Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
File: _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json)
Hash identifier: hEIdZr7rs/ASluq1nNjRngOFHRDnZxc8Lr/76QjXGqc=
Subject key identifier: 87:48:5D:38:CB:71:00:82:EA:E2:33:9F:F0:E7:10:B0:B6:D3:2B:92
Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c
Certificate serial: 019874BDD2EA2EFEB4590FA0FE4B75D96D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
Manifest number: 01C6
Signing time: Mon 04 Aug 2025 11:00:53 +0000
Manifest this update: Mon 04 Aug 2025 11:00:53 +0000
Manifest next update: Tue 05 Aug 2025 11:00:53 +0000
Files and hashes: 1: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (hash: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=)
2: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: XikykIdBJFHQaDQicjVVtKTzSVegyjPVE8ha7n9GB4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:d2:ea:2e:fe:b4:59:0f:a0:fe:4b:75:d9:6d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c
Validity
Not Before: Aug 4 11:00:53 2025 GMT
Not After : Aug 5 11:00:53 2025 GMT
Subject: CN=87485d38cb710082eae2339ff0e710b0b6d32b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:32:9e:7c:f7:48:65:fa:9c:35:30:bd:79:
c1:95:b5:bf:8a:57:28:d1:90:6e:4f:71:e9:a5:86:
10:01:36:c0:26:89:2a:c0:6c:4a:48:df:41:87:cd:
a4:1c:31:e5:b7:ea:69:a9:3d:c5:42:fb:9f:cd:a6:
92:ac:03:f5:c9:4e:49:87:c2:a5:2d:a8:c0:9d:d0:
fe:c0:df:7c:7c:4a:75:18:c8:e3:2e:4f:7d:ba:80:
6c:be:54:5f:4e:1f:cd:d4:3a:23:33:73:b7:83:4c:
c5:dd:10:6a:7f:9f:80:11:c8:4b:31:63:0a:e2:c6:
bf:a8:86:d7:3a:1d:0b:92:de:da:e0:4a:f7:25:c7:
43:ce:ce:0f:c8:aa:7a:ef:f7:14:fb:e9:46:8c:16:
86:c8:eb:63:67:67:35:7e:4f:79:0b:31:a0:1c:58:
b8:d3:c3:3d:5e:2d:b6:a3:5d:98:f4:8d:f6:9a:fd:
e1:ba:f1:a8:da:90:68:61:dd:bc:0f:ee:82:d8:e1:
0c:99:89:c9:27:11:c8:05:67:25:06:8c:7e:9a:22:
1e:6f:15:28:6f:3d:05:6e:d7:2b:79:9b:19:b7:ea:
21:61:37:1e:fb:83:1b:f1:e3:15:1c:b2:b6:fe:5b:
af:d0:25:77:e4:47:6f:3b:8f:f6:32:6a:17:bd:87:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:48:5D:38:CB:71:00:82:EA:E2:33:9F:F0:E7:10:B0:B6:D3:2B:92
X509v3 Authority Key Identifier:
keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9f:08:fc:66:89:c5:25:10:d2:90:c5:34:69:29:6f:71:d8:
73:b1:6a:51:c9:d5:96:39:2c:9a:08:23:dd:db:bf:b9:6f:b6:
2c:ce:60:90:fa:9a:6c:c5:e7:cf:48:80:de:4d:ea:29:98:c7:
da:3b:27:bf:66:f9:74:ae:07:5b:8a:38:55:d5:4f:fb:ff:68:
22:b2:44:1b:d1:7f:d5:19:df:7b:6f:57:19:24:8c:47:cb:28:
cb:1c:c4:b9:f7:41:84:67:f1:55:b5:43:f0:84:ae:28:36:b9:
3f:70:f2:ac:a7:c2:8d:89:9b:39:1b:57:fe:73:de:f7:d0:6c:
78:06:3c:83:24:89:9e:3c:4f:1f:b9:73:47:7e:c0:59:37:b9:
52:2c:18:81:3b:af:44:8c:85:a3:59:99:45:de:47:80:de:a0:
50:c6:99:43:8c:ca:a3:e3:d8:ee:ef:70:f1:66:de:a6:cd:3a:
b2:2f:c0:54:f1:da:91:3d:68:48:8e:90:5d:87:b1:92:eb:5e:
35:16:63:cd:07:7b:79:05:11:68:fe:5a:d6:f7:be:36:fe:c8:
f7:5d:33:bc:be:bd:03:29:01:5c:e5:48:7c:b6:55:9f:84:48:
4c:25:fd:7c:e5:8d:d4:5a:41:d4:4b:65:db:c1:a3:5d:51:b3:
cb:ba:de:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:30:26 2025 by rpki-client