Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: MB0Bc/z69sHlrdKHuJibpcbM/MNIYdJ9dLFfywRIkGs=
Subject key identifier: A1:B3:16:58:7A:41:5E:3A:82:69:03:46:6A:B6:5B:91:64:7D:4F:74
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 019873E3966C60592543B5B1C87F7961D521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:02:31 +0000
Manifest this update: Mon 04 Aug 2025 07:02:31 +0000
Manifest next update: Tue 05 Aug 2025 07:02:31 +0000
Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: 1r9wHoIN9VXpMuG/u1bGaPfNTZZjVRl9zs/lFXXLPa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:96:6c:60:59:25:43:b5:b1:c8:7f:79:61:d5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Aug 4 07:02:31 2025 GMT
Not After : Aug 5 07:02:31 2025 GMT
Subject: CN=a1b316587a415e3a826903466ab65b91647d4f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:18:50:ab:24:0d:64:a7:49:d7:c3:71:03:3b:
4a:45:0a:43:f7:52:df:82:c7:bc:53:16:9c:08:57:
d9:af:5e:a0:3c:49:1e:fe:5e:8a:92:66:7f:a5:7a:
a5:73:09:32:1b:72:26:3f:86:45:b3:a2:ee:96:46:
0e:99:57:c5:00:4f:0e:60:c8:72:dd:89:41:25:07:
ac:eb:48:60:e1:25:7d:81:0e:3f:c6:69:06:94:62:
e4:6f:a2:db:ba:2a:1d:dc:47:52:1d:b3:b8:0c:07:
32:52:ea:f1:21:11:a0:f3:68:82:e6:53:1e:b7:93:
a4:37:be:9c:2a:81:41:62:7a:62:6a:a4:76:ee:94:
80:22:e1:a1:46:39:26:e6:ac:da:e2:e5:55:81:c1:
0c:5a:de:f4:0e:12:d7:3d:1c:6b:22:a2:98:79:20:
2c:9f:b3:52:8b:b3:97:49:08:8f:40:57:f9:a0:6c:
33:5c:5d:f5:2b:00:ae:d2:0f:ff:d0:93:0d:e3:63:
ae:9e:62:18:73:52:b0:67:88:35:67:7d:0a:13:91:
ed:0e:7e:7e:36:c9:56:47:34:3e:d5:3c:1a:2c:28:
63:9f:47:59:81:50:1c:a4:89:5c:80:b1:d2:b1:bd:
b2:11:51:0c:62:7c:5a:44:f7:3e:ce:1b:24:57:ef:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B3:16:58:7A:41:5E:3A:82:69:03:46:6A:B6:5B:91:64:7D:4F:74
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:43:25:a9:d0:32:b1:9d:c8:02:e1:98:51:98:95:a3:2b:a7:
ff:fa:f6:f7:61:e8:c0:72:db:91:36:f0:f0:d9:3e:97:8f:fc:
d5:d3:fb:ee:21:d2:c7:42:00:63:2c:bf:e7:99:c4:2e:79:12:
b4:ec:e2:e4:f0:9c:ff:24:1e:e0:84:46:20:1e:4c:19:91:cd:
d4:d6:bf:4e:85:d1:c5:b0:c7:c4:1f:3a:11:c5:5a:db:94:2f:
a6:b9:36:8e:89:b2:e4:37:ce:24:75:13:f5:67:ea:ff:cf:b0:
aa:21:9d:60:47:1b:9f:5f:b7:34:81:28:be:52:46:d4:6c:f1:
b6:52:84:38:77:02:5f:49:69:08:0d:83:e5:ce:41:78:87:89:
95:1b:d1:2e:c5:07:26:0b:a4:d8:c9:61:38:32:37:57:d4:80:
7a:51:4e:d9:0d:13:ac:b6:80:8f:37:fe:73:7e:16:d7:4a:a0:
32:43:30:35:47:e8:2a:5f:d6:62:c4:d6:a2:27:ca:17:d2:48:
24:af:e4:80:e3:8b:66:64:d0:6b:f9:5f:ad:82:0f:58:f1:f3:
be:75:33:a6:d1:fe:95:02:46:a1:30:53:4e:11:db:7b:6b:04:
3a:2a:12:62:6b:78:16:d1:98:10:2b:a6:a1:aa:e9:fc:e1:b2:
25:ee:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:10 2025 by rpki-client