Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: 5rRnymGx2Z33VAgYzMJ38d1LI47/S87FPNaqb9qU7/M=
Subject key identifier: 79:6C:19:C9:BE:0B:CC:7F:C8:D7:A2:14:72:14:F4:CA:0B:27:23:0E
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 019875D2108AD10D3C2A20891C9D9D66F474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 1627
Signing time: Mon 04 Aug 2025 16:02:37 +0000
Manifest this update: Mon 04 Aug 2025 16:02:37 +0000
Manifest next update: Tue 05 Aug 2025 16:02:37 +0000
Files and hashes: 1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: ECRliDVRwhcZPNEULWf6qMd2XSLGtEF8eGT7dyhGYfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:10:8a:d1:0d:3c:2a:20:89:1c:9d:9d:66:f4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Aug 4 16:02:37 2025 GMT
Not After : Aug 5 16:02:37 2025 GMT
Subject: CN=796c19c9be0bcc7fc8d7a2147214f4ca0b27230e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8d:36:b7:91:2a:d3:7c:dc:45:69:65:e4:66:
a1:dc:af:dc:41:6d:1a:f4:67:24:6c:3d:cb:6b:93:
03:fa:af:39:e1:53:46:72:5d:6d:29:30:ef:51:e5:
41:b2:79:08:c3:71:63:98:95:97:d9:28:cf:4a:78:
fa:59:97:9b:06:2f:2c:a1:42:0e:c0:b1:9d:f5:28:
db:57:bc:1a:87:c7:80:d0:57:b0:f3:40:68:06:15:
ce:71:f6:b3:73:98:a2:34:02:1d:c9:cf:f4:23:45:
22:b9:76:ef:2c:a0:18:f5:78:fa:ab:67:6a:f1:9c:
19:38:c7:26:3c:5e:a7:2d:ab:ee:1f:bb:e2:78:3b:
2b:e3:ef:33:6b:c0:f3:6b:21:af:bc:03:eb:39:99:
6a:3a:91:bd:df:60:60:ab:6e:02:ba:0c:6a:03:42:
49:a9:1f:2f:c7:61:e8:86:8d:41:fe:03:ac:40:61:
cb:20:de:3c:b9:cd:90:93:45:dc:62:b3:37:e7:e4:
38:9b:51:05:6f:13:8e:c1:1e:98:b9:6a:c0:d8:db:
74:16:be:f0:84:21:fd:1e:c9:5b:f4:05:2c:87:7c:
3c:76:d1:49:b2:30:5f:dc:f6:c8:6f:c9:7f:bc:93:
75:bf:ed:47:7e:3f:62:d2:00:5f:b5:54:2b:e2:a3:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6C:19:C9:BE:0B:CC:7F:C8:D7:A2:14:72:14:F4:CA:0B:27:23:0E
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:bc:be:a4:64:7c:b7:0a:9d:49:af:44:0a:d4:a1:cb:c3:25:
a8:cf:08:ea:c9:e5:2e:d8:d2:46:6d:14:71:1d:e1:9c:d9:09:
e0:fd:97:f8:f9:69:f0:e0:d0:6b:04:99:2d:ab:62:29:2f:9c:
98:22:32:22:07:8f:fa:6b:4b:d4:31:06:f2:40:15:95:69:56:
54:9b:54:97:3f:f8:c9:2c:62:c1:8b:f8:48:aa:c0:bd:5d:ba:
e7:63:8a:5b:a0:eb:ed:ee:3d:49:10:b8:7b:a4:61:d6:af:e1:
ac:57:5e:14:26:e0:d4:b9:5e:1c:9b:fa:33:0b:08:75:d3:78:
ff:bb:af:10:e8:9f:76:17:e2:0a:cb:2c:c4:1b:a7:c1:fa:73:
cb:4e:83:ca:dd:bf:1d:0e:27:3b:3c:22:bf:4e:b8:04:28:f4:
a2:c3:c4:b4:f8:31:a7:dc:40:5c:76:0b:41:c8:13:0c:87:7a:
e2:25:de:d8:39:c6:37:d9:f1:1a:76:05:00:64:0e:a8:e2:df:
ef:81:2b:1d:59:77:50:74:57:cc:b4:35:1d:dc:4f:be:6d:d9:
d5:a0:1e:29:71:f5:ca:83:58:d0:03:31:c0:c3:b2:69:36:0c:
b0:06:7d:38:ae:91:11:2c:d4:01:68:58:dd:90:99:17:99:be:
9e:2a:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:13:47 2025 by rpki-client