Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: aBvNhWX8xXNX1VF4WO4R7NawExe7VGqheyNtvLXbdlA=
Subject key identifier: 7C:A5:89:BF:E1:69:52:6D:6C:A2:81:79:8A:59:34:28:96:76:E1:23
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 01987D8AFFF2C7D8CAF891F5BC51265744F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 25
Signing time: Wed 06 Aug 2025 04:01:58 +0000
Manifest this update: Wed 06 Aug 2025 04:01:58 +0000
Manifest next update: Thu 07 Aug 2025 04:01:58 +0000
Files and hashes: 1: 6dPthsF1SSLUrw-8wd5QNobYALo.roa (hash: CmnlVEiEx4rD/KLQtwZBi42ENs4iCe+rnAiQ+mn7tNY=)
2: AM62_hNG9hkzgdOgJu_7Pl-u4oI.roa (hash: aTW9umwh2RX7kyAdVmGDBiqiexRFNiZSuIDuhZf0vOA=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: qsSJp1zY2AaiR2UhCUWz/KCBJ0qxRYPk/K6bZTf8jsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:ff:f2:c7:d8:ca:f8:91:f5:bc:51:26:57:44:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Aug 6 04:01:58 2025 GMT
Not After : Aug 7 04:01:58 2025 GMT
Subject: CN=7ca589bfe169526d6ca281798a5934289676e123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:fe:c7:64:a0:cd:d4:b3:cc:bb:1b:11:a4:
d2:3c:a5:e7:56:67:cb:50:9e:64:db:a1:e5:28:28:
41:7c:2d:21:55:a3:2e:1a:5e:46:8e:fc:94:b1:fd:
bc:42:9f:a5:7a:ce:a8:8a:e2:fb:59:e1:9b:78:dd:
d4:38:e5:f7:b4:87:b0:26:75:a3:fd:e3:22:8a:59:
6d:83:67:4d:30:c3:8c:ba:7f:43:f4:95:fd:e9:22:
c6:ff:fc:38:00:88:63:d5:0a:1d:86:bb:9a:94:d5:
24:9b:79:ad:e3:d7:e6:de:aa:7f:ed:71:6b:6f:a6:
8d:e6:1f:94:13:ac:f7:d3:dc:79:5c:34:d6:30:b8:
44:9f:5d:c0:e0:d1:10:dc:fe:46:ab:9e:6e:8f:aa:
f4:81:10:b9:27:b9:a1:40:6f:30:04:f8:65:1b:51:
ac:a4:76:d2:5d:a1:2a:c3:e8:d2:f6:69:5a:1d:aa:
ac:89:9c:2c:37:50:c7:52:bd:5d:2b:0a:b9:4b:b9:
fd:2e:ea:e6:56:8b:11:45:1c:8e:ad:57:82:3d:b9:
08:6e:62:ba:41:23:f1:7d:d3:dd:bb:8e:fc:0f:6a:
a5:6e:3e:07:32:d0:19:92:7d:37:18:ba:b3:9e:5a:
60:25:25:6a:57:15:f4:80:8e:9a:19:1c:5c:4c:39:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:89:BF:E1:69:52:6D:6C:A2:81:79:8A:59:34:28:96:76:E1:23
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:51:9c:bf:ac:eb:83:b7:28:62:7f:62:d4:f4:62:43:7b:72:
d6:bd:8a:0c:a2:2f:5b:47:dd:53:22:8b:a8:eb:75:40:92:6d:
87:cc:3d:b1:4e:8f:27:33:8a:5a:26:3b:0e:d0:d9:67:a6:09:
3e:b3:fb:6f:43:06:eb:28:b2:e7:03:0a:91:e1:8c:c8:47:16:
c7:d7:0a:27:8e:92:2d:00:12:db:b4:26:8b:51:dc:2d:11:66:
92:6b:a1:ed:31:67:20:80:97:16:e2:2d:ec:ff:15:97:5a:91:
54:2a:ca:01:b9:e9:d0:2b:dd:10:66:90:0d:e9:47:88:1c:d3:
4a:6c:18:36:36:45:c2:ad:92:dd:95:77:9a:3a:e4:e9:71:09:
dc:de:ea:0a:1c:cb:6e:7c:49:6d:7a:8c:86:f2:12:6b:2a:90:
3b:23:e2:ee:50:f0:be:29:b6:34:9d:24:cd:7e:23:06:46:0f:
75:53:91:fc:16:23:c2:38:cf:07:ba:2c:f6:73:fb:0f:d5:a6:
e9:37:60:3b:2c:c4:a7:6c:7b:86:bb:65:3f:0b:51:24:0c:a2:
45:09:5d:1a:01:31:36:f8:0e:9f:6e:55:1e:01:af:de:86:5c:
ba:f0:5f:10:2d:70:ae:ef:ab:5f:23:75:7d:7f:b1:8f:c4:49:
58:99:8d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:28 2025 by rpki-client