Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File: w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier: tWHUZsNhwEL/cBEGXzsqCVFn56re+6rmwxMYdfzGNXs=
Subject key identifier: BB:69:9D:A1:39:07:7F:F9:E1:33:91:FA:75:DD:75:64:6F:35:B3:3B
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer: /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial: 01992FA37D478DDD3FD6B51FA518A33B0F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number: 0D59
Signing time: Tue 09 Sep 2025 18:01:07 +0000
Manifest this update: Tue 09 Sep 2025 18:01:07 +0000
Manifest next update: Wed 10 Sep 2025 18:01:07 +0000
Files and hashes: 1: lGKMR71wIiss24ARjCT6dglSzeg.roa (hash: pOKk5O831tF+GU5ZB5nOM1eHOcUVJqNluw5xZGpLXhs=)
2: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: J55SFkl4abgtDPDNvSAvnk2600PMOP7i+Yicmjsayw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:7d:47:8d:dd:3f:d6:b5:1f:a5:18:a3:3b:0f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Validity
Not Before: Sep 9 18:01:07 2025 GMT
Not After : Sep 10 18:01:07 2025 GMT
Subject: CN=bb699da139077ff9e13391fa75dd75646f35b33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:da:a8:ea:4c:8e:cb:d9:d2:b2:d4:e0:0a:
2b:e6:a0:22:4f:f7:9e:67:d4:46:70:dc:59:a1:a5:
90:15:b4:c7:8c:42:f1:6d:1a:27:60:08:e4:c0:ef:
bf:ca:2f:10:b5:8e:a1:50:0b:21:7a:59:f4:38:67:
de:6d:48:d2:ac:1a:94:f2:85:6f:15:7c:c2:e1:2c:
3d:b4:5b:12:48:45:a1:50:2a:0e:f0:96:17:52:fc:
34:5a:40:1f:5f:1e:36:f3:90:30:43:df:e1:ae:90:
c8:8f:05:f6:ad:b0:c1:8e:18:31:dd:99:6a:b3:27:
8a:14:ef:dc:ae:8d:64:73:25:c8:32:b5:9f:d2:7f:
0e:9c:82:dc:b2:cc:a1:23:54:a5:b9:c5:75:e5:c8:
bf:fa:78:11:4c:9f:10:77:2b:47:83:35:10:07:60:
c6:b6:8a:04:b0:df:6c:be:88:d0:6d:2b:b5:43:30:
8b:75:db:b2:87:2c:80:0b:4b:d4:6d:59:b8:f7:a6:
df:71:5c:f1:6f:8b:4a:7c:29:38:73:90:54:09:6f:
56:e6:6b:0a:dc:45:4e:b1:7b:89:23:b4:a6:40:d7:
bc:a8:ff:ff:02:6d:6c:dd:e6:ad:6e:d8:99:e6:29:
53:70:7a:6b:15:54:32:25:2d:68:4b:d9:07:dc:cb:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:9D:A1:39:07:7F:F9:E1:33:91:FA:75:DD:75:64:6F:35:B3:3B
X509v3 Authority Key Identifier:
keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:70:dc:0a:56:d2:53:6e:6c:12:f5:4a:f1:d6:da:4f:03:35:
d8:cc:61:d8:f4:03:1b:db:33:a3:f4:aa:38:fc:dc:9d:8b:9a:
13:d9:32:3a:ef:8b:7a:97:82:93:c4:1c:c2:2f:db:1d:b5:46:
53:de:5f:97:9e:50:f2:b9:56:9a:83:58:a1:da:b1:9e:19:8f:
1a:18:cf:14:4b:3c:eb:80:e9:42:4a:fd:c6:cb:8e:1a:fb:99:
c3:35:86:20:cc:b5:98:2a:87:1e:ad:77:01:68:f5:df:c9:ec:
4c:82:1b:aa:b4:44:08:53:5e:26:66:27:4c:26:c4:52:44:76:
bc:38:9d:13:08:d9:d0:31:c4:59:30:ad:4d:60:18:a7:34:75:
18:e8:0a:c9:4a:f3:12:68:19:68:49:d0:a2:d7:58:ac:d4:8a:
59:89:bb:cc:2a:12:5f:9b:ce:c6:90:b6:28:07:f2:97:a9:0d:
31:49:c9:ef:d3:4a:72:b9:20:ec:61:3a:42:f3:ef:9d:98:bb:
73:5c:1c:c9:51:51:fe:6c:a3:cf:9f:d9:e9:5d:98:a9:2a:b1:
ce:a2:71:54:91:fa:5e:82:dd:ce:22:fa:fb:f0:95:64:4d:4f:
08:6e:46:0d:f4:16:c7:cb:64:bb:28:4e:a7:22:0e:c8:d4:7f:
db:b2:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:30:45 2025 by rpki-client