Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: tprlzwf5W5+zennYWlKu3vSOk08GFhaa7o41cxACYGY=
Subject key identifier: 43:84:FF:8C:AD:18:A1:A2:BC:49:AD:4A:3E:53:45:49:71:CC:78:75
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 0198741929A0670509F47A729B65471F9E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 068E
Signing time: Mon 04 Aug 2025 08:01:02 +0000
Manifest this update: Mon 04 Aug 2025 08:01:02 +0000
Manifest next update: Tue 05 Aug 2025 08:01:02 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: wJevek2KAVjQ79kMeALw9jn1KASnMY/dHL9IdAt/y+0=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:29:a0:67:05:09:f4:7a:72:9b:65:47:1f:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Aug 4 08:01:02 2025 GMT
Not After : Aug 5 08:01:02 2025 GMT
Subject: CN=4384ff8cad18a1a2bc49ad4a3e53454971cc7875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:07:7f:fd:ae:01:d1:2e:12:fc:63:96:f3:
10:d6:3e:e0:54:dd:4e:59:e1:af:21:83:12:86:5d:
26:9a:ef:84:90:bf:ec:5d:7f:d1:55:cb:d0:a5:02:
21:de:f2:73:82:38:16:a7:58:17:9d:c4:3b:48:9c:
cb:d8:dc:7f:5d:c5:cf:60:73:6c:b0:ca:a3:87:09:
e0:78:be:69:54:ac:9b:05:d3:5c:50:0e:64:72:48:
54:66:47:9c:c6:f1:f7:6a:7f:ff:b7:ee:c3:fc:6d:
7d:31:4f:bc:ee:00:f0:04:7a:05:4f:17:cc:e0:ec:
df:88:14:9b:a6:ba:57:0d:d2:2e:72:cb:4c:ea:4a:
cb:53:6f:19:f2:20:60:14:72:39:72:c1:29:96:75:
03:d2:44:86:fe:17:2e:c9:53:95:d8:6e:bd:21:0d:
06:68:20:2b:0c:e6:df:7c:d1:b1:3a:6e:18:61:49:
5b:4a:ae:a7:1e:3d:59:3b:1d:89:ac:22:7c:a4:af:
e1:8a:53:07:7e:34:ec:6c:b9:7e:02:02:46:aa:f3:
6c:3e:72:14:7a:c8:14:6c:3c:ff:1a:c0:e9:ef:ef:
bb:36:71:6f:0e:2b:17:08:ee:0e:60:dd:66:7f:2d:
32:b7:11:b5:79:c8:19:5a:25:9a:d0:79:c4:32:30:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:FF:8C:AD:18:A1:A2:BC:49:AD:4A:3E:53:45:49:71:CC:78:75
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6c:73:bc:36:be:d6:f0:12:e9:3f:86:68:2c:a7:2a:ff:8c:
f9:4f:54:ca:de:c9:4b:c2:dd:55:19:98:64:67:03:06:ca:48:
60:03:fc:80:79:cf:4d:e5:96:3d:76:cf:d1:d7:33:75:dc:0f:
d0:36:a6:d5:1b:10:af:90:80:53:58:0b:6d:e0:32:7d:2f:e8:
a7:50:62:0f:bd:4b:d2:6b:fc:d3:83:55:5d:32:0a:6b:5e:e3:
6a:02:8d:43:b2:fe:8c:31:3b:71:6d:53:6f:9e:67:4b:fe:96:
20:f0:18:17:88:d9:a1:45:45:e1:95:32:f9:fa:26:d8:74:51:
86:fa:7d:0a:ac:ff:cf:73:ae:57:0b:0f:5c:7c:32:39:2c:bb:
88:b1:55:41:fd:27:2c:7f:b8:88:fb:b2:39:7a:6c:ee:56:12:
dd:6c:bc:94:6c:a6:73:8e:d2:b6:34:79:35:74:b3:45:5e:b9:
dc:00:0c:50:80:af:ad:a1:9f:93:1d:0f:4e:f1:a5:02:3d:e7:
0c:2a:61:65:b5:5e:67:a2:26:c6:3a:1b:74:c1:b7:7f:35:60:
6d:7a:b3:6e:b2:fb:ee:d2:b5:5b:f5:4b:06:a9:4f:ff:a2:5d:
d8:a8:5b:f9:2d:ee:0b:55:16:05:ea:c5:7e:d1:f3:e0:7f:88:
73:9b:91:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:33 2025 by rpki-client