
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: QCutqSPeFGTzlFgqFOrb6ZYiYM5Vsna5NN5Vp8R+Q+k=
Subject key identifier: 51:E4:F4:1D:72:34:D7:3D:31:A8:F1:7A:D9:9C:CB:B9:C4:20:6E:DF
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 0198A0BAFFD1885C14C37680906D258944B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 0289
Signing time: Wed 13 Aug 2025 00:01:06 +0000
Manifest this update: Wed 13 Aug 2025 00:01:06 +0000
Manifest next update: Thu 14 Aug 2025 00:01:06 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: QjxshuskiKcd634qpyuNWrRma4q7xrxRpdnEl9YsE9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:ff:d1:88:5c:14:c3:76:80:90:6d:25:89:44:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Aug 13 00:01:06 2025 GMT
Not After : Aug 14 00:01:06 2025 GMT
Subject: CN=51e4f41d7234d73d31a8f17ad99ccbb9c4206edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:20:e9:c2:80:f6:91:33:95:b3:42:8a:7d:
f9:2e:c7:07:f0:01:b1:af:da:c8:ab:dc:9a:c1:33:
7e:ad:d0:7a:dd:7d:a3:5e:bf:b7:c5:9a:96:17:00:
c5:95:1b:2b:08:22:11:e2:c7:15:61:e6:97:fb:28:
68:05:45:e8:d0:4b:83:4e:ff:a1:41:fe:f6:97:2e:
f5:dd:76:67:dd:88:b1:b4:59:6b:f6:21:86:d5:2e:
4d:1f:01:62:46:09:f4:30:ee:aa:1d:bc:79:62:6e:
80:48:0b:cf:53:f0:15:79:2d:74:68:3b:6b:e4:5a:
28:fd:76:e1:db:56:fc:68:2e:de:7b:54:8d:ee:ad:
2b:31:62:0d:bc:e9:8d:0c:ca:ab:6b:64:72:06:40:
7e:9a:bd:21:7d:66:46:c3:aa:0d:b7:e7:6d:1d:19:
31:c7:90:3e:a9:03:e3:02:18:89:be:c4:aa:07:f7:
9a:63:65:5d:2b:25:4f:50:cc:a4:92:76:67:06:49:
0c:c5:75:84:9b:39:58:1b:b9:79:05:e0:06:7f:58:
93:6c:98:fd:21:50:44:2b:c9:10:4d:86:81:51:9f:
9b:5b:d8:fc:8c:d9:c6:a5:8e:79:84:9a:e3:94:df:
b5:7b:d0:c5:ad:5d:02:b3:19:94:c8:e0:a3:89:a1:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E4:F4:1D:72:34:D7:3D:31:A8:F1:7A:D9:9C:CB:B9:C4:20:6E:DF
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:dc:d8:24:2b:fe:91:91:93:4d:20:7f:84:37:08:97:80:a7:
ab:4f:44:bd:05:27:da:b4:e4:7f:c3:55:67:a6:49:9f:e0:b4:
51:7e:55:81:10:4e:08:77:b2:04:ae:16:ad:19:9e:7d:e5:1b:
77:b7:f6:31:31:cd:4b:9b:4f:37:aa:62:fc:53:5e:43:50:5d:
5c:f0:eb:32:53:9f:a6:55:53:30:2d:ee:16:1d:66:f7:d9:e8:
f6:ef:c8:41:54:0b:11:35:43:3f:37:62:04:02:48:79:d5:bf:
09:34:ac:14:83:3c:15:5e:b0:89:b6:26:6e:e2:e1:1d:ae:00:
bd:1e:b9:92:9b:58:f3:7c:6d:45:86:8d:23:55:46:d0:5e:dd:
28:cb:db:19:7b:ec:3f:e4:f5:5a:ef:24:2d:82:8f:77:9c:41:
7d:ec:e3:43:8a:03:35:fa:80:c3:a3:0e:a9:8a:ac:3b:96:24:
55:4a:ef:43:29:e4:4d:73:c6:b6:5b:58:26:c0:c9:79:26:db:
b5:e9:59:a4:7e:98:e5:31:41:e1:47:d9:a2:99:c6:2f:4f:67:
f2:ad:67:41:46:10:e5:19:39:fc:94:04:02:9c:22:e1:74:df:
8b:89:c1:ec:f7:81:94:23:8d:e0:9d:30:5d:8f:93:b4:d9:dd:
c9:6c:9f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:46 2025 by rpki-client