Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: UPYmhlUDYZNXSe7BSLk6sH7zYOEyecjVkvLVymJSpGU=
Subject key identifier: 2C:40:D7:90:51:5A:FD:6D:80:62:34:A2:21:3A:26:C4:72:0A:F6:38
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 01988EEC547C4FAC17BD1137E3561274C25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 13:01:49 +0000
Manifest this update: Sat 09 Aug 2025 13:01:49 +0000
Manifest next update: Sun 10 Aug 2025 13:01:49 +0000
Files and hashes: 1: kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa (hash: GuGEs/myNDqnLNvt1oCueG5pjZk/wU9SkbqBX0DdzIw=)
2: kZ91QLg0xrut8heY5oLTREuaDCo.roa (hash: MHAbqSvE1IAdHrt1bDct/PVOIuPEBRkSyGqv/6pjqdI=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: rQTWJaozjlpXvyD9Rhyud3y07Ao4naSePGZYpU5XGeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:54:7c:4f:ac:17:bd:11:37:e3:56:12:74:c2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Aug 9 13:01:49 2025 GMT
Not After : Aug 10 13:01:49 2025 GMT
Subject: CN=2c40d790515afd6d806234a2213a26c4720af638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:76:e5:26:27:58:92:e8:cd:89:8d:60:10:
e2:18:69:42:b3:75:b2:07:0f:3f:ab:81:44:fe:b1:
e7:7f:b9:e4:45:23:87:d5:31:80:17:ef:08:1c:2d:
05:49:42:9e:f6:93:c4:63:50:a5:64:b5:c7:13:83:
02:1d:8e:7c:20:22:7e:c7:95:8d:51:d1:d4:64:ee:
00:3e:93:f0:9c:7f:82:9b:e7:13:dd:0f:a5:e6:16:
0d:05:d6:f8:ec:5a:ca:24:9d:a3:7b:8f:b6:38:a2:
d9:90:1c:99:8d:1f:15:ab:1f:54:44:e1:c6:39:57:
44:cb:82:0c:5a:b2:3d:4c:05:19:62:fa:47:63:ed:
b6:09:0c:b3:3c:b4:71:c1:dc:a8:80:71:60:1a:c3:
54:fd:5a:f2:4a:d5:a8:4e:39:07:97:2b:b1:cb:ba:
86:e4:a4:08:3a:35:d1:e0:7a:2a:0f:65:31:59:9f:
82:96:b9:a4:f2:72:45:85:81:b9:c8:0f:1a:d2:71:
df:98:c0:38:b5:f6:87:b2:42:b9:3c:12:56:b1:c0:
1c:0d:06:c0:4b:a0:33:ed:a2:da:48:69:57:d0:6e:
90:0f:03:a6:e2:01:4b:08:e8:f6:14:0f:01:1e:53:
d7:c6:5b:10:47:aa:e8:e2:97:ac:b5:ff:6e:2d:18:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:D7:90:51:5A:FD:6D:80:62:34:A2:21:3A:26:C4:72:0A:F6:38
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2b:d2:6f:df:1f:e4:59:a9:b1:5a:20:0e:03:d1:0c:74:c9:
e5:99:e3:d3:9b:21:f2:a8:ce:9b:16:a2:1f:1e:a4:2a:8f:5f:
66:63:28:6f:60:c3:de:34:28:d8:4d:f1:c1:41:a1:ee:13:1c:
9c:60:4e:53:aa:a2:38:2a:b9:c5:92:e0:57:bb:a5:a5:45:ff:
b2:9d:b7:54:5e:34:76:54:23:26:0c:59:31:a0:25:12:d2:24:
ff:2e:6e:0b:77:13:7f:63:95:06:ef:7a:8e:8d:eb:eb:13:54:
8e:a4:a9:4e:97:de:d4:e3:ec:32:75:85:89:eb:37:3e:34:4c:
1c:63:83:c5:a9:72:15:cc:51:d9:35:b4:40:21:8d:52:a3:cf:
3b:29:4f:42:e2:b5:e7:a3:db:32:41:72:11:7f:98:28:7a:60:
a3:cf:48:10:b5:25:4a:dc:f6:8b:f1:15:d4:98:71:9d:c6:33:
b5:5f:fc:c4:c8:74:34:e6:ef:ac:3c:be:e9:f7:48:4d:0b:10:
77:93:6d:c3:49:a7:09:9b:22:6b:db:01:ee:9f:6f:5f:3a:ab:
12:dc:d1:76:94:1e:85:3c:8e:52:36:d9:57:8a:f6:37:12:9b:
d8:be:a3:23:ff:1a:0e:2b:5e:64:d4:5e:a0:9a:74:dc:75:bb:
a5:d3:f2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:11:40 2025 by rpki-client