Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier: b+eeRXne48jOIglyVy1NPVISkkJLhUvVrVSCSZEB6Vg=
Subject key identifier: 4A:40:28:F2:AA:33:85:17:E8:0B:A0:CF:93:69:13:8E:1E:8F:B0:E5
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 0198D51566FB3268382DBC1666084918CEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number: 0F85
Signing time: Sat 23 Aug 2025 04:00:06 +0000
Manifest this update: Sat 23 Aug 2025 04:00:06 +0000
Manifest next update: Sun 24 Aug 2025 04:00:06 +0000
Files and hashes: 1: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=)
2: llJ6liNS1pumqjPV_Jv49wbPcyA.roa (hash: 8yXr4/k0VmsJ3fSG9IZQB1mAPItrWTFszMy9LsJzJdk=)
3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=)
4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: M0C3VqXAHpAT6WzCCouFmg+Su1xou4bDzNVDH/VugO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:66:fb:32:68:38:2d:bc:16:66:08:49:18:ce:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Aug 23 04:00:06 2025 GMT
Not After : Aug 24 04:00:06 2025 GMT
Subject: CN=4a4028f2aa338517e80ba0cf9369138e1e8fb0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:93:24:52:96:56:af:38:e5:52:f3:1e:a5:
8a:90:cb:96:e9:eb:d0:fd:44:98:17:5d:d1:0a:e2:
4f:4d:df:7e:1b:bd:cc:d6:09:b7:75:64:fe:89:94:
f8:72:30:a0:63:b0:15:9d:a7:29:ee:07:24:36:7d:
45:9e:25:ad:09:ac:a0:c9:76:0e:f6:f9:e2:6e:c7:
b9:d7:31:1c:0a:04:ea:49:1b:a3:3d:86:6a:43:64:
17:ba:ff:09:ea:ca:af:52:1c:37:c6:81:84:78:8e:
1f:16:99:e2:4e:b4:11:ef:38:83:10:38:b7:7f:40:
35:4e:cd:44:98:84:72:1a:89:ae:19:17:2b:0b:45:
b0:18:f0:5f:55:a2:6f:db:f8:15:99:c9:7f:e7:86:
df:f5:c3:46:06:79:82:c4:6e:ef:4a:f3:1a:f8:2f:
22:76:38:5d:cc:a1:94:6e:99:46:94:40:92:f3:b5:
56:26:d9:a4:10:a6:80:55:3f:c9:e7:0d:44:e4:a4:
bb:cb:c3:3b:9e:2f:59:f6:a7:7b:80:77:85:8e:98:
5a:b2:51:ab:80:ca:63:0e:99:9a:5f:fd:53:21:27:
93:58:40:c8:38:a8:fb:ed:c3:1c:e8:7f:7f:86:62:
09:b3:3e:2c:95:07:cd:58:84:99:11:90:dc:3a:51:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:40:28:F2:AA:33:85:17:E8:0B:A0:CF:93:69:13:8E:1E:8F:B0:E5
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e3:06:38:54:fb:2d:db:b0:3e:6e:07:e3:4e:36:b5:b3:a7:
4a:90:bb:3c:46:93:1c:65:3e:64:9d:24:41:b8:b6:91:62:8e:
b0:36:88:42:bc:0f:12:78:aa:df:b5:57:b7:08:af:26:41:3e:
0d:da:96:60:bd:03:e8:b3:0c:e8:88:2f:c7:98:a7:1e:e1:68:
c8:21:c9:d0:4b:7a:60:ec:5f:a9:a8:fd:a4:c8:3f:4b:c5:3c:
90:1c:cc:16:df:eb:4d:4d:ca:da:6e:21:55:06:f0:cc:d5:60:
13:69:0a:bc:f7:08:39:3a:b4:67:59:ff:ed:93:c7:f1:fc:be:
40:e6:40:cf:4b:9a:4f:c1:79:0d:82:ca:0e:28:7d:db:9f:b3:
2f:76:cd:5c:7d:c0:90:e8:12:03:97:30:fd:f8:51:cc:b9:67:
35:0d:c3:d6:52:a5:48:4c:e8:1f:14:f8:38:fc:e5:a5:04:65:
db:e8:6e:a0:72:a0:f8:5a:38:ea:14:21:f2:59:ba:6f:4d:c4:
f2:c1:8d:c8:4e:62:f5:a4:7a:41:0f:16:6d:4d:fc:8b:e3:34:
3c:1a:65:5d:f0:20:93:50:76:8b:4e:3d:2b:6a:e7:60:d0:12:
ed:17:fe:18:d3:96:08:ea:cf:7e:b3:d0:25:d9:8c:08:1e:da:
2b:04:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:41 2025 by rpki-client