Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
File: wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json)
Hash identifier: zA1Mn438KAkkFmUvL0DruJtyxCVbj3igeFozQE26XGc=
Subject key identifier: B9:52:A7:BB:4D:B8:DB:7C:65:29:CC:53:9C:AB:A4:90:03:D2:CE:43
Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
Certificate issuer: /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Certificate serial: 0198819E39BC23FEA25B150894E91CEA058A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 23:01:26 +0000
Manifest this update: Wed 06 Aug 2025 23:01:26 +0000
Manifest next update: Thu 07 Aug 2025 23:01:26 +0000
Files and hashes: 1: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (hash: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=)
2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: aZjQHuVzsHolfzatN6+EJkGJTJTNI+t78L+ue5MQn30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:39:bc:23:fe:a2:5b:15:08:94:e9:1c:ea:05:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63
Validity
Not Before: Aug 6 23:01:26 2025 GMT
Not After : Aug 7 23:01:26 2025 GMT
Subject: CN=b952a7bb4db8db7c6529cc539caba49003d2ce43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:dc:0d:f2:d5:6d:88:bd:45:2f:ec:12:ed:
a5:0a:c0:6b:cd:16:20:2d:94:b7:80:1e:95:d6:14:
94:0d:b1:60:12:f5:a5:ef:9b:7d:ec:a4:ca:80:cf:
42:29:c3:e2:df:29:4b:7e:cd:18:30:72:aa:63:bc:
4d:e3:f5:92:4e:41:0f:74:fc:88:c2:9c:f7:0a:23:
f8:9f:f5:75:65:de:e3:6e:bc:f2:e6:dc:0e:28:59:
96:11:93:2c:c8:a4:86:ee:6b:a2:45:87:3e:d1:df:
a9:0c:5e:e5:50:4b:b9:39:24:cf:e9:da:e9:c6:71:
9e:cc:cf:b6:3b:eb:79:19:b3:44:4f:15:5a:af:98:
f9:fb:61:43:c3:ed:e8:05:14:55:b8:20:9d:84:b9:
e5:47:f3:a6:5b:cc:d3:fa:8f:d8:91:64:8c:c7:b8:
ce:c7:f3:3c:2a:96:ac:4a:8b:40:bd:36:86:7e:87:
41:d3:76:68:66:ab:1f:83:c9:21:4f:2a:3e:41:2b:
36:97:60:9c:0a:87:30:aa:34:a7:13:9a:3f:a3:c0:
b1:cb:91:9d:f2:7d:a7:a6:df:0d:2e:91:f6:61:78:
8a:b5:fb:53:08:9f:34:e7:a9:e3:cc:dc:cb:c2:9c:
56:ce:4a:52:3d:6b:91:7d:c9:95:9e:78:48:78:fa:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:52:A7:BB:4D:B8:DB:7C:65:29:CC:53:9C:AB:A4:90:03:D2:CE:43
X509v3 Authority Key Identifier:
keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:eb:e4:98:e5:b1:df:85:d2:b3:28:c8:a3:d6:8e:b6:8f:19:
1d:19:43:f3:d1:80:63:09:03:c1:dc:04:f6:28:34:82:c6:6a:
c5:e4:e1:8b:77:d1:45:bc:0b:1f:3b:3b:ed:99:6c:30:0f:e6:
e8:52:b5:06:26:af:d5:c5:a4:24:a8:81:68:32:94:c6:f6:26:
0d:61:38:a2:ec:94:d9:b5:87:33:d9:f9:c8:0a:02:70:4b:c3:
03:bd:ab:e9:64:2c:9d:aa:d7:5b:4e:7d:63:e3:d0:99:b8:ed:
83:0b:08:b1:48:7f:f7:90:f4:33:1d:f3:2d:97:c2:aa:50:99:
12:61:a0:5d:85:8d:02:98:a4:08:44:68:68:49:84:a9:6c:27:
82:64:af:97:99:be:55:60:42:6b:97:1d:5d:bd:8b:c5:71:32:
26:f0:02:05:5f:e0:a3:56:72:c3:76:4e:f9:b3:42:b5:46:79:
9e:44:83:64:a8:86:d9:47:be:d4:61:03:0b:85:ec:5a:b9:9c:
c2:c1:dc:dc:8f:c1:e9:ba:8f:69:c0:52:a3:cf:d5:cb:30:d9:
70:1b:46:e8:de:cd:f6:59:aa:cf:d5:a3:ff:19:16:37:0b:78:
87:7a:98:6b:5f:48:3b:2e:30:10:79:80:40:f1:56:4c:36:a4:
3f:58:55:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:45:49 2025 by rpki-client