Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier: C4BsTX3BhIgMHfcArjOYJGDonTIKbp4V16gRRPahaOo=
Subject key identifier: F6:8C:94:69:9A:23:E3:78:BF:1F:8C:FF:0A:C4:EB:74:E4:BD:81:05
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial: 01987F79E5C6BCFC102E503A3931EC60BC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number: 0ACC
Signing time: Wed 06 Aug 2025 13:02:31 +0000
Manifest this update: Wed 06 Aug 2025 13:02:31 +0000
Manifest next update: Thu 07 Aug 2025 13:02:31 +0000
Files and hashes: 1: KSBa2zQ1tYI2KvNAmb1TOOD_qJQ.roa (hash: dc4hBbdFYwTuGA/xpkix9p/ifR2D23egaqG5vWC5QGI=)
2: lQvman0TcS9UAXTyd3ZXIdLOBqI.roa (hash: P14NthyAGiyfoJgBsi6HRoRfnfWtEu8GOwgj8n8I3ag=)
3: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: idVA+s/hzqLf846ZbOtiy9aoJzfCFDVkUHqJ45VwHv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:e5:c6:bc:fc:10:2e:50:3a:39:31:ec:60:bc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Validity
Not Before: Aug 6 13:02:31 2025 GMT
Not After : Aug 7 13:02:31 2025 GMT
Subject: CN=f68c94699a23e378bf1f8cff0ac4eb74e4bd8105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:77:f4:96:2f:53:97:5f:be:0a:a7:d9:31:
12:8d:12:f3:a5:94:d8:68:48:d6:18:b1:8e:75:5c:
7f:15:d0:6c:ff:ee:a1:b6:f5:6e:07:97:94:85:82:
ea:69:9d:1d:f8:10:fa:f0:f0:c1:23:72:0f:10:ed:
c7:eb:13:b6:ed:38:39:ca:a6:d1:57:52:fa:f8:dc:
94:59:76:85:d4:fc:be:8a:92:52:e4:96:7c:b8:49:
d8:c4:76:45:4a:bc:87:1e:92:10:49:82:e3:8c:c8:
99:d1:2b:92:95:ea:1b:5a:75:09:05:c7:59:96:36:
1f:1b:8c:d8:67:cc:bd:7d:39:b1:ad:2f:ec:19:19:
3c:0e:05:b4:7f:b9:f9:8e:e0:c6:28:ea:08:2d:f8:
cc:62:e7:d7:38:08:86:67:0f:cb:6d:08:6e:0c:76:
83:ee:c6:e6:ff:4f:80:98:ce:07:c1:d4:03:53:03:
aa:0e:24:40:bc:00:13:bb:d9:f4:4c:81:b0:17:6f:
89:c1:61:cf:83:15:93:be:c6:b8:82:67:dc:a2:be:
c1:b3:57:93:10:4f:d4:8b:2a:ea:7c:39:e0:5f:53:
12:74:35:6e:e0:3b:84:72:53:0a:31:f9:45:55:f8:
e4:2c:f8:e7:33:c4:dd:e2:6a:23:cb:67:8d:46:cc:
9e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8C:94:69:9A:23:E3:78:BF:1F:8C:FF:0A:C4:EB:74:E4:BD:81:05
X509v3 Authority Key Identifier:
keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:75:01:12:ca:a5:fa:f5:1d:b0:8e:e7:26:6d:47:62:62:93:
46:83:a5:50:ac:f4:3d:18:6d:d8:8d:cf:84:e3:bb:2a:3a:19:
8b:d5:c8:36:5b:f4:75:71:82:90:cf:5c:13:0a:02:86:d9:15:
d7:87:8a:5c:c3:0b:63:98:1f:9f:a3:fc:75:82:37:a3:ea:6c:
ee:8c:86:a9:8b:0f:d2:e0:60:3e:1e:24:f5:c2:58:d8:28:2d:
e0:64:28:fb:e8:53:9b:a1:d8:5b:64:49:9a:f7:b9:2f:4d:99:
d6:77:6e:92:38:1c:5a:82:c4:68:b9:91:46:9f:e3:2f:eb:05:
47:53:c4:db:26:0a:43:9e:98:7a:fc:df:b7:d6:cb:13:10:b8:
57:9e:2a:70:c0:e4:40:82:6d:17:aa:d8:51:e1:dc:7b:27:6f:
3a:7f:52:47:e9:ca:5d:d8:10:10:33:9a:bc:18:5e:e4:6e:2e:
69:7b:8b:24:2c:f2:0c:aa:a2:b4:6d:c2:19:e2:e4:36:3a:f2:
49:82:7e:db:62:8f:87:4c:2f:ef:6e:6f:be:d4:fa:6f:fc:87:
e9:e2:4c:3d:92:a2:c9:0e:9b:48:86:a1:de:b3:45:05:05:75:
e5:74:fb:16:3b:a4:c6:8e:8f:12:0e:03:ef:63:9d:05:21:39:
09:29:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:29 2025 by rpki-client