Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: V7wrm1m/8trlb7l+hWLeE5/Ubl37JwsCtKBAihzPx8c=
Subject key identifier: F5:44:11:BF:6F:A5:40:1C:0E:8E:DB:38:D5:B3:46:ED:ED:34:0C:35
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 0198849F1B8259C089AC54A41BB0525C3876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 085A
Signing time: Thu 07 Aug 2025 13:01:16 +0000
Manifest this update: Thu 07 Aug 2025 13:01:16 +0000
Manifest next update: Fri 08 Aug 2025 13:01:16 +0000
Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: Oz+B25LaO1Tv+YZPl+rQMSWSRzXkEbB7ncyK/AKpBzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:9f:1b:82:59:c0:89:ac:54:a4:1b:b0:52:5c:38:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Aug 7 13:01:16 2025 GMT
Not After : Aug 8 13:01:16 2025 GMT
Subject: CN=f54411bf6fa5401c0e8edb38d5b346eded340c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b4:84:ef:42:8f:49:27:4e:82:29:0c:3b:b4:
8d:66:a6:c3:6f:57:db:78:7f:87:78:14:41:ab:29:
00:ce:04:2c:49:9d:dd:72:13:30:13:eb:df:25:30:
ca:5c:b0:85:06:80:ea:73:20:40:35:d1:4f:5a:6c:
db:fe:5d:01:9c:12:0c:72:6d:5b:0e:31:85:92:9b:
28:11:9d:45:b5:be:e2:41:94:b0:80:5f:04:80:e8:
80:ca:40:91:47:34:46:1b:e4:5b:c1:cb:6f:b7:e9:
b7:50:7e:c4:6e:c7:3a:ac:c2:f0:d6:bd:84:6c:a4:
5a:ea:73:a1:d9:51:75:3b:b9:22:48:b7:7e:5f:87:
73:4e:56:fd:18:44:03:f1:d1:a2:1e:6c:49:32:d6:
c5:ca:9a:6d:e4:31:02:f7:d7:1c:fd:84:01:0d:e4:
9b:8b:97:84:ce:2e:f3:8b:62:68:70:4d:e0:b8:8f:
f3:c4:c1:60:1e:bd:67:51:6e:2a:6f:0d:49:8f:0f:
9c:c9:3c:b0:fc:38:58:c3:59:15:8e:41:ed:b7:9e:
6f:99:e7:78:1f:0d:b3:9d:90:77:e9:f9:ec:8a:75:
ae:25:d8:18:a8:0e:62:4d:9c:ae:ca:0d:ca:eb:34:
95:03:d0:72:e5:b7:d7:fa:14:f5:d3:1f:d5:92:31:
8a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:11:BF:6F:A5:40:1C:0E:8E:DB:38:D5:B3:46:ED:ED:34:0C:35
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:08:98:28:5c:29:1f:6b:03:ee:a2:c5:61:75:b9:5c:75:99:
48:af:35:90:16:b5:67:78:21:68:3d:47:87:a1:ed:c1:2c:a7:
89:bf:05:8e:9f:f4:f7:42:d3:4a:12:af:72:8e:df:a2:9d:a2:
11:7e:f7:cb:6a:c7:12:9d:e3:14:89:06:0a:b2:7c:f9:cc:b4:
b6:78:ce:61:a5:c1:3c:90:17:34:f6:43:10:c0:72:0a:c5:df:
3c:7f:31:04:e6:93:a6:d1:37:12:ec:7e:02:53:c3:01:8e:df:
87:89:48:b4:60:19:db:af:80:28:5d:b9:d7:88:2b:d7:ee:3b:
0e:a1:31:b5:ec:ec:58:2a:05:f5:ee:72:1e:a8:26:9a:ae:bd:
cd:60:69:29:e1:85:3c:0f:be:dc:33:79:7a:6f:a7:92:ad:fc:
ef:d4:57:81:14:05:64:82:93:05:b0:b4:b8:82:e8:99:02:19:
40:72:64:31:30:3d:ad:57:2f:fb:6b:db:19:e4:52:1e:49:b1:
dc:96:06:6d:8c:fa:87:2d:8b:a9:bd:5d:41:0c:4e:93:77:29:
0d:16:80:e6:8d:f7:1c:d2:90:2c:c7:34:06:56:ae:e7:13:e9:
d9:6f:af:20:01:d6:d8:d4:14:04:dc:2e:19:4a:33:67:a4:1c:
9e:39:31:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:28:40 2025 by rpki-client