Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File: wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier: j+nFlbV3Y3oh6LcVXPUNeDcN2qMS3rf7c7zd9R9ZO9A=
Subject key identifier: 4E:01:25:0B:3C:46:58:96:56:6C:37:A9:23:2B:4D:24:E6:97:0B:05
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer: /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial: 0198974972C4BF10A4E97FD3D3BF95FF5596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number: 0598
Signing time: Mon 11 Aug 2025 04:00:29 +0000
Manifest this update: Mon 11 Aug 2025 04:00:29 +0000
Manifest next update: Tue 12 Aug 2025 04:00:29 +0000
Files and hashes: 1: nlp-yymaqYzgw12m1QvoCWjeZIw.roa (hash: Yssi7rDTBVMdou6reFU3+Vkw3D/c6F2oI+HGCYZH4Sw=)
2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: Vqqnh3Ri84vT+alNPJj5t5Qj0fewKX5znw1ea8jK2bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:72:c4:bf:10:a4:e9:7f:d3:d3:bf:95:ff:55:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
Validity
Not Before: Aug 11 04:00:29 2025 GMT
Not After : Aug 12 04:00:29 2025 GMT
Subject: CN=4e01250b3c465896566c37a9232b4d24e6970b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:25:d3:fe:78:36:ec:10:fd:50:af:b3:70:
d9:5f:7b:49:2b:c7:8b:bf:9d:1c:06:97:86:3b:a2:
ef:00:55:07:01:21:80:d8:14:7f:23:29:58:7b:4a:
8c:26:8b:0f:95:6f:a6:a6:c4:e3:3f:89:b6:ef:9e:
65:7b:28:6d:34:b9:ae:c0:48:a4:6d:09:b2:90:49:
c1:26:17:11:d2:af:1d:30:c8:54:e8:6d:79:fe:60:
e3:53:30:ce:1e:35:c3:a3:e9:a4:84:49:d4:9f:7e:
3a:95:d3:58:54:3b:29:a5:fb:db:5b:42:db:ce:c3:
83:c8:dc:d0:3a:ba:0a:d3:5e:aa:73:45:30:c4:b0:
e7:5e:70:3e:83:77:b4:41:83:40:0d:12:92:ef:89:
44:b1:e5:32:ed:eb:e4:22:9b:23:5a:6a:e6:9f:2b:
b0:d6:70:f0:76:dd:0e:38:55:4c:9d:67:2c:54:48:
5c:22:c5:8c:82:6f:ea:75:a0:cc:fb:39:38:0e:8d:
52:4c:26:af:86:4e:ef:8d:52:2b:82:08:93:dd:12:
74:1b:05:7d:1a:53:e7:89:0c:d3:77:30:fb:25:de:
9a:63:24:34:dd:e1:43:a2:f3:48:dc:fa:4a:8f:2b:
39:41:33:e0:ce:e4:cb:5c:46:a3:ba:21:31:5d:c3:
40:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:25:0B:3C:46:58:96:56:6C:37:A9:23:2B:4D:24:E6:97:0B:05
X509v3 Authority Key Identifier:
keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:bf:e8:f3:42:79:84:2c:7a:e7:64:93:92:bd:58:ef:08:54:
14:75:46:bf:4f:58:14:18:d6:5b:0a:a7:8c:74:b2:54:e0:f9:
95:5d:ba:d8:e2:78:56:e7:d4:c8:26:68:0a:e0:ec:1e:5f:bc:
42:fa:3d:cd:bf:25:62:d1:d3:c6:bd:d6:06:10:c0:93:f5:ae:
86:38:a6:6c:c0:c8:17:4e:b9:4b:c9:51:6e:86:d9:13:07:2c:
cc:c7:20:23:78:ce:01:83:ee:81:3a:8f:1d:05:1f:05:34:10:
81:ba:11:ea:a9:91:ae:52:f7:b2:d7:08:ee:81:92:7e:1a:d3:
41:54:c5:7a:c3:f5:b1:95:e1:a5:f7:32:1d:26:55:9f:b7:b8:
b6:e0:29:93:e9:cd:01:87:3f:b3:a0:28:ce:2d:6b:c0:2c:ac:
1f:c4:f6:d2:c8:23:2c:42:cd:56:ff:41:9c:31:1c:12:0a:40:
b6:61:e8:5f:76:a1:3f:8b:0c:d5:03:c4:ad:00:87:29:8d:ea:
90:f7:62:98:80:57:5f:d3:32:5a:c1:56:e6:b3:c9:27:0a:2b:
e5:ac:be:fa:54:a9:63:d1:23:31:2f:76:e3:f6:05:be:3a:ff:
4b:5f:63:78:10:26:d6:6f:64:c7:f3:e0:63:d2:cf:eb:0b:cc:
e0:0c:88:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:34:05 2025 by rpki-client