Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: RQv4cC0zb28So1Ca9fxrt0j3SMu7j695Q76NhITB+Xk=
Subject key identifier: C8:AE:C2:37:4B:3E:9C:47:A2:6C:AB:3A:FA:C9:DC:92:34:4E:05:9A
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 0198966DACF7209A9668BA6FC0AF343DF360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 0572
Signing time: Mon 11 Aug 2025 00:00:26 +0000
Manifest this update: Mon 11 Aug 2025 00:00:26 +0000
Manifest next update: Tue 12 Aug 2025 00:00:26 +0000
Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
2: nPjV6lYXInJfXl86tbhvs9WXUa4.roa (hash: asKBhySwit3PBxbedsUA8HTRnekoYKrc5tk7Wn5QFGc=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: YmV0oCAAA/sAsjJzvciGggiRjKQggrV/6MgQrhodN38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:6d:ac:f7:20:9a:96:68:ba:6f:c0:af:34:3d:f3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Aug 11 00:00:26 2025 GMT
Not After : Aug 12 00:00:26 2025 GMT
Subject: CN=c8aec2374b3e9c47a26cab3afac9dc92344e059a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:1a:a0:00:77:dd:be:bd:52:99:f8:fd:92:
44:f2:2f:d7:78:ec:b6:a4:92:f2:d7:b7:94:13:d3:
55:bd:38:e0:7a:75:2c:53:66:a1:54:7b:cd:8a:18:
88:ee:96:1f:2e:07:66:64:f3:48:0e:d8:2d:b1:61:
4d:ff:bd:4c:eb:66:d3:a1:08:72:02:f7:2b:6e:6b:
be:2d:d5:0e:b1:41:97:f7:d6:89:0c:5e:30:fa:a9:
36:a9:a3:09:a9:ff:0a:f4:64:7a:dc:f4:5c:27:ea:
ea:cf:32:a4:b1:5b:46:d1:ee:a2:c7:b4:5e:fe:cb:
fb:36:40:c8:c1:15:c4:bd:62:6f:1b:c2:f2:98:09:
db:6b:ad:d5:17:cb:35:e4:2a:f6:73:b8:eb:b8:c2:
48:9b:91:9e:ee:d0:2f:46:de:3a:a0:26:40:ab:d4:
58:ee:80:c3:2c:4d:39:08:e1:15:e8:21:86:a2:62:
6a:99:9a:3e:61:04:6e:23:87:c4:e7:b6:3f:4f:f6:
ab:28:72:41:ee:4a:d4:eb:a9:2e:b0:a1:57:ff:19:
37:b7:85:20:4d:fb:ce:4a:6c:1e:a0:97:c9:03:a3:
3c:48:67:24:80:be:88:c5:1a:90:a7:31:39:34:45:
4f:9f:e2:87:00:e6:e6:00:2c:3c:fa:0f:04:d1:68:
c2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AE:C2:37:4B:3E:9C:47:A2:6C:AB:3A:FA:C9:DC:92:34:4E:05:9A
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7d:13:5a:e4:cb:1b:e8:0d:64:e6:e6:13:f4:d0:fb:96:b4:
26:8a:8a:a3:3e:1e:b2:6a:3b:d4:47:b1:4a:06:e1:03:b0:1a:
67:e2:9d:1f:62:2a:f3:88:e8:59:c8:26:6c:fd:a6:c1:24:11:
3d:c7:7b:1c:5e:fe:cd:cf:98:40:b6:51:56:43:66:e1:1c:40:
f3:71:19:11:b8:2a:b9:53:bf:ed:ef:bc:9f:21:2d:39:82:07:
a7:82:87:90:21:b0:be:35:16:6f:b1:30:d8:fd:58:f5:30:69:
9c:5b:2a:7a:77:f1:b3:06:26:41:1e:8d:a0:ec:05:5b:fe:98:
37:72:65:75:30:3e:1a:bf:3e:39:92:28:79:55:8d:ae:dc:e9:
04:2f:f0:32:36:05:ff:92:e6:2c:ac:c3:73:7f:18:5b:03:00:
4b:41:1d:be:28:be:11:ff:6d:9b:89:12:29:d2:c4:1d:fc:91:
d2:81:3d:14:f7:3c:1e:5a:c3:ca:77:8c:71:ed:16:55:53:7b:
54:82:b6:a8:0a:5f:d5:35:7e:35:2f:50:62:5b:63:03:cb:f7:
a1:41:7e:71:18:61:e1:d8:04:c9:b3:7e:c8:34:2d:3f:68:72:
0a:79:c0:c2:58:bd:f1:1b:70:f5:be:b1:e8:02:e5:89:ee:9f:
16:16:12:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:29 2025 by rpki-client