Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json)
Hash identifier: qRoY17J3ogYvS5Iz7A+jRP3bNdDJpU9Ff/0HHLMceQA=
Subject key identifier: D7:82:21:A3:50:99:25:E1:B9:3C:A5:39:05:80:8A:BE:D4:B4:CB:4D
Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Certificate serial: 01988E468AD69B813187BD432BDC40668D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 10:00:44 +0000
Manifest this update: Sat 09 Aug 2025 10:00:44 +0000
Manifest next update: Sun 10 Aug 2025 10:00:44 +0000
Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=)
2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: lu4IYJ1Y+EKfVD/OJYsUGNlDKAhRN/AkU3zRfb3swMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:46:8a:d6:9b:81:31:87:bd:43:2b:dc:40:66:8d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9
Validity
Not Before: Aug 9 10:00:44 2025 GMT
Not After : Aug 10 10:00:44 2025 GMT
Subject: CN=d78221a3509925e1b93ca53905808abed4b4cb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:af:64:b0:35:f3:61:1e:c1:5d:21:7e:67:40:
d8:76:53:62:2d:da:bc:ce:81:f7:84:f7:83:17:4b:
13:d7:79:93:17:1a:9b:f2:14:d0:f6:f9:82:ca:f0:
96:59:05:eb:04:5d:4b:bf:03:a5:30:23:2c:20:fa:
80:38:bc:15:6e:03:2e:1a:61:db:76:8b:d6:33:85:
77:51:98:98:fe:1d:cc:e1:ff:87:92:d9:a3:d8:ca:
37:0d:47:6c:08:da:41:b1:86:ce:71:10:b2:ae:3c:
6a:e4:83:2f:a8:f3:0b:e9:6b:f9:ae:3d:c2:1e:98:
2c:7b:3f:ff:34:ca:82:10:d6:24:90:9b:fb:f0:d4:
b9:51:d6:88:42:7a:6e:e9:49:c2:b0:df:16:f8:68:
61:d0:ee:11:ad:f6:6d:8f:e2:15:b4:dd:94:84:4f:
4f:52:f8:3f:da:64:7a:05:d0:57:f9:6a:b1:1b:43:
60:c1:3f:cf:76:87:9a:d0:ee:93:d5:f5:95:1b:e5:
e9:55:71:6a:bb:a2:11:78:c7:cb:4a:75:73:b1:af:
2d:26:d9:19:bc:de:b1:38:2f:b0:80:a0:38:83:6b:
2f:3e:63:10:37:30:0d:b2:12:88:20:19:54:72:63:
2a:f4:d0:2b:59:bf:85:99:28:93:64:ca:b2:1e:65:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:21:A3:50:99:25:E1:B9:3C:A5:39:05:80:8A:BE:D4:B4:CB:4D
X509v3 Authority Key Identifier:
keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cd:89:66:37:34:47:2e:9f:f5:f3:d5:32:84:6d:86:1d:a8:
76:40:6e:7e:cc:99:a7:6e:3b:9f:ee:5e:91:5e:e1:e4:33:4c:
b0:88:c2:f3:80:a2:25:db:50:cf:40:67:10:1c:c3:f1:f3:cb:
47:cd:d5:4c:4f:95:46:f0:33:97:f3:a3:c8:90:3d:a9:f5:f2:
36:21:69:b6:74:c2:e6:05:cc:ee:57:b9:5f:f8:98:05:c2:94:
ea:ff:00:35:69:e4:dc:de:51:29:b2:52:f9:09:69:d3:b3:eb:
bd:cf:05:73:26:4a:98:ea:af:d2:da:0f:74:36:c8:86:cb:95:
31:00:9d:46:15:28:ba:c0:bf:c5:90:a3:0f:9b:66:c1:f8:83:
29:e1:0e:f3:7b:35:11:fb:b7:6d:b4:b7:ca:99:04:5a:3c:b4:
25:24:98:c8:99:42:cc:d6:89:32:70:66:69:9c:a8:67:e3:cb:
d7:1e:3e:7c:72:3b:8a:63:d8:4e:bf:fd:80:3c:db:5e:6d:a4:
c2:65:88:b2:82:75:e1:94:73:b7:55:eb:10:6d:61:65:c0:15:
55:77:e0:89:dc:3f:a6:8b:80:e2:06:64:29:58:7e:f2:7e:da:
31:fd:d9:68:44:43:9e:1a:58:ca:63:13:30:2d:a9:b1:4b:29:
91:17:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:33:50 2025 by rpki-client