
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: 9HZh8Ix1CxTR0fl6LA9IhAjjgBN9iwJ7WuwJMloBivU=
Subject key identifier: 2A:C6:0D:F7:21:55:18:DB:D5:88:7A:07:62:11:7D:15:30:76:92:02
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 019874194C2826162CC84DA375EE4E59E537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 1431
Signing time: Mon 04 Aug 2025 08:01:11 +0000
Manifest this update: Mon 04 Aug 2025 08:01:11 +0000
Manifest next update: Tue 05 Aug 2025 08:01:11 +0000
Files and hashes: 1: 1FW1XbyYUs66xbKImXHkiZU-xAA.roa (hash: DA26l55wpmFxpEPwr1TEVKDAhIdZwBFIGz/j/ljF/kM=)
2: rQGBYURhHxIS2gUjxgxhWlf8G-M.roa (hash: d90EC3mny7b2jkfAqHp6/1/Pw4XbnGm5shftI7zAdH4=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: 31b3xY9D5DR2PVwMmWwKp3gaVnWo3HM8vHQ/tY2UgNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:4c:28:26:16:2c:c8:4d:a3:75:ee:4e:59:e5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Aug 4 08:01:11 2025 GMT
Not After : Aug 5 08:01:11 2025 GMT
Subject: CN=2ac60df7215518dbd5887a0762117d1530769202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:ca:01:67:a0:e1:f3:f1:95:03:c9:2e:ec:
cc:f0:d9:48:43:0a:23:69:b4:19:67:9e:2f:14:90:
6b:a5:22:ba:ad:d9:13:72:41:4f:d8:88:81:55:e3:
d9:a3:57:d2:51:43:44:85:db:d6:b6:53:78:13:62:
f9:12:a7:8e:43:b5:d1:ed:87:b7:18:68:57:fe:6b:
71:4e:52:e6:e1:46:04:13:41:60:bb:b5:41:04:84:
db:0a:96:bb:70:04:e7:f0:fd:01:7d:71:2b:35:de:
5d:b1:d4:b1:9c:d3:3a:5e:26:67:54:a7:76:a1:46:
97:a0:ea:e9:14:ba:65:ee:42:e8:f8:bc:d9:32:97:
4e:a4:a7:5a:60:ba:4f:c0:13:4f:c7:47:0c:63:35:
31:04:f8:81:70:39:46:e5:ea:b6:c1:c7:49:11:52:
4c:93:cf:6a:6f:6c:dc:0b:33:90:25:15:cb:85:cc:
02:1c:90:1b:6d:68:10:7a:05:c0:ac:74:81:95:0a:
e8:41:39:20:6e:d2:bb:33:9a:50:9a:ad:9f:88:98:
07:53:20:02:63:07:ad:29:e7:a5:bc:d1:dc:86:80:
5a:dc:d1:0a:cb:fa:25:89:31:c1:55:7a:91:5f:2a:
87:e2:d8:37:36:e5:b7:a1:cf:e7:c0:95:43:18:1f:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C6:0D:F7:21:55:18:DB:D5:88:7A:07:62:11:7D:15:30:76:92:02
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ca:8e:8f:8d:7f:26:75:0c:1a:01:f4:58:cf:79:06:22:ac:
c9:7d:9c:f5:a9:00:81:6b:f4:3d:8a:bb:ca:60:c0:3f:2b:68:
6d:33:65:e4:3d:43:1b:16:b0:22:fb:a3:26:cb:1d:5b:47:ae:
83:b4:a3:da:30:92:3a:71:71:ad:3a:1e:ba:91:c7:0e:07:9b:
b9:9f:08:ea:42:fe:21:0b:cf:48:b2:d8:a3:b9:09:6a:dc:53:
43:4b:fd:84:d2:e2:4c:64:0c:7e:2d:6b:73:bc:fd:83:57:68:
ed:c3:b5:85:ee:5e:ad:49:e6:b0:d1:40:af:5f:e5:d3:1c:3f:
c1:4e:4c:c1:f7:05:35:2b:33:30:c6:65:13:5f:fa:28:05:aa:
af:04:71:6d:dd:78:27:7c:1f:66:5b:22:72:15:a4:84:a1:44:
39:51:12:94:f6:c5:ad:0d:21:8d:43:ca:60:02:a9:cf:64:5a:
6c:b5:d1:61:68:62:46:39:44:1b:2d:53:92:9b:1b:45:d3:23:
fc:1c:c9:32:20:8b:52:c4:b0:b4:dc:d8:8a:89:a0:b6:1d:b3:
db:3a:db:3c:97:90:68:1c:cf:b5:42:72:e6:a9:fd:85:59:e8:
6d:6f:db:27:78:82:be:f2:a8:8d:49:23:96:4d:e9:05:9e:19:
d9:2b:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:21 2025 by rpki-client