Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File: wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier: H1jLYZcynCJ0d7T/c0rLB5+OJD4yhBn3mcLj+VeCJgI=
Subject key identifier: D3:6E:E1:AC:3C:7F:2C:8C:E2:16:0B:A9:79:66:CC:2E:76:BC:90:5A
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer: /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial: 01987298DF9364DA11C9D24B9B9A9F02E02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number: 8E
Signing time: Mon 04 Aug 2025 01:01:17 +0000
Manifest this update: Mon 04 Aug 2025 01:01:17 +0000
Manifest next update: Tue 05 Aug 2025 01:01:17 +0000
Files and hashes: 1: GqkYahAWuW8CVZC80Y_0nRuyPHU.roa (hash: jfcsYMa+fRQOgfblBRN6UE5BrKJvOwvJrlwzJD4gFuc=)
2: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: pddwWIJ8epoqnlx50U/fn7BK8xo0YWYNZ8tywcNnRR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:df:93:64:da:11:c9:d2:4b:9b:9a:9f:02:e0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Validity
Not Before: Aug 4 01:01:17 2025 GMT
Not After : Aug 5 01:01:17 2025 GMT
Subject: CN=d36ee1ac3c7f2c8ce2160ba97966cc2e76bc905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:69:85:fd:37:79:10:3a:91:f4:85:f1:09:
ee:c0:e1:3d:d6:48:21:32:c9:4d:18:66:8f:fe:05:
5b:db:2f:9f:26:4e:d6:ca:43:36:1e:2b:b8:a9:c8:
ba:9c:ce:57:a4:12:7f:e8:42:18:0f:a6:2e:98:06:
b0:82:a3:fd:c9:fd:df:62:4f:43:ae:57:42:ca:77:
a5:19:39:36:e5:a5:35:9f:57:c9:03:1c:8b:8b:53:
8d:19:98:d7:e1:fe:f4:1a:12:b8:0a:ae:60:1a:ca:
20:2e:b7:ec:a3:cc:bd:73:81:5a:b7:21:89:45:2c:
dc:09:06:18:8d:30:a9:ec:4d:41:0f:02:99:1e:03:
37:25:aa:47:7d:26:cf:e3:37:52:33:5d:4e:dd:8a:
4c:d5:0f:51:25:36:17:84:f1:e9:aa:5c:bc:c9:12:
06:9e:0d:ae:5d:92:54:0d:d1:00:03:76:eb:31:fb:
4d:6e:39:d2:69:71:84:1e:1e:07:96:bb:05:6c:41:
11:c2:bf:24:31:ae:8e:29:63:f2:06:ea:58:d0:ab:
dc:24:63:e1:9f:63:34:00:c3:60:be:f3:bb:3b:e8:
60:49:f9:11:26:91:95:2d:67:e3:92:68:ce:18:e1:
02:b9:c9:30:df:96:79:5f:93:cb:76:59:14:58:73:
eb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6E:E1:AC:3C:7F:2C:8C:E2:16:0B:A9:79:66:CC:2E:76:BC:90:5A
X509v3 Authority Key Identifier:
keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6f:f5:f0:09:2b:37:e1:6e:1d:dd:a3:6d:12:ff:ee:f2:0d:
7e:09:c3:c8:1a:de:d4:b8:ee:9c:52:8b:40:b3:b9:ad:ca:a9:
55:1a:62:2c:e9:35:d1:fd:6f:e1:cd:e9:47:6f:17:5a:09:4e:
1f:b3:fa:08:b5:f8:0a:44:2e:42:80:32:a7:09:70:0d:6b:27:
f9:33:c3:3f:5f:4e:61:2e:25:da:57:d6:a9:bd:77:03:22:c1:
07:01:b4:2a:a3:1a:6d:3e:12:3d:3f:fc:6f:d7:b0:1e:59:f6:
5a:8d:24:1a:73:49:ee:81:52:f1:72:cb:0f:3e:2d:18:7a:45:
3f:01:1a:7b:5d:8c:29:b1:c8:b9:ae:ca:84:5a:d6:a4:f4:cb:
bf:c8:80:1f:b8:75:2c:d2:c9:2d:82:38:35:b9:8c:98:88:b9:
bb:f9:ac:e0:81:f7:cc:e5:70:19:1a:f6:c2:21:2a:41:ad:94:
4d:85:0a:fa:64:e5:dc:23:56:7d:ac:8f:2e:cb:99:b9:b8:43:
b4:29:90:02:87:1d:48:10:0a:3d:76:ef:b9:5f:d1:3b:5e:48:
58:71:7f:07:9b:19:c7:b2:14:14:9e:85:16:14:4f:72:a6:26:
0b:c0:30:1b:ce:91:6b:1b:53:98:ed:e8:8e:d6:a6:91:61:83:
fa:d8:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:54 2025 by rpki-client