Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier: HnySTiXxI//ZoD3gnvIQ3HT/vCFP+LfdClTBpZKjAok=
Subject key identifier: 56:3E:11:85:BE:C3:7D:C8:C2:15:EB:F8:1F:A7:C5:F9:85:80:EF:DC
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 019893DAE12D3B1816D11A4725A11750B1B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number: 12C0
Signing time: Sun 10 Aug 2025 12:00:51 +0000
Manifest this update: Sun 10 Aug 2025 12:00:51 +0000
Manifest next update: Mon 11 Aug 2025 12:00:51 +0000
Files and hashes: 1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: ZaaYfMJKVY7wIqaz1+ry5asRI2FWDzhC0WJ2H+tZymc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:e1:2d:3b:18:16:d1:1a:47:25:a1:17:50:b1:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Aug 10 12:00:51 2025 GMT
Not After : Aug 11 12:00:51 2025 GMT
Subject: CN=563e1185bec37dc8c215ebf81fa7c5f98580efdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:61:ae:0b:8f:8b:dc:cf:d4:54:c2:c0:99:
ac:5c:08:4b:bb:15:42:60:75:e8:d3:bf:4f:96:f0:
6f:28:57:95:52:83:ab:04:e9:a0:68:61:4b:32:01:
ae:7a:54:69:c8:e2:62:45:20:ff:81:16:71:48:b1:
5e:15:ad:1c:ee:9e:c6:0a:95:47:21:73:1d:1b:99:
72:3e:96:7e:f6:3c:43:63:af:92:57:a1:03:e4:6b:
ec:a2:45:22:80:2c:69:e8:e8:9d:e2:ad:3d:10:d4:
e4:a5:c6:ac:9e:b5:1b:e1:24:c1:1d:17:84:e1:59:
d7:2b:e9:56:1e:60:59:3e:5c:f9:ff:ad:47:16:5d:
4c:05:64:23:4d:05:73:55:5a:e4:25:ec:98:94:5d:
e5:e6:91:78:17:43:d8:bd:dd:ce:df:c5:bf:25:f6:
0a:19:28:be:c2:4c:6b:58:ea:d8:ee:84:5f:59:d0:
33:36:b7:5a:df:ab:73:1e:af:d6:d6:1e:ff:9c:ca:
44:70:e8:24:05:36:7d:8a:e4:91:8d:44:b2:d1:2a:
93:e6:52:c4:1e:28:96:19:cd:9f:31:bf:64:8e:33:
fd:9f:e4:d7:fa:e7:b5:11:33:9d:a2:27:03:a2:88:
de:80:31:cf:e5:b4:29:81:68:7c:ef:02:6a:7d:49:
d4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3E:11:85:BE:C3:7D:C8:C2:15:EB:F8:1F:A7:C5:F9:85:80:EF:DC
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d5:5c:87:96:f7:76:da:bc:e6:80:4b:22:0a:a7:02:36:5a:
38:2e:4b:73:11:68:43:3c:42:e9:68:76:a9:59:80:39:9f:b4:
dc:99:42:49:3b:3b:2c:46:20:78:bc:17:70:fd:db:03:9a:8f:
c7:a6:38:30:a1:8d:45:63:d5:85:23:15:a7:c6:0f:7b:2c:1d:
f1:b7:70:13:e3:1d:93:76:fd:c9:94:c6:e9:df:46:26:b4:5d:
97:c7:56:4d:65:41:13:7e:fb:28:43:6c:3f:75:66:75:7d:38:
74:ae:cf:11:2e:4a:a1:bf:2f:61:fd:3b:25:50:0a:83:73:88:
fe:89:ea:47:5b:fd:ee:a6:80:82:f4:73:8c:d1:8e:4b:94:1c:
9c:ac:a0:93:0b:dd:6b:d6:a6:ea:cc:9d:74:63:ef:67:29:86:
73:9a:6d:d6:34:0b:b2:c6:a2:7b:6e:a0:ba:82:2e:72:80:d6:
9c:21:b5:87:91:46:47:40:5f:6b:7f:9d:d4:66:b7:75:02:53:
2f:64:7f:37:bd:10:a5:c2:d3:ac:8c:6e:d6:de:ea:9d:dc:46:
97:19:5b:aa:49:43:88:0e:5d:4e:74:f0:0c:ea:bf:42:9a:7f:
e9:a6:0a:cc:e9:b5:a4:4b:11:34:96:fe:3a:68:4b:fd:f4:83:
98:82:a0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:56:46 2025 by rpki-client