Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: iGLccV1drITCmw17Zavl7ckpf6bQTy020Wtm5N6bGV4=
Subject key identifier: 6F:E8:AF:B7:B7:13:D6:C7:34:AB:3F:93:88:9C:69:24:D8:C3:98:BB
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 01987450A1E91A5F8CED733CA5513AD4C86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 09:01:38 +0000
Manifest this update: Mon 04 Aug 2025 09:01:38 +0000
Manifest next update: Tue 05 Aug 2025 09:01:38 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: 71W1zvYYFDS0Puc4/eQawawRrwylQ2hFr+t/sa+CYjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a1:e9:1a:5f:8c:ed:73:3c:a5:51:3a:d4:c8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Aug 4 09:01:38 2025 GMT
Not After : Aug 5 09:01:38 2025 GMT
Subject: CN=6fe8afb7b713d6c734ab3f93889c6924d8c398bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:57:a5:ca:1d:09:0d:cb:22:3a:83:ab:a2:
08:33:22:62:25:06:99:89:e8:69:53:ac:5f:6f:07:
b9:0a:ec:eb:07:25:f6:ec:68:6b:1c:d9:30:c0:a1:
ce:e9:18:10:50:f2:36:ef:51:b4:ba:88:87:df:af:
7f:fc:f0:91:66:62:3f:8f:3c:4f:cd:2b:bd:3e:20:
d2:76:15:c3:f9:16:2c:d2:7c:ed:62:6b:be:81:e1:
ad:fa:3e:ad:36:05:53:51:08:ce:63:ee:b3:c5:d1:
ac:4b:50:01:70:d4:d2:ac:fe:a1:46:a1:c3:4c:94:
13:d5:3c:69:91:f7:8c:7b:fc:ce:c8:f0:27:7b:fb:
65:af:87:6f:b7:d7:fd:5c:96:3a:e0:13:58:5f:b7:
06:37:dd:fb:44:6a:d3:11:e2:b1:e5:af:1e:23:60:
03:fb:d3:30:6f:9e:7a:67:88:cf:f5:b3:e9:fa:5e:
e4:23:31:e4:73:a6:ed:5b:fc:55:63:5b:9a:2a:1b:
56:73:cd:0e:48:69:d5:71:60:10:74:09:9f:35:c9:
d4:c4:fa:17:49:ab:56:79:92:42:23:22:3a:18:34:
7e:d4:00:7e:cd:0d:b3:59:cd:46:4b:d6:bd:c0:99:
8d:31:6e:c3:04:73:98:b1:96:57:c0:01:ce:3e:81:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E8:AF:B7:B7:13:D6:C7:34:AB:3F:93:88:9C:69:24:D8:C3:98:BB
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c7:f9:11:cc:8c:d6:0d:ee:56:41:1b:54:0e:38:eb:f9:c6:
eb:74:e4:9c:9b:7a:41:1c:1e:0b:e2:38:95:84:ae:5d:54:f7:
b6:e5:94:b5:db:82:0f:f8:fa:c2:b3:27:08:19:56:84:46:48:
b7:31:ac:a8:fd:ae:36:16:89:88:58:17:fe:d8:d5:ea:e9:03:
77:98:87:3f:bb:8a:46:11:0b:8e:47:75:1a:9f:f6:43:01:8b:
87:99:33:28:a2:3c:1c:8f:36:b7:7a:a8:be:b2:7d:fa:a9:b6:
7c:c0:5d:5b:dc:1a:ea:73:cc:89:49:28:ac:d0:2d:cb:ac:77:
09:4e:15:b2:bb:b4:ed:14:e0:e1:a7:ca:7d:df:c6:30:60:af:
c5:ef:9e:d4:b0:2f:54:48:28:23:e8:6b:ac:f1:ac:48:71:b6:
e3:79:98:7c:52:1b:6f:0d:75:29:cf:63:98:79:d4:b8:f2:c2:
61:20:a3:a3:1b:ff:b2:90:12:ca:e4:ae:ea:19:60:81:7e:92:
bc:34:ef:db:f3:b9:24:f2:6e:7c:0a:25:1a:81:ef:64:27:b8:
d6:84:73:7b:ef:da:fa:9e:cf:05:75:3f:ac:af:ce:0b:ed:8f:
77:68:f1:9a:8e:b3:0c:e6:31:af:d3:da:b3:31:bb:59:8f:1d:
a3:38:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:03 2025 by rpki-client