Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json)
Hash identifier: hq8sAR/7geazYG4IIMTJ+vrFbQlKRqDap0Z5ogjlMvU=
Subject key identifier: 34:C5:40:D5:78:43:A9:88:1D:2F:86:9C:1B:50:BA:FB:F8:F3:6F:81
Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6
Certificate serial: 01987D8A3C7EFA73D868B106B382C90C455D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:01:08 +0000
Manifest this update: Wed 06 Aug 2025 04:01:08 +0000
Manifest next update: Thu 07 Aug 2025 04:01:08 +0000
Files and hashes: 1: 0tyV27ZaRKIuc5h8kTDsBiv4BZI.roa (hash: 1dyOdZnQpGVWWsvnKswgEprRwbXy0vsePve+ulQremU=)
2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: pWBhjY1eVZ+4JTWe4X+FzdLcyOVo1EttO7R21WmmK10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:3c:7e:fa:73:d8:68:b1:06:b3:82:c9:0c:45:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6
Validity
Not Before: Aug 6 04:01:08 2025 GMT
Not After : Aug 7 04:01:08 2025 GMT
Subject: CN=34c540d57843a9881d2f869c1b50bafbf8f36f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:a8:8e:8f:be:2d:ec:29:cb:a6:4c:6b:b9:
48:cb:7a:35:17:19:8a:27:08:06:a9:87:fd:b7:36:
e2:c8:d0:0e:99:de:d5:00:ae:97:09:14:21:70:6f:
de:75:45:dd:da:35:26:cb:b0:33:1b:31:78:8f:6e:
a6:10:c8:b0:d8:52:4f:d2:11:eb:c1:65:c4:74:cd:
b0:c2:a9:97:c2:2f:03:19:11:01:70:73:1d:d2:31:
17:6d:35:39:e1:e1:7f:fe:58:6c:d9:10:83:5f:3c:
b3:f4:42:4e:41:10:36:db:8f:e6:b6:ea:4e:e8:f7:
e7:14:7f:cf:9c:7c:36:f0:fa:5a:ec:4b:83:2a:3a:
82:eb:59:fb:8b:65:c7:a4:60:a4:f1:72:29:83:e9:
89:9b:f7:db:84:a0:f2:00:e5:d9:a7:7c:1e:f7:e3:
a2:3a:8b:60:13:96:56:b8:8d:09:d2:29:60:9c:40:
67:12:f1:a6:db:ca:fc:d8:a5:ce:da:13:d5:d8:41:
21:43:cb:df:d0:e8:75:1f:4e:3e:44:97:59:90:d0:
17:c1:f9:50:e8:db:7f:51:a3:17:40:06:63:c8:1a:
b3:6e:82:6c:c9:e9:5d:ec:ec:3e:b4:8b:23:f1:7b:
e7:66:40:9e:81:fe:f3:e3:5d:b8:58:ce:37:04:ee:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C5:40:D5:78:43:A9:88:1D:2F:86:9C:1B:50:BA:FB:F8:F3:6F:81
X509v3 Authority Key Identifier:
keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4e:87:61:71:c9:c8:d4:3b:79:98:02:14:22:a6:2b:1a:d4:
56:5c:17:ed:1e:fa:1d:de:de:9d:98:f6:1c:56:61:18:4a:f3:
f8:b8:71:e4:4a:b1:ce:c2:87:03:62:4b:20:5a:d7:24:8e:a3:
32:1d:35:80:0e:36:ed:15:02:c8:88:3d:d7:7d:5f:34:d4:d6:
a6:27:33:ed:da:2c:df:07:95:c1:60:64:fe:9d:04:ae:27:70:
9c:2a:1f:e7:75:b1:39:25:25:c0:99:dd:77:d0:2c:70:b2:9d:
1e:22:43:80:e4:4a:aa:7c:92:ed:4e:13:6d:f5:b0:9e:a7:f2:
ad:7b:f8:51:bf:f3:41:67:55:2d:95:64:e9:e0:11:7d:f6:7c:
9a:08:dd:07:73:67:ce:6d:e4:24:7a:4e:d2:ef:50:50:de:dd:
6f:e9:04:14:b6:42:42:01:7e:a7:06:a9:a5:95:6a:29:f6:f9:
03:9b:8c:3a:8a:ee:f4:22:82:9a:7f:cb:14:f2:2f:bd:b3:f0:
0f:97:a5:ff:78:02:e1:e1:2b:a3:a6:0f:f2:33:95:f5:a7:9a:
e5:69:28:3f:dc:3a:ae:6c:51:11:ef:49:78:c6:74:54:51:a1:
5b:84:7e:a7:74:cd:c4:81:ce:3a:45:fc:42:81:c5:6b:c6:2a:
53:f8:82:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:24:04 2025 by rpki-client