
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File: wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier: 0lSOaHSBe70/sSed0xifIbwtQA4wi2oQ1zYTOVLcDi0=
Subject key identifier: 33:C7:4D:5C:87:F5:4C:7A:A6:B4:B3:AC:8E:6A:95:22:14:91:97:E8
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer: /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial: 0198A083B074857627F07B3D5CCFE9022B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number: 0531
Signing time: Tue 12 Aug 2025 23:00:41 +0000
Manifest this update: Tue 12 Aug 2025 23:00:41 +0000
Manifest next update: Wed 13 Aug 2025 23:00:41 +0000
Files and hashes: 1: KG9HkmRGaF_sHhDWjx3vp73PeIA.roa (hash: xtQ/Bf0q+zKX28vYl4yuK/JzcH8nDzNW75ipUDIj1iY=)
2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: F2cwmIkJQq47zavfuo53BoZJNDp6BsCF0LS//Oc/n+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:b0:74:85:76:27:f0:7b:3d:5c:cf:e9:02:2b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Validity
Not Before: Aug 12 23:00:41 2025 GMT
Not After : Aug 13 23:00:41 2025 GMT
Subject: CN=33c74d5c87f54c7aa6b4b3ac8e6a9522149197e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:49:1e:28:5e:3d:48:c1:7e:e5:18:7b:16:
bd:3c:a5:9f:37:89:3a:ca:75:c9:00:63:ce:a7:f7:
a7:ab:a1:93:eb:3b:2b:40:89:51:68:3a:61:46:e6:
8b:1f:dd:35:82:ad:99:63:dd:c9:47:3c:f9:bd:7a:
6c:f7:b5:90:58:36:b7:d5:e6:e9:a6:bf:28:42:42:
b5:ed:1d:d8:4d:d8:b9:2b:17:f4:60:13:a1:f7:bf:
48:72:4e:3a:6c:22:13:21:18:58:74:83:e7:26:e6:
71:70:ec:fb:f7:9b:e3:79:72:63:3c:64:61:83:f6:
6e:f7:73:c9:8a:d7:5b:0b:b6:b0:7a:52:0a:80:e4:
2a:3d:95:a1:84:36:75:95:f9:15:5a:79:37:97:ad:
db:e6:2b:32:be:84:73:03:2f:e2:6f:4f:1a:09:da:
2a:0f:9a:90:c9:24:b2:89:c9:35:47:90:a6:55:ed:
4d:2a:80:14:f8:77:91:b0:d5:90:5e:26:01:cd:58:
94:6a:dc:30:9e:80:aa:be:69:19:26:e7:1d:ab:3d:
39:63:0c:8d:04:69:83:d3:28:34:18:a5:0c:23:ca:
77:3a:6c:69:be:55:cc:3f:4b:28:86:4f:b8:cb:02:
42:28:9f:16:69:18:6e:e5:5e:9f:34:9f:b9:5a:7c:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C7:4D:5C:87:F5:4C:7A:A6:B4:B3:AC:8E:6A:95:22:14:91:97:E8
X509v3 Authority Key Identifier:
keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:06:fe:0d:98:17:78:d2:fe:0c:97:cf:23:85:b0:f9:a7:e8:
b9:8d:26:37:45:75:a8:bd:46:a4:0f:02:cf:3a:60:de:e6:8b:
e6:ac:ee:db:a0:76:6f:6d:b9:14:e9:26:bd:d9:1a:88:60:fb:
a6:fd:7d:64:73:7d:64:0b:56:4b:5b:4b:95:e4:28:6f:4c:c5:
cf:a9:b6:36:ce:f8:ac:5d:31:ed:a0:51:0b:60:c8:f1:9e:b6:
07:aa:f6:ef:9a:d8:b1:c1:3a:91:8d:ef:ca:20:d6:bb:3b:26:
90:f3:1b:a3:82:6e:f9:d2:ac:f1:0a:8c:4a:7c:57:eb:f5:6b:
91:15:a4:42:18:c2:d4:db:45:2d:26:38:a6:e9:5c:aa:17:bf:
54:ed:6c:55:88:3b:1d:e5:76:31:79:a5:a1:c2:7e:98:79:5a:
c5:90:4f:45:da:36:56:b4:d8:29:06:d3:2b:e8:3e:8a:fc:57:
9c:3d:03:c3:d9:43:39:ea:73:fc:8c:94:12:e2:27:06:bd:95:
37:80:f5:c4:fd:56:5a:ce:db:ea:89:7e:20:86:80:6a:2a:03:
0e:6a:93:a4:69:ca:2a:95:2b:1c:6e:9f:bf:fd:e9:c4:53:01:
b1:88:e3:2a:74:f6:fa:42:b3:0d:a1:e7:a4:c6:06:12:bb:ea:
ec:75:77:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:10 2025 by rpki-client