Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File: wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier: j1Jvgzd7rQ9VHhlQh3xovgK+6ZFTDGi6ZWkly5SVC5E=
Subject key identifier: 64:A4:B7:FC:F3:F4:93:D8:47:86:75:C1:7D:65:DE:BF:D9:F7:5C:30
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial: 01987D1C7324FC46FAB1383B000AE665F049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 02:01:13 +0000
Manifest this update: Wed 06 Aug 2025 02:01:13 +0000
Manifest next update: Thu 07 Aug 2025 02:01:13 +0000
Files and hashes: 1: 4nK8mBu8KH58Djeo3td_0Crw3KY.roa (hash: zQgvuYZT7k7Pe+7tNXcpWarsNSwzQ+DP9gqFroEYWW0=)
2: LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa (hash: NiYCGksYq+dLcXAYzq8f7QTlHaWi1LxHnyypP6wHNrE=)
3: MghkPZ3l1Mt5EpONpLu4boLVfIM.roa (hash: 4PywlPrXiO64YW8z7+xrLPHcnjRQHH/ovXTQM30bxGk=)
4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: Kg5g3eWuAY1dP/nERwtzNvT38W4hL4Iwmxvzo826QUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:73:24:fc:46:fa:b1:38:3b:00:0a:e6:65:f0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Validity
Not Before: Aug 6 02:01:13 2025 GMT
Not After : Aug 7 02:01:13 2025 GMT
Subject: CN=64a4b7fcf3f493d8478675c17d65debfd9f75c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:2b:d6:27:33:7e:a5:27:88:e5:e7:24:eb:
71:86:07:fe:4e:bc:8d:ef:82:58:f4:96:f0:c1:e0:
f4:b9:7f:05:42:c7:ef:f0:8a:e0:7c:a4:a4:84:91:
b9:e8:5f:b2:82:ba:fc:76:70:54:b1:fe:58:56:7d:
46:64:b3:86:bc:c5:ac:ec:21:87:2b:ef:25:18:5e:
d3:c1:ac:74:07:aa:b6:db:16:44:f8:35:cb:8a:cd:
c5:04:b6:ec:bf:4c:18:22:2c:cb:34:fd:f0:ef:41:
a4:2a:fd:e2:0e:3c:ba:33:e1:53:f7:e9:12:06:0f:
73:1f:4c:96:72:a1:64:ed:76:af:7d:7f:9a:e9:76:
ef:1c:6b:d6:8e:71:35:55:01:76:e5:38:58:87:1b:
71:f7:58:22:f8:c5:62:5d:a1:98:39:aa:29:af:c1:
c9:13:1a:f3:cf:c5:90:e9:40:f3:74:a0:0c:63:42:
ff:e3:80:f3:12:5c:45:e9:80:38:d1:b2:b9:b7:3a:
0c:19:f7:b6:21:b6:87:38:1c:0a:86:b6:fc:3e:3e:
58:66:6c:27:ad:1e:0d:a3:aa:eb:36:41:9a:e5:60:
39:72:ee:40:95:f4:1a:47:54:2d:aa:97:61:f4:00:
85:0c:57:f8:c9:fe:20:03:71:de:46:04:06:0e:92:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A4:B7:FC:F3:F4:93:D8:47:86:75:C1:7D:65:DE:BF:D9:F7:5C:30
X509v3 Authority Key Identifier:
keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:06:63:30:ba:a5:6b:cf:dd:ce:b4:bc:a2:52:74:72:bd:e4:
c6:05:dd:22:ac:00:13:a1:58:b4:ff:d8:a6:49:a3:06:fc:7c:
f5:0f:e3:74:bb:1e:b8:ca:82:94:4c:15:a3:9b:8e:06:52:0b:
c7:b3:bf:0c:91:0d:de:7c:90:cb:65:30:28:5d:1b:ac:4e:df:
e9:dc:0c:4f:c3:4f:50:de:aa:2b:8c:2d:09:cf:08:0e:17:c7:
26:1b:6f:06:9c:1f:d0:80:3a:cd:5f:23:95:84:31:c0:c6:f5:
7d:9a:0f:41:ae:df:98:b0:e1:c4:14:82:22:b2:a5:4c:ef:2d:
fe:e8:38:b2:55:5c:8b:2b:60:46:0b:a0:8b:e9:23:ed:21:fa:
41:bd:fe:81:a2:11:83:bb:c9:7f:3e:b7:1d:da:ba:8e:ba:39:
df:0d:0a:b0:08:f9:8d:74:fd:80:d8:31:74:e0:4c:35:53:7c:
93:0e:12:47:e1:e9:d5:77:c5:20:06:75:a6:7e:3a:41:7c:84:
b5:b6:80:b0:e3:2c:2a:0d:f2:f9:99:44:c6:80:c5:6b:ca:45:
02:d3:d4:63:20:9e:bc:d2:f8:02:8e:18:03:52:58:b1:3c:13:
a8:a2:e3:53:0a:43:31:ae:a6:11:e5:5b:63:59:39:3f:ab:3c:
c3:fa:8f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:01 2025 by rpki-client