
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: DMkcA2WwdRtIeGTKx4BEKLMT1dm/0T/hpb/DV4E1ONY=
Subject key identifier: AA:3B:7C:A0:6F:18:E6:C8:4C:76:5B:9E:8B:A5:66:A1:75:7F:A3:A9
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 019874501CC4C39834CD4E510F9927DEE3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 104D
Signing time: Mon 04 Aug 2025 09:01:03 +0000
Manifest this update: Mon 04 Aug 2025 09:01:03 +0000
Manifest next update: Tue 05 Aug 2025 09:01:03 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: bb+gpUyKZTlP6tnJxS76hEUMvGVWzHOrdnt4L15fUrU=)
2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=)
3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:1c:c4:c3:98:34:cd:4e:51:0f:99:27:de:e3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Aug 4 09:01:03 2025 GMT
Not After : Aug 5 09:01:03 2025 GMT
Subject: CN=aa3b7ca06f18e6c84c765b9e8ba566a1757fa3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:49:da:bb:9b:9c:f9:d1:7e:8e:1b:c6:5e:
cb:5e:33:3a:7d:36:4d:b7:e8:ff:1c:67:3f:db:e0:
58:8d:9f:04:ec:94:ed:99:ff:98:ac:c8:c4:ed:cd:
f9:69:8e:7c:3d:28:b2:f5:f1:eb:28:f0:fa:c9:8d:
0c:b3:1f:9e:a5:f2:bb:19:2d:5a:8d:9d:1f:ad:1c:
82:81:43:ce:bb:91:56:c1:45:c4:75:a1:d8:4b:c6:
da:c1:a9:82:97:43:46:7a:a9:63:dc:bf:86:f3:d7:
5f:25:37:1c:92:2d:0b:29:6e:e1:e0:e2:10:f0:11:
e9:0d:a3:91:6e:1a:66:9d:68:e8:9c:aa:a7:53:40:
19:23:61:d5:75:32:47:76:58:17:a8:ec:2f:b2:64:
cb:ec:69:70:cd:bb:e7:f9:da:08:f6:fe:d5:88:f6:
c2:6d:a2:bd:ad:61:f9:60:5f:c3:a9:6b:21:67:a8:
33:70:6b:34:11:0c:d3:45:12:bc:d6:5e:84:a4:54:
e2:da:26:53:d1:60:c4:84:39:fb:f9:21:a3:64:9b:
c7:0f:db:40:d5:27:e0:8f:6e:27:a9:bb:95:cf:0f:
0b:88:64:6c:fc:b9:a1:a0:42:bf:3a:d2:aa:3b:e7:
35:98:1e:fa:af:45:a4:18:87:59:7a:20:3c:04:69:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:7C:A0:6F:18:E6:C8:4C:76:5B:9E:8B:A5:66:A1:75:7F:A3:A9
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:96:6e:e7:5e:62:87:d6:5f:49:17:af:7e:5c:2c:12:9e:
89:78:02:3b:c9:f2:c9:ff:21:3c:0e:36:21:44:6d:f7:18:e9:
22:bc:dd:2c:c0:a1:5c:a0:44:04:27:3a:6d:da:0a:a1:3a:47:
78:96:7c:14:db:dd:09:af:75:db:8f:a9:16:ab:96:04:1c:f6:
98:59:02:6a:53:98:d4:b4:93:ea:f2:4d:62:73:99:54:7e:a9:
ec:d0:59:eb:6f:7b:d2:42:64:6e:22:ed:79:97:6f:c9:fa:0e:
8d:4d:bc:ee:e3:41:0f:a4:a6:04:b2:78:8a:42:da:82:6f:68:
1f:aa:7b:4e:a7:30:b7:ad:ca:5d:4d:5f:d4:54:98:2d:7f:ec:
85:15:51:14:77:f2:27:a2:92:82:c8:9f:89:cb:ac:bb:70:80:
88:27:34:77:e2:9a:1f:88:97:94:11:3e:99:f8:69:21:e3:3b:
8a:2d:ac:8c:2f:ae:3f:71:39:ad:44:a5:0c:aa:03:c7:98:01:
5d:24:d7:d8:8a:d2:98:3c:01:42:93:d9:10:66:49:4e:60:fc:
97:66:13:3e:b3:9f:4a:d2:b1:8c:14:5c:bc:7e:dd:eb:84:46:
84:0a:d0:10:b8:8b:9a:62:61:da:db:be:ac:f6:1c:ae:e0:42:
91:14:f9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:33:30 2025 by rpki-client