Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: tFIxaJfxw7GOnkAo8tt3XVe1d1sZW8B8Bp+nzGlAQdo=
Subject key identifier: E9:EC:CC:AE:8F:AE:10:EB:DD:C7:A9:04:B6:62:F4:55:D2:D8:F7:6D
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 01988DA1902106E7DCED59E77131EF12E744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0B99
Signing time: Sat 09 Aug 2025 07:00:32 +0000
Manifest this update: Sat 09 Aug 2025 07:00:32 +0000
Manifest next update: Sun 10 Aug 2025 07:00:32 +0000
Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: oupIh+OgcZRWWpSXBqzHaPZiemS3TJW2ZU5a61AlQT8=)
2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:90:21:06:e7:dc:ed:59:e7:71:31:ef:12:e7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Aug 9 07:00:32 2025 GMT
Not After : Aug 10 07:00:32 2025 GMT
Subject: CN=e9ecccae8fae10ebddc7a904b662f455d2d8f76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:14:54:1c:31:69:4c:2f:c0:ed:ed:b1:c0:ff:
9f:f2:66:f4:3a:36:9f:9e:35:02:37:f2:10:c2:32:
17:8b:52:a8:8b:93:37:f1:2a:d1:76:e6:57:92:d5:
cf:78:fc:2d:3e:d8:ce:e8:5e:c7:8e:c8:72:8a:99:
b4:70:db:6f:f4:e1:be:bc:c2:46:5d:bf:3a:d5:d9:
d1:a7:2f:34:d7:e4:59:3a:e5:36:cb:d0:9f:b7:b1:
85:f1:5e:41:89:d7:23:cf:be:6b:d1:a2:1c:ae:42:
ee:ce:e5:3b:1c:78:52:09:9e:56:4d:66:ef:d9:83:
27:20:3f:88:d8:4a:fa:cb:07:35:55:9f:1e:67:dd:
65:7b:61:81:ff:6d:8b:44:1b:6b:80:67:d4:27:b4:
56:29:a6:44:e2:cc:fd:cf:9e:f2:74:1d:86:7b:0f:
47:b5:75:7b:84:89:de:31:09:98:62:fc:40:ec:e9:
14:7c:60:ac:6a:3e:3f:04:30:7d:86:89:fd:cf:16:
44:36:6c:3c:e4:09:1d:2e:19:90:01:ed:cc:35:95:
4c:96:ab:f5:59:69:a3:83:31:b9:7c:d5:31:76:32:
61:e6:9d:02:45:b7:f9:15:f3:f8:6a:ce:58:f7:fc:
51:e7:39:5e:fc:56:d2:dd:0b:b0:0b:e1:06:25:7b:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EC:CC:AE:8F:AE:10:EB:DD:C7:A9:04:B6:62:F4:55:D2:D8:F7:6D
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3d:04:d1:70:34:ac:4e:54:a5:dc:b5:94:55:f6:5c:ee:9e:
a0:40:68:e1:0d:60:98:e1:0c:e2:69:0c:07:c7:3e:f0:4a:45:
80:59:f4:77:45:8d:5f:f5:ff:2c:85:47:0c:06:53:a2:c0:22:
86:f8:51:74:6f:41:0e:8a:ff:67:38:3f:91:e0:0a:6b:1e:82:
14:70:c8:b9:a4:58:cc:c7:e2:3c:aa:4b:ae:1a:a7:aa:b9:b2:
9f:98:a7:58:8a:7f:3a:32:14:a1:5c:70:df:65:29:4e:f6:87:
42:4d:df:e2:db:f1:b8:fc:50:0d:45:7c:11:6c:d1:4d:1c:1e:
44:a5:26:06:87:ce:75:88:ff:9f:64:09:70:47:1b:68:a6:87:
39:4f:77:f8:11:fc:dd:31:4a:eb:9d:15:4d:3a:36:ab:6d:9d:
f0:ca:5a:bc:7b:1a:d1:37:5d:7a:b3:4c:a3:1f:fa:e7:cd:4a:
d3:30:0c:04:67:5d:65:b4:9f:32:92:b3:ca:42:14:99:f7:a6:
a6:5e:4e:cb:59:a6:bd:be:8a:9d:21:e5:ef:d4:8d:83:08:8c:
7d:f8:1b:8b:66:0f:34:9f:52:f2:33:bd:b8:b1:fa:c5:79:c5:
72:3e:cc:80:57:a8:f1:cb:d1:bd:01:55:a5:07:29:9d:a4:1d:
8e:1b:c8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:53:57 2025 by rpki-client