
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
File: wXO75fcjeEWsqNMmO41R7zePwSA.mft (raw, json)
Hash identifier: H/DL0GMYjTz4htgS8C7uYDL7l4TBt+M+H6q5uJ5y+GE=
Subject key identifier: 0A:79:DF:05:4A:82:ED:3D:A5:68:51:82:CE:48:FC:95:91:E9:C4:C2
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 01987B9C4FA555E3C6D7005135DAB69EC831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
Manifest number: 030E
Signing time: Tue 05 Aug 2025 19:01:38 +0000
Manifest this update: Tue 05 Aug 2025 19:01:38 +0000
Manifest next update: Wed 06 Aug 2025 19:01:38 +0000
Files and hashes: 1: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (hash: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=)
2: wXO75fcjeEWsqNMmO41R7zePwSA.crl (hash: A1rLSHNoKenxTy0xzBAWQlFvv1o3hD25ebDFojYCFjw=)
3: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (hash: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:4f:a5:55:e3:c6:d7:00:51:35:da:b6:9e:c8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Aug 5 19:01:38 2025 GMT
Not After : Aug 6 19:01:38 2025 GMT
Subject: CN=0a79df054a82ed3da5685182ce48fc9591e9c4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:02:b0:5f:24:9a:66:e7:43:18:18:bc:ae:
51:98:d2:d4:b8:52:18:cb:b4:59:2d:0f:bc:e4:07:
97:dc:7a:88:ff:7c:88:d0:a9:65:db:8e:f1:f9:0c:
d7:43:f1:93:47:82:93:99:07:0c:da:a4:ea:cb:af:
55:6e:67:15:42:4b:45:4d:5b:ba:f5:bf:7b:34:0e:
40:8e:7e:7a:60:e2:e4:82:42:f2:1d:78:79:69:47:
52:ca:d9:00:ff:40:41:87:ab:67:86:d2:4f:e9:f9:
be:d9:ca:87:12:57:53:3e:46:e7:e6:3b:bf:7c:a9:
42:f6:c6:a6:05:d6:2b:97:71:31:01:4d:b6:68:ed:
2b:5f:93:8c:c7:46:a6:ca:76:f3:c7:1f:72:ba:c7:
52:5b:aa:37:ef:38:86:9c:18:e7:01:ac:89:2b:8f:
94:7b:fe:f0:34:44:89:4d:b2:98:f1:8e:86:3c:68:
e1:1f:2e:9d:3e:2b:4c:0b:5c:ce:58:cc:06:92:c6:
32:0d:a4:8e:ca:c0:05:50:3d:05:05:0b:4d:e6:e6:
2b:19:75:b2:71:e3:23:a0:e2:e5:7b:ee:07:d8:a6:
ae:03:69:2c:a2:d4:78:58:f4:0d:43:0b:05:0b:08:
bf:48:6f:cb:7d:ca:d5:9f:26:01:a9:4c:1b:ae:b4:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:79:DF:05:4A:82:ED:3D:A5:68:51:82:CE:48:FC:95:91:E9:C4:C2
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:be:f2:06:62:df:1c:ef:06:b4:da:43:af:9f:e7:b7:9a:85:
25:e0:c2:20:c0:8d:ad:a4:59:5a:20:d4:10:52:b8:b8:d8:d9:
a6:0c:34:c9:84:e1:d6:30:8f:9c:e8:cd:21:2f:cd:52:81:8b:
75:8c:fa:6f:ed:9d:d3:94:6e:d2:db:99:e1:22:eb:c5:5c:77:
b1:ae:26:37:20:1f:b1:3e:c6:f0:0e:d5:c1:1c:21:97:df:44:
af:a9:b2:5d:fa:85:8e:2d:52:7b:41:ae:ed:fb:2f:15:8b:83:
ca:e3:47:f6:f7:04:9a:a8:4e:de:98:60:ad:30:d7:46:97:14:
09:da:ac:23:a5:f4:c3:23:4c:18:6c:68:77:c3:79:c0:88:1c:
83:af:b3:06:db:90:31:4d:44:66:1f:7d:c6:e4:95:63:d9:e3:
25:b0:33:93:c2:41:67:93:45:22:7a:c5:7c:4f:ae:97:98:53:
95:14:0d:14:ff:e3:ea:46:0f:b4:89:9a:cf:98:64:9e:65:19:
16:1e:d2:48:c8:1a:b6:33:8b:b5:82:5a:96:92:d8:fb:7a:dc:
14:78:e9:87:22:36:b2:31:e1:76:89:e4:40:9b:95:c5:c4:d8:
08:f7:e3:fa:d2:fc:dc:62:5c:76:b0:83:d8:9c:f3:df:3e:b3:
92:49:b9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:18 2025 by rpki-client