Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: 8F+qZUp9uoVJSRGCzC4qwXUh7abIfHOUWL5C6C730+k=
Subject key identifier: 35:03:42:76:8A:B9:67:C8:F7:BC:58:7F:F9:15:F1:5A:87:F2:FD:53
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 01988EEC93D469AA767977C63BF564878871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0CFA
Signing time: Sat 09 Aug 2025 13:02:05 +0000
Manifest this update: Sat 09 Aug 2025 13:02:05 +0000
Manifest next update: Sun 10 Aug 2025 13:02:05 +0000
Files and hashes: 1: DkCgqG244-xdfGSiZiRL_6jjMU4.roa (hash: LYv1Ix1K/vm79oDEZ0SXpTqFtZHiYhhxeZ+EeZAbK6I=)
2: eaEk-4j5PrJQWB1ynGSuwR96qYE.roa (hash: cKnW7tUA+y/LjIR8x0MQBeinXC+rpLOrHc/MhvgB6Fk=)
3: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: Wx3BqwMe2SczCiqYESKA63cvF3g7HNEhC2IDQ2UOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:93:d4:69:aa:76:79:77:c6:3b:f5:64:87:88:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Aug 9 13:02:05 2025 GMT
Not After : Aug 10 13:02:05 2025 GMT
Subject: CN=350342768ab967c8f7bc587ff915f15a87f2fd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b2:a0:f7:99:53:06:72:f4:ee:56:ef:bc:66:
74:d0:97:0b:a5:34:0f:1d:08:cd:94:ba:dc:9b:3b:
eb:91:82:af:6d:d9:22:f9:17:ae:75:eb:13:a9:15:
55:1d:1b:45:3b:16:51:b6:4e:8f:60:a2:1a:25:07:
88:9c:f2:28:16:29:63:d3:f4:77:12:f2:fd:10:71:
cd:f2:5f:e2:39:6f:25:d8:84:f9:c5:84:ca:80:e7:
de:a6:e9:91:82:51:7a:cc:dd:5d:22:b8:b6:00:f4:
2a:a9:e3:8b:f3:f1:c4:ab:5b:37:e9:d1:5a:9c:5b:
15:22:69:62:9a:0f:42:ae:07:0a:ac:bb:87:b5:03:
e4:3d:16:28:fd:9b:be:1f:8f:4f:0c:6a:52:f4:86:
66:47:19:e8:a0:f7:6f:da:04:ef:34:a4:9c:a0:89:
7c:f1:9f:75:3c:e1:3b:d3:78:b8:44:43:39:81:cc:
33:36:9e:30:06:0e:46:a2:62:ad:83:61:fc:1d:43:
17:37:55:3f:a4:9c:b6:83:dc:4d:2a:b2:d1:88:65:
07:98:7b:4d:f3:7b:ca:e6:2e:21:da:d8:8d:f7:e8:
64:5d:d1:df:26:ed:fb:cb:49:67:28:73:14:7a:d9:
fe:c8:05:f1:bd:1f:7e:31:a7:35:b4:33:3d:aa:e9:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:03:42:76:8A:B9:67:C8:F7:BC:58:7F:F9:15:F1:5A:87:F2:FD:53
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4d:cf:09:9a:e8:fd:fb:8c:02:30:50:57:f5:21:23:f8:68:
68:42:c7:31:d2:ce:00:59:90:50:b6:ba:6f:c6:47:03:72:42:
86:f6:20:22:ac:2a:02:5b:7e:38:cc:5f:a8:a2:ec:32:bc:64:
36:38:58:d8:5b:f4:a9:52:7a:da:a0:e1:6f:49:2f:53:69:2d:
15:ee:fe:4f:00:72:30:a2:98:48:21:9d:cb:12:b4:10:08:7d:
0c:46:bc:93:a8:15:89:8e:bf:68:58:8d:27:b0:16:e0:49:fc:
6f:ea:17:da:9c:c7:92:57:b7:6d:7a:f4:22:5f:f1:10:d9:60:
5a:b6:f4:fa:41:71:67:04:62:0a:a8:ad:b0:55:e5:38:3f:3b:
b0:a0:85:c2:87:b0:14:0a:54:bc:8f:af:38:47:4a:57:3b:f9:
2a:bf:ff:b5:98:a3:9c:39:a1:ec:79:3b:14:c4:ef:4c:8d:92:
a0:e7:26:c8:79:27:8a:23:43:a3:ed:a5:6d:5f:e8:66:df:2b:
9e:86:ec:7f:20:fb:e1:5e:50:36:b5:fb:77:2c:58:66:5d:5a:
9b:e3:50:b5:cf:33:60:48:fa:5a:b9:03:9a:4d:8a:68:e4:ae:
ac:b9:1d:6c:93:24:f3:2a:e4:3d:58:c9:5a:cc:48:6b:90:68:
7b:7f:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:23:00 2025 by rpki-client