Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File: wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier: 4acEk6MSZXxrHjbUYe1+WflAEvRZSH158em0jLZG3dU=
Subject key identifier: 65:28:2C:03:C6:21:E4:40:63:16:0F:85:0E:3F:BD:64:18:E2:80:2D
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer: /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial: 0198D5836850948117F8E35A6382F54ACD42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number: 061A
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: RSjnM6zCvAOEItwpVtC0m6KUGtw.roa (hash: 63Mz4fOoq8b9mEgPpq4X77Rjr3X+uaQbsoHZFlRZzdY=)
2: b800M8UQE_ndSkfHQhV3cPUcjPM.roa (hash: MbkUQn3Ix8UmF2oKyZjDZOrZVxkNdqgLjfIY0GRvAPU=)
3: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: VMpUPwpTkJ3lsoyD8yqou+naSo2VZ9J9wuUBnhCwe7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:68:50:94:81:17:f8:e3:5a:63:82:f5:4a:cd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=65282c03c621e44063160f850e3fbd6418e2802d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:a4:1b:1d:20:e5:84:2b:7c:98:7e:0a:b1:
6e:22:e8:2c:0b:39:cb:ec:c5:3f:2a:67:aa:04:54:
f4:35:17:98:6a:f5:9d:05:05:1f:ec:95:52:a5:0f:
55:77:b9:5b:56:e1:30:6e:27:62:92:99:3e:fa:10:
0a:83:99:74:33:55:ef:47:ea:1b:b2:7c:1b:06:94:
a8:b2:97:11:3b:f1:26:09:2f:1a:2c:bc:1f:dd:3e:
c6:00:ae:06:cd:0a:22:45:04:5c:42:88:8e:e2:24:
fb:7e:85:2c:15:98:4e:74:f8:77:91:98:b3:c9:21:
ba:b1:07:aa:12:2a:b9:48:f0:ae:4f:c1:27:00:8f:
b8:cf:6b:b9:2f:61:7b:23:ec:c3:79:b4:84:5c:9f:
ae:86:e7:87:29:02:6f:6a:ad:54:b7:d6:9d:f6:13:
37:29:75:6b:3a:93:9b:1f:19:17:50:37:0c:df:74:
53:7e:85:fd:9f:9d:19:c6:13:b6:22:00:4c:77:e1:
dd:d7:18:cb:b4:42:73:b1:03:ed:1d:53:fd:cd:c5:
fc:03:a8:40:1a:50:d2:f2:6e:49:44:18:2b:58:48:
96:a8:3a:35:55:c9:cc:96:27:70:ff:b6:34:31:b9:
fd:8a:e5:5c:f6:5a:20:bc:09:c7:e1:e8:09:86:64:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:28:2C:03:C6:21:E4:40:63:16:0F:85:0E:3F:BD:64:18:E2:80:2D
X509v3 Authority Key Identifier:
keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c8:fd:2e:fc:1b:e1:c3:49:8b:3e:dd:50:42:48:af:5d:92:
67:9f:e5:a0:9e:13:59:71:36:fd:8d:8d:e5:91:a5:dc:e9:ce:
de:f2:80:ef:42:5d:b2:fe:e8:10:8e:fe:45:c6:2a:0b:db:7a:
e4:d7:7c:4e:e9:7d:77:3e:fe:2a:2d:b0:59:7f:33:3a:85:ff:
38:e6:3b:b2:b9:11:34:64:7a:a6:78:b7:10:5a:06:96:86:d0:
de:98:20:c6:aa:4b:f1:77:49:7c:0b:3f:40:c5:ee:d4:16:f3:
a0:52:cd:8f:92:41:61:31:a3:d4:ed:18:16:4f:0f:22:35:91:
80:ba:9d:cc:02:69:bf:d9:67:05:e6:4a:43:0f:aa:9e:03:dc:
1d:31:66:56:bc:01:7a:81:c9:17:00:0a:01:49:62:7a:71:49:
6e:d0:80:c5:47:05:be:e4:4c:4c:32:d0:9a:76:b4:01:61:e1:
66:0d:69:87:eb:3b:14:3f:38:2f:a8:3e:1a:f2:66:4d:6f:65:
0a:c3:ec:09:1d:78:c2:63:ee:1a:8d:1f:2f:a0:9b:91:e9:de:
f9:b9:5c:53:c1:4d:76:f5:11:00:19:da:15:b6:4e:1b:07:28:
d2:bb:9c:60:9c:c1:9f:72:eb:e3:dd:8f:62:28:20:70:bb:ae:
0c:dd:71:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:34 2025 by rpki-client