
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File: wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier: hkVKi4fmhaP1r6nSe0bRxhYCkkbdORcfyTVo/D13WTs=
Subject key identifier: 49:22:E9:CF:47:D4:D9:A8:07:DD:C4:7E:76:E5:77:11:AD:18:E2:85
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer: /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial: 0198D5BC137CD144FDC4D19978595EFDFDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: XEsqeKOf3nUKp6N27Tk-w17zShA.roa (hash: k+ZjcSbWsbCQX+BZ6yWaMdK9CN57/SVKpUlCaIxWc4g=)
2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: Lo3HZ6wg6JPw8nPvLep1t3dc9vGIgAbOzOrpzszOJVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:13:7c:d1:44:fd:c4:d1:99:78:59:5e:fd:fd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=4922e9cf47d4d9a807ddc47e76e57711ad18e285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:de:4a:03:ce:8c:18:55:5e:20:65:18:47:
c8:00:79:06:af:13:56:eb:c4:24:91:e4:32:8e:c1:
3c:09:af:f2:f5:d8:10:ec:c3:33:1d:de:e7:45:be:
82:cf:6d:33:82:73:7e:25:d6:a3:fc:63:1f:d7:e5:
7a:fb:19:56:82:08:c8:d0:21:82:da:61:25:16:24:
8e:08:df:c7:79:8f:53:d2:9e:88:6c:1a:ae:e3:5d:
c1:11:31:31:5d:c1:38:df:f9:e2:0d:6a:d9:16:1d:
80:7f:ca:38:ea:9f:47:b3:73:b4:5c:4a:ad:b6:e6:
49:97:7c:ba:19:67:a6:c4:83:16:7a:39:ea:85:3a:
aa:b5:88:cf:07:88:56:4a:5e:14:d2:5f:42:00:2c:
d1:e9:07:28:22:37:5c:77:0a:1f:42:32:c5:4b:90:
4f:85:0e:61:e8:0e:74:3c:18:c5:e4:06:e1:cd:15:
ee:e7:2d:f4:e2:81:cc:08:d2:67:13:e8:8c:ce:3f:
1d:0a:94:94:85:fe:87:42:56:a5:42:6b:7d:f2:c5:
1a:0d:f1:a1:0a:1f:0b:1d:09:65:2e:f6:fd:4b:d7:
ac:f7:b1:b5:41:a6:72:6e:92:f7:e0:5f:42:f1:ea:
3b:0a:b1:c1:5c:b5:f3:6d:4b:4e:55:4f:01:42:b5:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:E9:CF:47:D4:D9:A8:07:DD:C4:7E:76:E5:77:11:AD:18:E2:85
X509v3 Authority Key Identifier:
keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f4:11:9b:60:79:b1:4e:71:3e:f8:cd:6a:01:ed:89:94:af:
ee:e8:1d:60:3f:9e:7e:df:07:a9:14:f2:2f:b4:e0:37:0e:e1:
8f:ad:28:61:24:01:6f:5b:c9:7b:3e:cf:e3:cc:00:72:77:2e:
2f:4f:6e:af:d7:88:05:49:f1:fd:27:b6:35:b3:6a:62:17:a2:
61:f6:f8:a1:c0:a6:04:ec:84:f0:13:fc:61:ef:74:1d:9e:59:
e6:4e:3f:41:15:e8:89:d4:ea:93:d0:c6:ca:e7:2c:64:02:49:
45:35:5e:26:c7:15:65:25:2b:96:d1:d1:e9:ff:47:52:bd:00:
6a:ac:17:a8:2a:64:8b:46:f9:15:77:2c:3d:63:22:f5:97:ae:
15:59:4f:a2:52:7a:3c:fc:0a:6d:8a:d4:28:79:3a:59:29:5d:
01:9a:a6:bc:1f:ca:1d:1f:6c:21:e7:89:88:a8:3a:69:08:37:
cb:c3:a3:b8:eb:87:fe:22:ef:92:1c:cb:d4:d5:24:2c:9e:a3:
74:c0:ad:84:4c:8f:96:39:b6:66:10:d2:92:9e:51:92:6f:3d:
62:4e:09:31:e8:03:71:64:9f:41:8d:bb:9b:9e:e4:50:52:11:
cf:aa:98:33:81:24:cc:b3:6a:9e:3c:fd:14:02:b6:1a:f6:39:
21:02:af:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:16 2025 by rpki-client