12:01:20 +0000
Files and hashes: 1: JXn11nJ90d5TiYF9GBYXGMgzBVU.roa (hash: xKanBKZfDLhsfcdAIiMFoN3EiNJRNn6FGvW7wSns+Xk=)
2: w_sAsiDqeEoEaDBU_L9OS0ietCA.crl (hash: aTkH1dcRpPsDr8B2qvvuplDC8jhUiIABs+q6aABZSu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:61:a4:f4:0c:b7:98:6d:78:ff:eb:9a:42:7e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb00b220ea784a04683054fcbf4e4b489eb420
Validity
Not Before: Sep 7 12:01:20 2025 GMT
Not After : Sep 8 12:01:20 2025 GMT
Subject: CN=a70abd85d8d3485df9af22f4b68d14e16a804c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:80:b4:55:a1:16:a4:0c:e2:a5:59:f2:ed:
7c:d4:5c:c4:c2:f5:6c:6a:f0:8a:54:76:21:fa:9b:
ad:53:e7:bd:aa:78:b2:ba:72:08:e7:5e:26:ad:ee:
0d:8d:49:92:ae:aa:ee:26:70:a3:17:91:3d:58:88:
85:bb:d5:4e:77:f4:77:86:aa:5c:da:e2:17:3d:ea:
29:78:2f:86:8e:18:1f:70:1f:b8:ca:c3:2a:a3:4e:
75:54:0b:58:c1:0c:15:2e:bd:33:52:1e:5f:a6:50:
2e:e3:79:14:19:5c:31:d1:c7:d5:88:98:a0:50:4a:
96:f5:a4:99:3f:bc:58:f3:cc:34:b9:b6:d5:0a:b0:
52:ba:78:1e:07:49:0f:97:71:91:07:2d:b1:17:f7:
47:34:77:69:e4:e7:66:cc:e0:59:b8:cc:de:2a:cb:
8f:d8:f0:35:e9:3d:fc:db:1b:b9:6f:d6:89:b1:32:
1e:5e:56:b1:99:2e:f7:67:81:a0:9e:48:0c:fc:c0:
a5:96:af:3d:f8:63:bc:d0:88:70:d9:ff:e4:c7:0b:
14:bb:a6:08:f3:25:15:43:38:e5:a0:8c:e8:75:46:
f8:e2:e2:ff:1d:f5:e5:1c:0e:7f:b7:19:5e:7b:42:
22:07:fd:97:8d:28:3d:62:e0:11:3c:f4:f2:fc:b8:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0A:BD:85:D8:D3:48:5D:F9:AF:22:F4:B6:8D:14:E1:6A:80:4C:31
X509v3 Authority Key Identifier:
keyid:C3:FB:00:B2:20:EA:78:4A:04:68:30:54:FC:BF:4E:4B:48:9E:B4:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_sAsiDqeEoEaDBU_L9OS0ietCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/210211-ffea-47ee-89ba-6cccba9974ec/1/w_sAsiDqeEoEaDBU_L9OS0ietCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:39:d3:5f:44:7f:c7:44:f9:8e:5b:ba:4e:be:ad:ac:02:8c:
60:b3:52:a2:0a:7d:78:ca:56:b8:36:31:b6:38:f3:db:4d:9d:
ac:42:9c:e5:5d:23:f2:af:3b:89:3a:a7:81:bb:87:5f:70:bd:
50:1e:96:ba:ad:6b:2b:03:2a:e9:98:b8:d0:d3:a0:76:d2:03:
be:ae:0d:02:90:3b:09:c4:16:14:e7:06:3c:43:d3:a9:58:91:
39:e5:cb:0b:0f:7c:2e:6c:88:9d:97:68:8a:72:7e:b0:2d:b1:
02:79:02:a0:35:57:9c:37:f5:fa:bd:64:df:72:f1:2c:b8:44:
6e:4f:9e:09:27:41:ea:cd:28:3e:e0:0f:cf:8e:08:51:ad:79:
c5:6e:83:b6:86:83:e9:b7:c9:0e:64:53:6f:ce:35:a2:90:df:
63:d0:3d:86:df:15:ae:81:ad:ca:2f:74:8d:77:42:3f:b1:b1:
bf:c2:40:a0:f8:c1:33:93:39:e5:f9:4a:56:ff:91:6d:e2:4e:
ba:a0:17:87:6d:3e:e7:7a:28:7d:c3:b0:3a:1b:69:ea:92:8f:
98:f6:88:e1:78:70:e0:f8:8c:6b:01:93:f5:52:c4:ec:73:50:
95:44:77:81:21:e1:44:07:48:72:12:7c:d4:3a:c3:4d:fd:14:
66:dc:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:14 2025 by rpki-client