Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File: wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier: 9IyFaDKstpzlJDOACVv7TcNYjGauc1vkc/+Jt2UaObM=
Subject key identifier: 1F:13:39:F2:91:07:FD:8C:2D:68:23:C3:88:75:55:57:7D:BC:16:46
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer: /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial: 0198925A8E2FB82BF51F916306580FFE0972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 05:01:04 +0000
Manifest this update: Sun 10 Aug 2025 05:01:04 +0000
Manifest next update: Mon 11 Aug 2025 05:01:04 +0000
Files and hashes: 1: 9Z5tAyPoNAUrhK3XQbPirY-i870.roa (hash: JYdT76bIYS9WiRnbn5ANGOhlwfQ42Z47wnU1M4quBe4=)
2: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: S6g8eiIK8Z/uDuOuy2Z/CZmHSXnBmdhC7HdXVOtU5/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:5a:8e:2f:b8:2b:f5:1f:91:63:06:58:0f:fe:09:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Validity
Not Before: Aug 10 05:01:04 2025 GMT
Not After : Aug 11 05:01:04 2025 GMT
Subject: CN=1f1339f29107fd8c2d6823c3887555577dbc1646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:05:d8:a9:7a:dc:64:03:8d:14:04:b5:a2:
bc:1f:b9:1c:20:01:b9:63:5b:6d:5a:d1:f9:9b:89:
1b:48:67:88:ab:75:ae:4c:52:25:a0:10:e9:ab:39:
f0:fb:ea:f3:4d:ca:0b:5f:77:db:e9:93:09:62:df:
85:d6:e5:69:ca:5c:41:b5:ac:a3:21:08:1e:cf:ee:
a3:1e:fa:d2:85:b1:9d:02:39:55:ac:3f:17:f1:b7:
6b:22:22:1c:e7:08:b1:5d:f8:fa:4a:1a:01:a2:69:
28:ec:b1:3a:c0:3d:e0:41:4f:cd:d8:65:c8:b5:df:
0f:ad:8c:bb:74:ca:e6:e9:7c:ce:18:03:d9:61:d1:
3f:93:ee:f3:26:7f:d8:60:96:ee:b3:d3:b6:e0:1a:
ab:33:60:bf:a8:b6:5e:e6:71:66:5f:2f:df:4a:32:
a3:65:0a:44:5a:36:57:b8:52:5c:b7:53:fd:82:5f:
c4:00:f5:99:a7:9a:df:b0:f3:f3:f4:16:92:77:34:
24:72:6c:a1:eb:c1:3c:56:1e:53:42:85:ec:84:01:
37:3a:ea:ad:1a:00:3f:63:f9:9b:38:aa:44:be:f2:
21:8d:15:fc:a7:7e:e9:d5:63:69:8c:ad:5a:03:e2:
56:24:5c:55:c1:54:6c:2e:7d:02:3a:9a:7c:d7:5f:
33:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:39:F2:91:07:FD:8C:2D:68:23:C3:88:75:55:57:7D:BC:16:46
X509v3 Authority Key Identifier:
keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:a0:46:1e:73:e5:db:87:f0:19:3f:be:58:f2:23:bb:77:ec:
fe:cd:b9:9a:0f:17:de:47:cd:1d:03:a8:8d:63:c1:b2:cf:c8:
7a:b4:66:27:09:61:ce:ef:35:04:69:5a:d2:e7:c5:01:c5:24:
bd:62:04:93:d9:59:54:f1:93:b4:03:36:e8:3b:b8:94:bd:f4:
62:0b:15:b1:f9:b8:f8:85:5c:a7:cd:09:24:2b:10:fc:ec:70:
df:ff:74:1e:ad:92:3a:a7:dd:31:39:c4:e2:28:53:3a:66:d4:
12:63:61:a2:dd:63:b6:18:2f:95:61:4d:24:5a:d9:a4:af:50:
a9:3d:81:b6:9a:c2:4e:27:3d:95:a4:30:63:d5:ca:e1:a8:a0:
86:be:e4:8d:bb:32:53:d5:e3:c1:e6:f6:3c:44:00:27:00:8a:
60:99:e3:b3:ab:20:b9:8f:c6:f0:c3:30:e4:3c:8e:20:7e:86:
86:43:a8:80:79:ad:ca:ff:b7:95:84:f8:b0:c2:71:b5:f3:e0:
3d:92:dc:13:13:9a:e4:3f:ca:5f:bd:c8:93:b6:f9:a6:58:53:
14:8e:7b:49:66:fd:5a:9f:b6:44:bf:86:cd:bb:8d:4c:0a:b6:
3d:cb:45:f7:db:f1:cc:f2:2c:bc:60:c5:e0:4f:79:0f:bb:f9:
e4:af:cf:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:06 2025 by rpki-client