Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
File: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft (raw, json)
Hash identifier: YE0PChJlPPKo8H6vfMj9pbHp/hKYWpK8Lc/7jdzmn0w=
Subject key identifier: F5:3A:A9:E1:8C:17:17:11:97:B9:AD:49:31:57:3F:24:64:30:80:3F
Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
Certificate issuer: /CN=c115f1341a87140a122dc8f96502b72449057e60
Certificate serial: 01987298CEEB5D80F3C1369EE0EDE269A48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
Manifest number: 1434
Signing time: Mon 04 Aug 2025 01:01:13 +0000
Manifest this update: Mon 04 Aug 2025 01:01:13 +0000
Manifest next update: Tue 05 Aug 2025 01:01:13 +0000
Files and hashes: 1: OZdY9tsN8gFkESVtIbXza917_a0.roa (hash: izbPKaAtrUogn7SQSKm/hKiliCifOlraqF2HZIB4lps=)
2: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl (hash: T2/lvIXkxtGmVAn2B8AhZ/U11IlsFvW3v59ix5mybek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:ce:eb:5d:80:f3:c1:36:9e:e0:ed:e2:69:a4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60
Validity
Not Before: Aug 4 01:01:13 2025 GMT
Not After : Aug 5 01:01:13 2025 GMT
Subject: CN=f53aa9e18c17171197b9ad4931573f246430803f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:e0:d4:01:48:1c:54:60:d6:11:d4:05:3a:
e5:86:5d:33:98:73:04:d3:29:e0:26:ab:4a:e3:85:
32:7c:5b:ef:d1:4f:6d:77:99:1f:41:1b:43:9c:98:
72:5e:9b:eb:1f:f7:bd:42:a9:36:5f:77:36:6d:0b:
78:99:99:be:b1:9a:32:2e:58:5c:51:32:28:94:e1:
63:3c:b1:a9:17:0c:cd:8b:ef:41:eb:97:2c:ae:f4:
c7:71:53:95:9b:b3:3a:47:29:32:aa:91:73:65:ff:
04:20:f4:14:a0:72:61:47:80:e5:eb:e1:70:c1:24:
46:da:a6:3b:f5:60:d5:7f:93:b9:8e:c7:04:d4:81:
83:a6:ba:28:c3:a5:70:4d:09:01:bf:1c:d5:08:3e:
27:31:3f:4b:55:aa:27:f5:a5:52:cf:11:10:12:74:
68:c3:90:58:c3:7a:36:4d:0b:d1:d2:1d:6c:8f:48:
b0:27:69:85:dc:67:6f:10:77:bf:a6:00:39:38:dc:
a0:7a:d3:0d:43:78:c9:7a:56:29:bf:95:3d:0d:4f:
7d:5d:04:84:34:20:24:97:21:9d:ef:d6:ca:f4:d5:
fe:b0:0f:d8:06:ed:a3:c5:9e:26:3b:fb:71:d9:71:
9f:9b:4b:c0:79:21:2b:dc:9d:10:e8:ce:9f:14:38:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:A9:E1:8C:17:17:11:97:B9:AD:49:31:57:3F:24:64:30:80:3F
X509v3 Authority Key Identifier:
keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:97:70:52:f8:3b:ba:5a:28:a8:66:6d:6a:c6:99:ad:32:64:
ce:60:a2:d4:19:34:4c:d3:49:d4:be:88:81:5b:c9:cc:7a:f6:
4a:45:59:ff:8b:f9:04:42:90:fa:b8:f5:f9:e0:cc:6b:71:39:
b3:06:cc:22:9a:ab:02:90:d7:35:3b:41:e5:b4:ee:dc:90:09:
d7:32:bc:c8:f8:e0:ec:ab:b4:a7:7e:84:43:92:bf:8a:d2:e0:
91:44:33:82:f3:24:e6:8b:86:60:6a:7d:fe:94:ac:1a:02:92:
7c:aa:33:7b:00:f5:a2:16:dc:86:84:d3:7d:f7:b1:72:55:68:
a4:91:4a:bc:27:c9:e2:c3:db:88:c0:b1:35:b7:40:a6:0e:e2:
98:93:87:98:c2:df:17:91:ca:f1:5e:a4:44:96:20:93:14:7f:
88:22:7d:a0:de:07:6a:c0:90:89:79:51:7f:0d:9d:fb:bc:64:
6f:0a:ea:cd:70:74:83:aa:5f:bb:c7:57:e2:c2:bf:19:40:ac:
90:6e:15:5d:40:1e:0c:87:6a:aa:b4:0c:ef:11:f6:9b:ef:00:
d9:27:ee:af:af:25:0d:1f:a7:5c:0f:f5:fe:41:2a:49:ff:b6:
2c:91:83:cf:cd:ff:c2:dd:8b:e9:9c:f3:81:40:39:68:52:c0:
6b:80:1a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:36 2025 by rpki-client