Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
File: wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft (raw, json)
Hash identifier: qoKuxWkwjeqO+SJDJ+wX5NOWgCUPOfiW8vf/xFE5L8M=
Subject key identifier: B0:25:28:09:1F:7C:7B:6E:6A:04:D3:C9:DE:FA:68:4E:95:CF:0E:F2
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 01988A329A78BDD0C4A013DDB586D434ACBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
Manifest number: 0CF9
Signing time: Fri 08 Aug 2025 15:00:28 +0000
Manifest this update: Fri 08 Aug 2025 15:00:28 +0000
Manifest next update: Sat 09 Aug 2025 15:00:28 +0000
Files and hashes: 1: PJ3v6hx1GuVvKbnyJ-k0p1XrVzI.roa (hash: vSG0XnrDzzP8WtxkP9Iqj2yAInaVzagq/kUPYgF33Iw=)
2: cycF2JveybPX6grJ41wnOXvTGTE.roa (hash: aip8c8zGmCpS8zi0B5jF1UO7lc36UgLVySSkHDz+xxU=)
3: wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl (hash: 84cNl0aKLcKJ/z+0EiYiKJsDhGBKvC9dIcGNoy5aOBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:9a:78:bd:d0:c4:a0:13:dd:b5:86:d4:34:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Aug 8 15:00:28 2025 GMT
Not After : Aug 9 15:00:28 2025 GMT
Subject: CN=b02528091f7c7b6e6a04d3c9defa684e95cf0ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:4c:70:29:5c:2d:eb:fd:b2:fa:03:36:4e:
0f:9b:13:34:82:af:68:76:55:18:d0:af:15:e8:61:
6a:2c:05:5b:fc:20:5f:0d:e8:ce:85:83:0d:51:cd:
57:69:a3:67:cb:e7:20:c3:70:bf:2f:d2:b0:fe:a7:
ad:89:ad:a1:b7:b2:e2:d3:ce:f3:06:22:9f:e3:5b:
5a:1f:f2:66:0f:07:ae:ec:36:76:30:52:c6:32:0b:
89:b0:90:01:b4:47:7b:4f:bb:16:25:3d:5e:12:ac:
64:f5:2d:eb:ab:82:0e:a7:55:86:30:ed:61:2d:19:
be:9c:85:0f:eb:d1:0f:75:ee:ae:ef:67:ea:7b:e6:
c1:b8:e7:4b:03:44:f4:a7:dc:96:bb:25:e7:a4:d6:
71:1d:02:92:77:79:f3:08:52:be:b1:3c:d5:6a:c5:
85:4a:0a:06:bf:aa:79:45:f6:28:93:93:d0:eb:74:
74:fe:80:7d:40:8a:3c:46:0a:34:68:8f:7f:3d:3d:
1e:30:3f:ec:79:51:5d:6d:0c:5a:0b:dc:fd:15:c6:
bd:69:ed:db:e7:48:66:0a:43:4c:d0:f0:05:8d:fb:
2c:b8:2e:8c:0e:9a:19:41:e7:9b:5c:68:24:b1:67:
e5:99:fe:9f:77:d6:59:9f:46:57:46:aa:f8:40:f5:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:25:28:09:1F:7C:7B:6E:6A:04:D3:C9:DE:FA:68:4E:95:CF:0E:F2
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b4:ce:a6:3c:f9:85:ac:ab:6e:a4:ea:f2:d6:ca:10:39:f9:
80:fd:6c:12:e0:37:2e:54:b3:f8:55:e7:f2:14:7c:e6:cc:ca:
d5:ec:a3:18:2b:f3:21:21:b6:84:a8:c6:de:1e:8d:48:a7:4a:
69:d0:3e:7e:eb:fc:dd:64:68:fd:ca:e3:70:49:8b:01:57:89:
c2:5b:a8:43:e7:65:c8:ba:3c:78:8e:39:b4:3a:44:49:a9:c8:
8c:c1:c4:ad:67:8a:b9:a9:9c:b0:ab:c3:b2:5e:52:14:2a:ac:
1e:34:65:d9:69:6b:54:79:99:f3:be:70:65:18:d2:a0:63:33:
60:8a:ec:f4:22:b6:55:d5:a5:71:34:8a:91:75:44:a7:d0:50:
5d:33:3e:3d:7f:59:bd:45:01:dd:d8:c1:b6:f0:55:80:ab:30:
6e:ac:29:12:9c:7e:a6:83:7e:b9:14:5f:66:bf:35:10:dd:79:
94:82:ad:50:58:9d:15:b1:5a:87:77:8b:04:5a:de:a5:11:f2:
1f:79:85:86:60:28:e8:6e:21:8b:5b:f3:25:3b:ea:a6:7b:3c:
f3:6a:36:1d:0d:b9:1c:8f:16:95:1a:53:fd:90:50:4e:42:63:
a5:01:9a:89:f3:21:8a:c3:9e:23:9c:91:e1:5a:81:10:5a:dd:
65:e7:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:45:53 2025 by rpki-client