Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
File: wXO75fcjeEWsqNMmO41R7zePwSA.mft (raw, json)
Hash identifier: 9xcs8iPFaOmVebEnUvJBMzpFAMIdTmb3jxBnUKw0F3M=
Subject key identifier: 37:DC:DA:54:6C:17:04:10:58:C2:A8:72:54:FD:B2:04:F0:FA:CE:45
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 0198D6602480B38624E8C08C49B4C1CC00B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
Manifest number: 033D
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (hash: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=)
2: wXO75fcjeEWsqNMmO41R7zePwSA.crl (hash: AiTJlesR9j3cQxpiBgYRGGcaAKEW8RlFSvGwwH75/BA=)
3: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (hash: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:24:80:b3:86:24:e8:c0:8c:49:b4:c1:cc:00:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=37dcda546c17041058c2a87254fdb204f0face45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:75:9c:b0:1f:ae:84:e4:51:d6:02:3c:1f:
13:5d:b2:bc:d3:b2:23:9a:0a:9d:0e:d4:03:3e:bf:
dc:20:25:ea:5b:4d:e9:a6:66:bd:b0:e0:d4:f5:f3:
e1:0b:7c:94:da:b7:82:62:ea:ee:f0:1b:d9:2d:16:
8e:d3:dd:74:c0:ff:f7:56:80:4f:a7:6c:b9:c5:5c:
4a:3e:cd:d7:5a:5a:39:27:94:67:1b:0d:a9:e4:78:
32:1d:17:f4:a5:a5:6e:f8:75:d2:d0:16:6e:0e:45:
62:3f:7e:c6:01:4b:62:7a:40:13:eb:b0:3e:05:04:
86:de:5d:eb:6f:73:31:27:34:6c:93:a9:de:95:7c:
d1:1c:1a:b9:77:fa:88:d4:31:47:fe:44:b7:3b:c1:
3b:88:4f:90:91:0a:ca:fa:07:fb:47:04:75:61:ad:
d2:c7:91:ad:e1:cc:a8:10:39:5d:38:08:1b:8e:1f:
39:f9:01:e9:29:ec:d8:1e:e7:7f:0e:e7:d7:2f:4f:
b8:ab:41:8c:75:0a:5e:ca:4d:6d:e5:a1:14:5f:b9:
6c:7e:bf:17:cc:3c:56:e2:1e:42:ac:a4:40:60:25:
a8:12:68:8e:21:a1:e0:04:34:55:8a:e7:92:6e:59:
c5:69:5d:56:d7:64:7c:24:f6:2a:5b:0c:64:05:c9:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DC:DA:54:6C:17:04:10:58:C2:A8:72:54:FD:B2:04:F0:FA:CE:45
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:56:e9:60:9d:e7:af:43:47:83:0f:95:83:21:99:a5:2f:ab:
2a:a4:c5:85:ef:47:62:79:ba:31:31:58:97:33:4d:26:08:b4:
b2:a1:79:d2:dd:66:10:c0:f2:3b:a7:2e:45:0f:99:08:da:02:
e2:34:b4:db:40:48:3f:9d:bd:ef:24:4e:cf:24:b9:11:74:68:
57:31:f1:82:81:4f:29:d6:d7:49:6e:c2:a9:2c:ed:21:9f:60:
53:5a:25:d5:8d:f3:e4:83:a8:f8:d7:75:d0:54:a8:ac:6b:8a:
83:de:4f:a9:a2:7f:91:14:04:7e:7a:6f:06:28:0b:b5:f3:ce:
ce:11:a6:ab:28:6f:75:d7:d2:bb:79:f1:90:0b:ca:d2:3c:fc:
1f:36:a2:fb:ed:cf:b4:f3:4a:75:03:13:67:e5:24:2a:0e:c3:
aa:25:d6:d4:26:cc:13:7d:f2:8f:c8:39:dd:f9:26:99:c9:83:
e1:f4:76:a7:cb:87:9b:f1:27:a2:82:c7:27:f3:2e:27:b7:44:
5c:6b:6c:76:e7:c4:96:80:ad:59:90:77:f8:9e:a7:c5:39:94:
c9:52:5d:f3:64:4c:30:25:c9:fa:a9:e9:11:29:67:c7:ca:6d:
14:22:68:66:f9:61:15:20:3e:5f:3a:d8:24:4e:f9:30:cf:c6:
6d:af:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:00 2025 by rpki-client