Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
File: wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json)
Hash identifier: cukHST2up6RFYsUX190P4b+IrULl7Hr0FIfw5cMXtg4=
Subject key identifier: AE:8D:79:28:25:80:8B:7E:DB:CB:E2:43:CD:C5:D9:10:0E:21:1B:43
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 0198880DE81A7BD9704890CF74E321028523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
Manifest number: 1244
Signing time: Fri 08 Aug 2025 05:01:09 +0000
Manifest this update: Fri 08 Aug 2025 05:01:09 +0000
Manifest next update: Sat 09 Aug 2025 05:01:09 +0000
Files and hashes: 1: Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa (hash: 1G7T6CHRBzMTi8lz6sG9TXAsvyynmWFubPkkTd5+Xfk=)
2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: M6axUikPnm108OWcFg3EJDLaZrHAsU0vJnY4K4GM2mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:e8:1a:7b:d9:70:48:90:cf:74:e3:21:02:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Aug 8 05:01:09 2025 GMT
Not After : Aug 9 05:01:09 2025 GMT
Subject: CN=ae8d792825808b7edbcbe243cdc5d9100e211b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:f2:ed:9a:33:73:70:8a:c4:86:02:a0:7f:
23:0a:de:a4:0a:47:5a:90:09:e3:83:ed:81:ce:85:
6d:93:78:c8:60:89:b5:34:af:f3:91:05:ae:e1:42:
40:48:db:46:7f:fd:02:07:79:f4:87:a4:ca:b9:4b:
d3:73:cf:ed:4d:9a:ca:1f:69:6d:09:ac:43:32:80:
80:50:6c:f6:b3:a5:50:15:4f:6f:f6:8c:74:80:c5:
00:98:fa:3d:55:81:57:02:42:2d:fc:09:85:32:34:
07:10:36:10:66:e6:d7:61:25:7c:8d:04:7d:7b:1f:
be:49:61:7e:d0:57:e5:d2:7d:e8:8d:af:db:d0:71:
04:1b:84:d1:ae:c7:44:68:d4:f3:eb:b2:36:f1:f1:
08:e0:7e:bf:28:ef:5b:6b:37:09:17:e5:2b:6b:42:
fd:0e:f6:84:6f:bc:e7:7e:5f:9a:14:98:8d:1e:62:
27:e3:75:61:78:1c:8d:26:c0:3b:53:c0:ab:93:85:
7d:3c:05:48:16:b4:0b:27:4c:f2:26:9a:a1:29:e9:
d0:64:01:4e:dd:c0:1f:3d:1b:29:85:61:57:24:8a:
bd:d1:3c:33:69:5e:aa:f9:d3:3e:b5:80:8b:4f:17:
09:a1:a8:a4:7e:6a:73:ba:b2:56:33:2b:35:10:e4:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8D:79:28:25:80:8B:7E:DB:CB:E2:43:CD:C5:D9:10:0E:21:1B:43
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:eb:c1:a8:80:53:de:49:0d:55:4c:8d:f2:56:8d:d4:48:d6:
f8:13:e8:f1:9e:ae:7e:40:18:31:f6:48:8a:67:be:8a:ec:50:
8c:55:31:d9:ee:23:6e:5c:1a:3f:67:e1:07:09:6c:64:1b:77:
13:8a:67:99:d6:26:83:67:bf:a3:03:7e:4f:88:f8:de:60:d5:
8b:e6:1a:c1:79:41:93:da:7f:cc:67:62:39:52:a1:23:26:3b:
66:9f:01:52:b9:0f:a2:20:5d:81:31:d2:32:04:7e:fd:0b:4b:
da:11:5c:5d:ea:1e:92:c3:9b:34:af:e1:ed:ce:23:cd:ed:c6:
31:f0:1c:5b:44:85:b2:6f:0a:03:e0:8e:f5:aa:97:6b:88:a9:
3d:ca:b3:eb:c0:ac:b5:61:e8:9c:b0:07:d5:71:7b:12:9a:3f:
2a:72:8e:e2:f9:fd:ef:66:e6:f8:4a:6c:35:81:8c:f0:a5:35:
1d:25:cc:af:1e:52:4a:1e:c8:04:db:11:0c:ec:a4:0d:c4:9d:
c3:92:44:80:b9:d3:8b:b4:49:ac:60:29:e4:51:63:19:11:69:
a1:a6:1e:33:57:7d:f0:cb:dd:4f:6a:5f:c7:98:99:05:75:35:
e4:e8:3d:ba:6b:e9:66:ed:71:cf:be:a8:5f:16:39:8d:ed:73:
30:61:89:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:55:40 2025 by rpki-client