Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier: CVOkJrJ2EH+04ZpBFIRZuteen9v2OkhW5urG0rclzyw=
Subject key identifier: 18:8A:7A:A8:1F:AE:CF:CE:B2:B6:EC:6A:78:01:F0:06:B0:D4:FE:B6
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial: 01987418BB6C6C61E288E73F467DB1A960E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 08:00:34 +0000
Manifest this update: Mon 04 Aug 2025 08:00:34 +0000
Manifest next update: Tue 05 Aug 2025 08:00:34 +0000
Files and hashes: 1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=)
2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: coUoux/ueB6JR32FnJqJQEG5NQAHNmYuhTbXVYPIUi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:bb:6c:6c:61:e2:88:e7:3f:46:7d:b1:a9:60:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Validity
Not Before: Aug 4 08:00:34 2025 GMT
Not After : Aug 5 08:00:34 2025 GMT
Subject: CN=188a7aa81faecfceb2b6ec6a7801f006b0d4feb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a9:1b:17:e4:28:d4:41:06:42:51:c2:44:ad:
ba:2d:02:b7:2d:e7:9d:68:49:29:29:a3:fb:3e:33:
5a:3a:57:10:fb:3f:16:89:82:a8:9a:2e:8b:ce:5f:
7d:3b:be:7f:b9:17:27:ed:eb:07:4d:0d:e9:7e:b0:
16:3c:71:23:4f:87:74:50:f8:f9:7b:08:c4:0b:17:
7c:10:14:4c:f3:a7:a1:3f:67:c5:ee:37:a7:d9:4b:
bc:ad:55:d3:a8:ca:49:6d:58:fd:39:b2:7d:98:19:
3c:a1:83:8d:0f:54:b4:df:a4:bd:b8:4a:83:86:c2:
00:c8:5d:02:4f:3c:fd:90:28:a0:7f:97:e5:93:96:
05:26:d2:2a:88:93:73:3a:f3:ed:bd:5c:51:35:a2:
b5:a1:c3:ab:9d:1a:65:e4:be:16:4b:da:2c:fe:28:
b3:9b:01:f6:12:c0:5f:16:82:31:6d:41:ea:f5:48:
15:c7:fb:76:f8:51:42:c2:fc:45:42:54:a5:f9:ba:
5e:4e:e6:b2:b8:3d:06:bd:b3:35:fc:9b:48:6f:4a:
74:82:6f:05:30:d2:58:29:19:45:10:c5:87:50:21:
d0:5c:d3:9d:d0:dd:80:db:0c:da:f8:18:75:bf:f1:
fb:67:22:ee:cf:12:c7:94:5a:d6:a7:d2:e7:11:a6:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8A:7A:A8:1F:AE:CF:CE:B2:B6:EC:6A:78:01:F0:06:B0:D4:FE:B6
X509v3 Authority Key Identifier:
keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:57:cc:90:6f:c0:a7:bc:48:ac:e0:f7:33:a0:12:0e:ba:c3:
28:b4:c2:1e:e9:ee:52:ea:f5:ac:e2:35:8c:06:d8:da:aa:18:
db:01:10:53:5a:95:53:69:3e:9f:75:97:2f:07:1e:89:5e:1c:
42:5d:33:cd:68:e0:16:72:e4:e7:aa:3a:0c:a1:a5:8c:e1:8e:
80:35:fa:db:34:b7:dd:ee:84:bb:51:27:85:14:0f:7e:11:bb:
df:9b:4b:29:31:39:2c:d2:b5:88:ad:18:18:a4:e3:d6:82:5e:
06:77:40:05:fa:51:56:9a:f8:96:61:7a:09:e4:3e:f7:98:fd:
46:14:5c:67:58:1f:61:a5:85:a1:da:df:e5:10:ee:ec:68:7a:
4d:b6:2f:6a:09:6a:3a:ef:a2:02:fb:b3:32:7b:ef:8a:99:41:
62:29:bd:7c:01:4c:d4:3c:bb:01:5f:07:c8:f8:04:99:14:3c:
5d:c6:e2:54:da:3f:5a:06:4e:89:1e:92:ec:88:46:c4:a7:b5:
32:cc:b3:c3:ee:85:b1:95:80:3c:d9:ff:8e:8b:c2:71:ae:5d:
8c:bc:6a:56:22:ba:3d:ea:c8:ab:fa:b7:77:dd:9a:3a:19:12:
75:1e:e2:5e:2e:fd:ae:80:df:31:26:cd:f4:94:f3:67:fc:85:
b1:ff:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:57:58 2025 by rpki-client