Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: QmBlTicCSyzJXs1IT/Dltj+omwdB25PmrNG8njabe+g=
Subject key identifier: 51:31:6F:58:EC:76:DD:21:91:F1:92:45:33:F0:14:A8:C7:81:23:83
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 01989E5E6D0B47629DDC25752DFA182899A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 1027
Signing time: Tue 12 Aug 2025 13:00:45 +0000
Manifest this update: Tue 12 Aug 2025 13:00:45 +0000
Manifest next update: Wed 13 Aug 2025 13:00:45 +0000
Files and hashes: 1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: 3Kef8jMjU9t6PcobauKW0lXlmeEfJQY5nR7Fuwng/XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:5e:6d:0b:47:62:9d:dc:25:75:2d:fa:18:28:99:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Aug 12 13:00:45 2025 GMT
Not After : Aug 13 13:00:45 2025 GMT
Subject: CN=51316f58ec76dd2191f1924533f014a8c7812383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4c:65:4e:7c:88:ea:bf:18:32:e1:f6:26:ec:
0f:9b:ed:f5:8e:47:5c:4d:ce:7e:0d:6b:5e:dc:d3:
56:fa:5c:a6:5a:92:10:35:f8:4b:59:d9:23:a0:f7:
6b:d1:d7:f2:4e:56:32:c4:2f:2f:17:81:68:aa:69:
9e:16:29:40:cd:ca:2a:0c:fa:2c:f5:c6:65:b7:c7:
5d:a0:33:d4:bb:54:e4:dc:b7:eb:e9:11:33:fa:15:
20:6e:b1:c2:bc:8d:af:93:2b:2a:54:a1:78:23:e7:
c2:cd:bc:12:6c:6b:55:3e:5d:5c:af:e8:66:da:81:
24:1d:1a:4d:1a:9a:38:c5:45:3e:07:69:a9:c7:c7:
b0:ea:39:5d:3f:54:cc:60:9b:0f:8d:69:db:fe:05:
1f:75:b6:67:eb:8b:95:34:b0:e6:a3:50:1d:fb:c8:
81:f0:6a:7c:e4:9a:17:56:93:b8:ec:96:bd:0c:35:
ca:3b:d5:21:0c:6f:b8:b4:38:3e:cf:7f:2b:81:71:
86:dd:7b:2d:47:ad:81:a5:38:11:5e:52:c3:02:04:
96:0b:d9:17:dd:fd:0c:7f:49:ab:f6:58:43:41:f7:
5f:a8:ad:62:f7:83:b5:bb:33:59:dc:aa:15:a0:c0:
39:b5:18:c9:e7:54:6b:ca:66:4c:65:a2:ef:10:43:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:31:6F:58:EC:76:DD:21:91:F1:92:45:33:F0:14:A8:C7:81:23:83
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cc:19:53:67:14:5f:a8:9e:41:f8:fc:39:93:d3:6e:48:f7:
7f:0d:e6:7e:2f:97:8d:89:62:2d:30:0b:41:0d:4b:55:76:7b:
65:40:1b:bc:24:20:0e:73:da:75:a0:e4:79:14:a3:4e:0b:94:
dc:40:c8:9e:b5:3d:38:16:e7:65:a3:44:62:68:6e:ce:8d:ee:
b8:6b:a9:34:ad:70:d5:76:72:0f:a7:bb:25:99:e8:e7:fb:e0:
ea:12:a1:83:ea:14:6a:fb:8e:88:09:7f:f8:39:e0:b1:97:a5:
31:eb:92:e8:8e:c7:b5:02:29:6d:9b:e5:12:96:ad:17:a5:71:
e5:20:3e:57:5e:a4:50:59:67:7b:be:f7:46:10:e1:ec:32:94:
44:3c:c1:25:db:97:02:bd:7f:d8:50:93:34:f3:4a:4e:a5:6d:
17:b4:1b:17:b2:e3:b1:68:bf:f0:eb:9f:e5:e6:06:4f:b0:10:
80:54:f9:32:f7:92:18:b1:de:02:28:be:1b:9c:da:60:e7:d8:
46:7a:84:5c:5c:99:e2:50:99:13:c9:e2:a8:88:85:c8:51:4f:
a6:8d:f2:55:7c:9f:ee:ee:08:26:3e:43:d8:f1:b3:3d:bc:42:
90:ed:b4:2f:1b:8b:aa:ad:e8:13:d0:f1:5a:23:b7:b1:ea:38:
b3:1f:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:10 2025 by rpki-client