Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: X4IBCA64Fc/1ZHiYh8Sj0W+E7n6afbZWNiCznq6tQnQ=
Subject key identifier: EC:61:DC:42:16:EC:6C:D9:70:EA:0A:0D:94:72:E7:9D:92:39:CA:EA
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 019872CFA054D3857B4BBE0E67E34DE9C34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0EEA
Signing time: Mon 04 Aug 2025 02:01:06 +0000
Manifest this update: Mon 04 Aug 2025 02:01:06 +0000
Manifest next update: Tue 05 Aug 2025 02:01:06 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: weCkzrhkChSk5Hfl7KcCnHtIFmCABRW3cvop5pdFNFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a0:54:d3:85:7b:4b:be:0e:67:e3:4d:e9:c3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Aug 4 02:01:06 2025 GMT
Not After : Aug 5 02:01:06 2025 GMT
Subject: CN=ec61dc4216ec6cd970ea0a0d9472e79d9239caea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:18:4b:48:7b:80:8a:b2:77:c0:48:9c:28:c3:
90:ea:4e:37:a0:d9:6d:62:48:94:9c:06:db:36:92:
1e:d8:f3:ed:23:a9:ff:ea:01:53:7f:50:1e:dd:0c:
99:a6:3d:c8:13:5b:cc:c7:99:de:97:c8:5f:69:b2:
cb:12:3d:0e:6d:d1:0c:8d:f3:18:07:48:95:9a:cd:
71:b9:35:25:4f:c8:23:b1:74:92:30:67:bb:a0:7b:
31:d9:3b:0f:81:87:be:84:18:ae:7b:17:82:fd:76:
45:20:67:77:2d:f6:ea:4d:d6:27:10:f6:f1:68:40:
1f:e5:6b:54:7d:6d:17:90:91:f0:26:ee:d0:ee:1a:
29:8f:38:e6:01:f3:26:84:7b:33:57:09:c1:49:96:
61:7d:43:c0:76:8f:f5:8b:fb:39:55:04:76:db:c2:
f9:8d:8d:58:70:74:a4:4b:8f:31:6a:fa:a9:aa:fc:
8d:2e:2d:23:aa:43:a7:36:f1:26:26:fe:07:1c:16:
b0:ce:b7:f9:d8:f3:8e:ea:be:a1:c0:e8:e7:e2:40:
c1:16:e8:43:ec:98:7d:ec:30:eb:5c:3c:56:c2:17:
40:fd:79:44:c6:5b:be:ed:e6:36:9c:1b:64:aa:0f:
f0:10:70:e8:11:e2:4a:4b:84:1c:4e:a4:5a:f5:1b:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:DC:42:16:EC:6C:D9:70:EA:0A:0D:94:72:E7:9D:92:39:CA:EA
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ea:fd:ff:9a:71:4a:20:d4:59:85:e1:12:a6:3f:1a:46:30:
dc:18:bc:fb:6a:05:dd:9d:b1:f3:ef:30:a8:7b:9c:7e:88:3b:
c6:e9:2d:73:9c:92:3a:07:a4:dd:b4:db:6c:f9:a0:4c:20:af:
8b:20:79:6f:b8:fc:7c:25:7a:b9:28:cb:00:94:74:03:8d:4b:
6a:b0:74:67:92:32:6d:cc:21:d0:dc:ce:71:54:d8:6a:da:ae:
87:06:74:85:c9:a3:fa:8a:df:f9:6e:c1:9f:0e:3b:77:e3:4d:
ee:9f:f7:27:df:e6:64:ef:a6:60:d7:61:f1:21:44:1c:e7:7b:
72:77:3b:70:23:96:b0:95:45:81:62:29:e0:20:cd:d1:bd:1c:
2b:3f:da:a0:52:21:95:d3:92:12:d6:5a:b5:94:1d:8b:52:ad:
4d:5d:c7:01:1a:0b:f9:45:80:fe:d8:ab:3d:67:0e:66:cf:16:
86:41:87:78:15:f2:21:62:ff:7c:97:42:14:82:27:f5:28:4b:
2b:bd:51:e2:6a:8f:1b:0e:b7:77:cb:0b:37:f3:b1:6e:a8:ab:
ae:68:7a:5d:9c:ba:1b:84:fc:17:7f:ae:75:21:aa:1a:38:72:
4d:da:b2:00:ad:83:e6:c0:70:54:b6:c4:70:67:cc:95:9f:e4:
15:5c:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:11 2025 by rpki-client