Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier: rc90BV1OaBDfxZTqqWB7F8+jxFtAiA/fVRZhGW/5tX8=
Subject key identifier: 91:F5:89:F2:3A:6D:4D:B0:5B:A9:A7:AC:B9:FE:DF:C4:D5:FF:7E:98
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial: 01988B0F62E6153EA331A73262439AC373A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 19:01:38 +0000
Manifest this update: Fri 08 Aug 2025 19:01:38 +0000
Manifest next update: Sat 09 Aug 2025 19:01:38 +0000
Files and hashes: 1: L5n__TlZWPdvDvLr4ZFidz4XLKs.roa (hash: joZuWv/Q4EyLrxkijZ/RW681SRLMu9NB8uvDRrrDNHk=)
2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: G57P/GUSNuWj/l495fD4VSo2Al71uw30xm/2ebGEHyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:62:e6:15:3e:a3:31:a7:32:62:43:9a:c3:73:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Validity
Not Before: Aug 8 19:01:38 2025 GMT
Not After : Aug 9 19:01:38 2025 GMT
Subject: CN=91f589f23a6d4db05ba9a7acb9fedfc4d5ff7e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:1c:94:8d:b0:1a:77:01:f2:c0:76:ce:33:
12:da:1b:93:69:76:f2:3c:5e:59:ab:c0:16:be:66:
f8:f1:f7:bb:57:20:20:c2:71:1e:96:d9:72:60:50:
61:44:51:71:6e:9d:e8:b8:18:d7:8e:24:63:d5:f0:
bc:d6:9c:41:60:de:42:39:1e:fb:77:41:ea:d6:9d:
70:17:af:a3:94:22:06:f7:62:30:52:4a:13:9a:dd:
0e:62:81:b2:c9:b4:39:95:04:d7:58:0e:ee:9e:fa:
d2:54:cc:42:85:67:ab:d7:62:fb:d5:8b:60:87:27:
2d:52:39:98:3f:f8:a1:37:8b:88:01:fe:cf:79:f2:
d5:5c:46:5c:a8:4f:da:60:60:f8:2c:1f:7c:c7:02:
33:b9:18:5d:43:fe:63:be:3e:e7:09:d5:0e:aa:1b:
39:a5:78:83:32:df:6d:62:4f:ff:c9:7c:ce:5e:c0:
b6:10:8d:86:c4:1e:e6:09:76:07:e6:c5:b7:ce:c5:
f1:85:f8:ff:b1:7e:87:0b:d2:df:5d:c2:e3:10:6d:
f6:1a:be:4a:af:16:8b:9b:77:d9:d2:07:ca:a1:85:
62:4b:67:56:db:60:2c:78:95:9b:36:39:20:66:35:
bf:7d:90:dc:5d:39:d4:6f:0e:8e:e7:4d:85:bc:b4:
79:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F5:89:F2:3A:6D:4D:B0:5B:A9:A7:AC:B9:FE:DF:C4:D5:FF:7E:98
X509v3 Authority Key Identifier:
keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:0f:46:37:74:0b:65:45:6e:e6:84:93:54:20:48:53:b3:d9:
bf:6a:68:43:0e:23:cf:3c:48:14:9e:57:d2:1e:db:31:d9:94:
2f:04:1f:43:a2:54:51:a0:d2:47:3c:a7:cc:25:a7:f7:d5:9f:
ec:c9:12:3c:45:67:72:ff:4c:2f:84:c6:12:78:e6:4d:ac:90:
b7:23:f4:91:f9:38:d6:89:4c:80:b4:1c:71:13:50:a9:85:f4:
83:f5:ae:16:e3:92:78:e2:e5:db:0a:98:2d:7c:26:b8:da:76:
34:05:b7:0e:a9:92:28:bb:a7:41:23:47:7a:a4:df:51:9c:b9:
30:0e:13:62:84:cd:5a:e4:f4:3d:18:45:02:17:5e:50:c5:35:
5f:4b:fc:ca:2f:ad:d0:2d:5b:20:ea:e1:49:03:0a:e8:48:a7:
e0:38:4e:c1:7e:09:cc:f4:50:db:2d:5b:f5:6a:2a:58:08:84:
cc:8c:31:99:f3:c7:27:87:b9:2e:a4:d7:18:0f:68:93:db:3c:
aa:0d:b5:21:7f:df:4c:9f:af:54:86:df:71:11:30:95:de:a8:
c2:5e:9a:30:e8:89:8a:43:b5:75:27:45:67:1b:44:c9:a8:2e:
f1:5a:ff:a9:96:78:51:c9:9e:7f:17:70:0a:17:71:51:2b:6e:
cf:39:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:16:42 2025 by rpki-client