Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier: uBnkotoIK33sc4JkPnmYTrX9lNcPMT2ki4X2i+lRDEk=
Subject key identifier: 92:39:94:58:D3:4C:99:F6:2D:8E:0E:72:12:00:E4:94:56:04:CB:61
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 019A2AB0B1800BD4168D15782BC5DBC6F91D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number: 0DDB
Signing time: Tue 28 Oct 2025 12:00:14 +0000
Manifest this update: Tue 28 Oct 2025 12:00:14 +0000
Manifest next update: Wed 29 Oct 2025 12:00:14 +0000
Files and hashes: 1: lGKMR71wIiss24ARjCT6dglSzeg.roa (hash: pOKk5O831tF+GU5ZB5nOM1eHOcUVJqNluw5xZGpLXhs=)
2: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: ATrDJPXVV7h+0wZdFiEJ/HgalTzwsy1Wuv2oix1SAvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b0:b1:80:0b:d4:16:8d:15:78:2b:c5:db:c6:f9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Oct 28 12:00:14 2025 GMT
Not After : Oct 29 12:00:14 2025 GMT
Subject: CN=92399458d34c99f62d8e0e721200e4945604cb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:db:b3:7c:60:5a:11:c9:23:46:55:2a:15:
ec:89:9b:3d:0c:78:7c:3b:0c:e8:7b:0e:44:4f:11:
6a:68:87:4c:7f:e4:e2:0a:b5:8d:2e:e9:38:43:c2:
c8:85:fe:a4:10:a8:13:16:ea:f0:65:81:6f:5d:43:
d8:6e:e1:65:e9:17:fd:cd:35:2a:bb:54:83:ad:0e:
01:0b:ea:56:1c:4f:36:1b:39:72:5f:6c:cb:05:ff:
d6:2c:4a:32:7d:ce:07:1c:0b:29:0b:32:00:f4:b1:
e4:9c:cd:c7:53:fd:4f:c8:e0:41:2c:ea:05:83:df:
b2:28:08:d0:d5:8f:23:1b:e2:8b:4b:90:e2:be:70:
97:f7:de:14:07:33:bb:08:1b:d6:0f:2c:07:69:7f:
69:9e:96:e8:f8:e6:ef:8b:46:93:01:56:ac:79:cf:
b6:c3:21:68:19:31:35:8f:7d:95:d2:8c:76:28:c9:
be:6d:90:d3:46:98:12:fb:b6:5b:f8:6a:27:ae:2d:
ac:01:4f:fb:ad:10:8e:58:d6:94:e4:0b:19:2d:b6:
4c:dd:9e:15:15:ea:de:0a:b6:4a:3a:ca:15:3c:20:
1e:93:d3:35:7e:f5:2c:18:3c:dd:46:18:e1:85:fd:
49:b1:08:d5:3b:30:a5:ba:0e:8a:65:48:62:28:da:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:94:58:D3:4C:99:F6:2D:8E:0E:72:12:00:E4:94:56:04:CB:61
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:20:5d:cb:70:bb:ff:8f:42:04:4b:2d:1a:ce:4b:7f:08:cb:
66:d7:e0:be:50:1f:0f:4a:4f:12:08:a6:83:0a:41:e1:4a:cf:
02:95:1d:16:29:7a:12:1b:7a:7b:b3:19:27:05:f4:fe:70:cd:
22:0e:f6:4c:b2:e8:ed:5b:98:56:22:a2:0d:b0:ec:ce:25:f5:
93:b4:4a:e8:0e:34:89:4f:0a:34:d8:2c:d3:b5:fb:91:b0:4f:
ba:73:34:5c:55:f8:07:f9:eb:a9:b8:d6:8a:8f:93:99:64:2c:
e5:9e:55:53:9a:37:00:63:61:2f:73:47:97:67:6b:8a:fd:e8:
0d:24:99:8b:44:44:78:a3:3f:49:f2:9b:69:0d:f7:d1:25:e2:
8a:1b:02:24:42:74:13:a7:25:1f:60:a5:27:8c:fe:24:19:ed:
77:de:4c:5b:43:d6:15:26:70:e0:39:56:b0:b4:c7:60:1c:de:
85:e2:15:42:76:ce:37:1c:6c:27:c5:c0:dd:a5:4d:6f:d9:f1:
50:4b:a2:45:6f:f8:d5:60:dd:85:e4:27:c0:b6:01:ce:dd:24:
ce:d0:93:1c:50:f8:68:e6:7d:8b:01:93:b8:a1:14:53:7b:8c:
f0:73:fd:14:53:9d:dd:5b:9f:2d:25:9d:0f:b9:01:55:74:db:
3c:48:05:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:14:23 2025 by rpki-client