Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier: XtD8TdK0LyTenzvpZGzuUB3WrkLSsEzoM2EvaLAsAyk=
Subject key identifier: 2F:DE:71:73:65:55:1E:E2:CF:8C:4F:60:A6:4C:35:41:61:26:D9:0C
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial: 0198D5BC38DBB5AEE07D644DEB93119A1D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number: 15F4
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=)
2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=)
3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: YrkLr6R1DQTaRmZP5Aik9xzccqD+6cn3LugicNsqCCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:38:db:b5:ae:e0:7d:64:4d:eb:93:11:9a:1d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=2fde717365551ee2cf8c4f60a64c35416126d90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:cc:42:fc:6e:e4:8d:3a:94:46:a8:9d:62:
57:55:ce:b1:74:30:23:5f:cc:72:69:ac:98:47:13:
e7:08:e7:87:73:9d:c4:94:7a:b4:57:58:91:84:d5:
65:d6:6a:cf:d4:14:a6:43:97:73:90:be:3c:d0:6a:
e8:48:d3:5a:15:75:2e:a0:ea:8d:e3:dc:99:79:5a:
c0:e8:8d:b4:a3:6e:60:aa:fd:c9:20:06:b6:0b:9b:
b6:6d:32:a7:1f:ef:4d:e2:2b:07:91:60:48:ef:5f:
ba:a2:0d:d9:86:e9:60:33:25:29:43:85:b5:7b:33:
58:d7:62:40:9d:09:36:32:7d:12:77:84:43:66:52:
b8:91:80:05:5e:18:81:6b:af:c5:b7:8e:78:6a:7f:
76:3f:0d:63:eb:d0:b8:ef:0d:30:86:76:6f:f6:d4:
f3:c1:b4:73:2e:82:9c:94:4f:59:36:d2:58:d5:a1:
14:7e:8d:a1:53:85:90:61:57:e7:bf:67:67:ee:40:
17:15:2e:0b:cf:4e:d0:99:07:29:56:10:8b:34:d5:
42:e1:e9:fe:c4:cc:52:86:a0:da:b8:d6:ac:ab:46:
d9:ff:7a:75:05:9e:c8:06:a9:b2:c2:7b:69:93:c1:
80:9f:28:0b:e5:90:e7:80:7c:cf:6c:4c:c5:8a:7a:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DE:71:73:65:55:1E:E2:CF:8C:4F:60:A6:4C:35:41:61:26:D9:0C
X509v3 Authority Key Identifier:
keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e2:68:82:74:70:be:32:97:c1:d3:05:c7:6c:de:a9:b3:ea:
bb:3b:ba:7a:02:4f:88:c3:27:e5:80:e4:ab:9c:d0:98:96:0e:
7b:3d:23:d6:79:73:33:e0:70:55:be:37:56:f1:cf:cc:6c:32:
b5:15:19:23:7b:7b:1b:66:04:4c:fd:a4:67:26:ce:4a:70:b5:
91:9d:0c:d8:1a:a3:ec:1b:4d:1d:33:bc:1f:26:8b:11:f2:28:
ea:a1:59:1c:ad:77:4c:11:c7:7c:b0:46:62:ec:03:54:32:ec:
17:82:43:b9:90:c3:37:90:60:a1:95:c2:d5:c1:58:a5:ff:e6:
20:2f:c7:52:5f:00:55:c8:77:6a:6a:fb:e9:cd:73:a9:e3:6c:
ea:b1:38:11:46:ca:c8:f8:91:13:a7:11:c1:22:5f:63:f1:92:
2b:18:5b:22:da:4c:72:34:d7:7a:61:52:d5:87:a3:39:f6:d4:
ee:d0:64:f3:c9:a9:31:dc:85:7b:8b:7b:1b:85:55:a4:4b:58:
03:a9:64:be:b7:7b:ec:57:03:fc:fa:11:73:da:81:84:93:80:
ef:e6:99:c5:42:63:c0:19:cd:b0:db:98:22:57:de:41:12:12:
62:8f:b8:c5:87:ae:c7:1c:83:8d:1c:6a:80:71:35:20:29:b8:
0f:8b:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:59 2025 by rpki-client