Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: bG9+XH809ghX1uPjNJklTQJUoNFEsnW6JAGvzgQVh1E=
Subject key identifier: 0C:7B:AB:D7:1E:A1:62:36:6C:76:CB:C7:B3:FC:CE:11:7C:06:7E:0B
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 01987CADED88E8179CFCFDD36525C0F0D903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: 02CB
Signing time: Wed 06 Aug 2025 00:00:29 +0000
Manifest this update: Wed 06 Aug 2025 00:00:29 +0000
Manifest next update: Thu 07 Aug 2025 00:00:29 +0000
Files and hashes: 1: HfvQGv3fkx8EbAZWjLyDRRI_Z8o.roa (hash: L6g/T7YHsTiEPnLp25ze+rccMiIRyJAPI1nh81w0wDo=)
2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: 5gdQv3VGhynaHMz9f96k5kYsWIgwrBGb3Lb2oiXbrN8=)
3: x4NMd_GpZKC3wjvt7UJp4kwmNNg.roa (hash: KiYRpe0+Ri1YnwEQ5QKwXeajhvNgmP7QYMIxZrED/ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ad:ed:88:e8:17:9c:fc:fd:d3:65:25:c0:f0:d9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Aug 6 00:00:29 2025 GMT
Not After : Aug 7 00:00:29 2025 GMT
Subject: CN=0c7babd71ea162366c76cbc7b3fcce117c067e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:b1:5f:a2:e6:1e:98:c1:a9:a7:1a:57:3c:
aa:f7:2a:63:50:d0:2a:19:00:85:49:55:40:b2:91:
51:c1:26:ce:7f:87:c4:e1:7d:0f:5e:f6:66:59:88:
7a:07:07:ca:59:ba:27:ab:79:8f:a7:e3:ee:27:1f:
c3:87:8a:1e:14:ed:20:14:08:c0:3d:a1:19:91:41:
a4:1c:d5:06:ae:cf:ae:dc:c4:42:2a:cb:cf:7e:06:
06:07:e4:e9:2b:47:a6:3b:29:2b:56:06:a7:b5:a1:
fd:62:66:df:f9:12:33:2c:c5:2a:24:b4:a6:b0:5b:
5a:4e:eb:d8:e7:43:e8:d9:7c:fa:10:0f:ef:ae:55:
b2:40:93:7d:fd:09:3e:33:4a:be:7c:cf:1a:1a:09:
63:0a:ce:53:07:4f:f0:16:af:71:f8:9a:ec:53:31:
83:29:f0:39:da:58:9c:a8:cf:f8:84:54:86:67:88:
39:17:ac:e8:c4:d4:ce:cb:60:ba:c2:99:74:ea:b1:
00:24:45:f8:bf:39:00:1d:01:ab:bf:f1:39:9b:f2:
67:7f:9f:cf:b2:1f:d9:ef:0c:f0:53:8c:5c:a4:ba:
ba:31:17:12:9f:2c:d3:3c:f6:20:d8:f3:43:2e:34:
cf:5c:af:b4:9d:fb:ac:b9:14:11:3e:31:6b:a0:ab:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7B:AB:D7:1E:A1:62:36:6C:76:CB:C7:B3:FC:CE:11:7C:06:7E:0B
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d2:19:97:1a:cd:09:26:a7:00:67:32:a6:3f:bc:73:37:52:
01:c0:83:00:52:81:83:6f:e0:d9:ce:cd:a4:d0:73:3d:4b:b0:
f1:28:41:11:d6:0c:20:3d:51:f0:01:eb:cb:1e:45:47:50:3c:
eb:af:65:9c:fd:a7:c4:5f:a8:d3:98:15:47:39:d3:9b:15:8f:
ed:70:aa:f2:ee:59:90:2e:8a:a3:cf:b7:6e:36:54:2a:d2:bc:
db:4a:25:d7:01:19:3c:80:d9:65:d7:8e:f3:42:d5:07:11:3a:
e7:d3:2e:e3:4a:92:aa:79:f7:6e:e7:76:88:64:58:28:7c:46:
19:c9:d1:7f:0c:09:d0:ea:94:5b:8c:2c:e9:dd:66:c7:02:ec:
45:75:5e:79:36:98:77:21:df:64:41:0b:06:ba:cb:79:0b:f9:
d9:fd:72:66:c4:17:d3:52:70:ba:08:3b:44:f4:91:fa:54:6a:
7e:f3:e4:93:4d:37:42:13:6f:a0:7b:f1:fa:4c:95:44:55:7d:
56:57:a1:1d:71:9f:11:4e:7b:31:fd:d1:0f:e9:1b:5d:b9:f5:
f1:7e:51:04:77:06:51:9d:8c:09:3c:60:f3:5b:fd:ec:9b:bb:
db:d3:30:5f:a0:bd:4a:8c:ee:8c:d7:89:d3:18:7b:f9:24:5f:
3c:71:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:05:28 2025 by rpki-client