Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: JObXjF19ZOsbPvljqfCPMv04jPsbq4yv4F2wf1ZSHz8=
Subject key identifier: 48:D6:E0:40:A4:D8:B7:0A:44:BA:74:43:64:AA:7D:46:92:80:8D:84
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 01987D1C9289215854425186BD0C7E553D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 02:01:21 +0000
Manifest this update: Wed 06 Aug 2025 02:01:21 +0000
Manifest next update: Thu 07 Aug 2025 02:01:21 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: xTZyLgwtMvH+6Vn8t/zyN5udUVMXJvL0RI/M/RgmFjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:92:89:21:58:54:42:51:86:bd:0c:7e:55:3d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Aug 6 02:01:21 2025 GMT
Not After : Aug 7 02:01:21 2025 GMT
Subject: CN=48d6e040a4d8b70a44ba744364aa7d4692808d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:dc:5c:d7:e1:8d:87:23:06:e9:55:e0:21:
6a:a6:66:2b:e0:80:1f:b0:ba:e9:2c:70:46:af:33:
a5:5d:3c:0c:53:ea:f3:5a:44:a4:1f:ff:2f:d8:6b:
45:b0:2d:46:80:38:41:3f:e7:00:8e:37:88:2a:83:
d8:f7:a3:27:71:83:bc:96:34:81:ad:92:1c:ed:f6:
73:83:18:aa:62:d9:32:21:00:4d:a6:ab:8d:a7:65:
45:7a:7c:dd:f7:aa:fa:36:c6:6c:1a:40:e2:af:24:
dd:fe:99:e8:ba:75:8f:71:f2:b9:a9:93:d0:e4:f2:
bb:86:ed:b3:6d:89:ff:5a:8c:29:e5:29:02:da:18:
b2:91:78:41:c1:89:22:88:f0:5c:0f:50:3d:26:46:
a1:b8:3d:c0:59:31:cc:1b:df:cf:60:8e:f9:22:ec:
99:22:5e:93:4b:23:cf:72:15:3f:53:07:12:da:4c:
b8:7f:bf:9d:e4:d2:02:2f:7d:22:f1:b1:99:24:b5:
32:11:c5:98:a3:e7:f5:a7:a1:94:77:28:ba:2b:85:
ac:27:9f:8b:18:96:9a:c3:16:0a:36:4d:29:f7:a8:
d6:8b:9d:d8:cb:c3:b5:d4:33:d7:71:04:06:e2:81:
00:84:01:5a:cb:7b:44:91:6b:50:e0:1b:ca:99:99:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D6:E0:40:A4:D8:B7:0A:44:BA:74:43:64:AA:7D:46:92:80:8D:84
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3d:22:e4:5c:86:49:d6:d4:37:0b:55:83:cc:82:ef:3c:41:
d7:fc:37:54:56:16:6a:78:54:d6:3c:a7:77:21:56:43:23:37:
83:5c:f3:50:e4:9c:d1:44:8d:33:98:29:98:0a:29:6e:60:25:
f1:64:a1:37:fe:9d:78:97:1d:92:00:b6:18:11:57:d8:e9:93:
77:f6:52:e0:fa:19:b7:41:af:95:ed:10:61:88:24:35:c7:8e:
39:a1:b6:43:9d:fe:4e:4c:7f:4f:31:dc:7d:9c:e4:24:b5:3b:
c9:b3:fd:4a:c4:cc:f5:9f:a5:e0:28:f6:9b:17:81:9f:d0:c7:
44:15:19:b8:9e:f9:ca:ef:29:a7:a8:0f:73:8d:cc:83:55:2d:
18:29:94:ae:5a:82:3d:56:39:94:e3:83:47:e6:96:3c:b2:5f:
83:60:b0:5a:90:46:66:92:55:7f:fa:e8:03:fc:83:58:ca:10:
97:8f:f1:fb:43:ef:22:18:43:b2:43:8a:0e:3d:bc:56:ab:e7:
b0:0f:ad:3c:55:ee:88:ff:ac:df:83:33:23:26:40:07:d0:eb:
70:6a:52:30:05:bd:5a:a4:85:d6:64:46:1f:34:09:b0:7a:2d:
5c:ea:39:25:95:c9:31:5c:1d:3a:c8:01:f9:1e:eb:fb:64:a1:
0a:02:9c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:29:41 2025 by rpki-client