Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: BACnYPGDRBXp40ry9ZCCpEnJauMmatGFB9aD03V54GU=
Subject key identifier: D7:B1:42:D0:D5:B7:1E:33:4F:7A:3F:2E:8A:8E:EB:40:08:BF:41:44
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 0198D6CD47579007F4092CB3C3728F478B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0873
Signing time: Sat 23 Aug 2025 12:00:34 +0000
Manifest this update: Sat 23 Aug 2025 12:00:34 +0000
Manifest next update: Sun 24 Aug 2025 12:00:34 +0000
Files and hashes: 1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: +trdzgnOLzHZnZ2Uq62uNDNeQI0otL4eXMwTXqbeqxQ=)
3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:47:57:90:07:f4:09:2c:b3:c3:72:8f:47:8b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Aug 23 12:00:34 2025 GMT
Not After : Aug 24 12:00:34 2025 GMT
Subject: CN=d7b142d0d5b71e334f7a3f2e8a8eeb4008bf4144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:17:bf:54:7a:26:58:01:43:24:99:80:08:81:
db:93:58:ee:c9:b1:66:05:38:85:0e:c0:72:e5:94:
cc:3b:06:e1:2d:51:f5:5e:92:5d:09:07:25:97:a8:
67:be:7b:77:43:c3:cb:8f:d2:5f:fb:6f:6d:d0:d8:
a7:6a:98:9a:e8:20:56:73:d0:1a:72:4a:d0:e3:a7:
5c:61:a1:6a:e8:7c:4b:ea:9b:22:48:e1:e9:c2:64:
11:93:c2:36:f6:c5:33:9c:79:55:62:67:2a:cd:de:
59:e8:a0:6f:e3:b8:7d:eb:7a:b5:4d:0f:83:2e:65:
80:f7:dd:74:81:5b:23:c0:58:4e:1d:22:12:95:ea:
b4:3f:47:03:fd:f9:b2:73:3d:03:fb:ef:91:ab:5a:
1d:80:f6:38:3e:fe:18:81:67:22:a6:01:c8:17:eb:
9e:bb:4d:27:ff:a3:6c:ef:f0:99:e8:90:b1:b7:17:
2b:98:a1:a4:bc:43:91:5c:c0:6b:5e:d2:42:d0:f0:
b1:1f:c4:d5:92:89:92:b9:de:ad:f0:d8:e0:2d:c3:
e1:a6:92:d9:12:7a:32:a3:9a:2a:3c:1f:92:95:8d:
84:7b:b7:cd:a8:12:59:bf:3c:36:9e:a8:42:44:fb:
10:d3:ad:19:dd:a6:a3:f7:01:27:44:16:1d:5a:98:
51:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B1:42:D0:D5:B7:1E:33:4F:7A:3F:2E:8A:8E:EB:40:08:BF:41:44
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0b:b0:3c:34:cf:12:cd:f0:62:bb:85:6d:19:9a:c9:65:39:
7d:c3:f6:08:ec:55:a5:d2:12:74:b5:31:72:af:4e:c1:8b:28:
ad:df:62:a1:39:a5:0b:2a:97:4b:ae:71:92:f8:ca:7e:b6:8c:
63:31:3b:c7:49:29:4c:71:6b:b3:64:26:e9:db:74:6a:c3:ee:
73:03:c3:57:0a:b1:fa:30:26:c3:26:3f:10:ca:3d:67:87:1a:
1d:10:46:13:95:56:64:11:28:a6:20:50:81:3d:aa:3c:6e:2b:
f7:d8:68:bf:96:e8:fa:f1:cb:42:56:1b:83:f7:aa:da:e1:71:
e0:e5:69:32:b1:08:4e:f2:5a:2b:b4:ba:11:97:28:e1:d5:78:
3f:c5:e3:a1:3e:33:a0:2a:d3:42:91:c6:15:e1:78:bd:b9:2d:
49:9e:90:95:20:ae:57:49:88:bf:7f:8c:c9:15:68:57:36:02:
b9:18:2d:a2:97:b2:b4:bd:be:75:da:ef:3f:09:a7:be:17:27:
84:42:d0:56:2e:c6:59:90:c6:80:52:a0:19:6d:d6:58:2d:3a:
46:4c:b7:56:97:70:bd:9a:1f:be:64:c3:a6:b8:4d:19:69:ca:
ca:ac:c4:71:47:c2:ed:ee:5f:a4:10:be:2a:78:4f:c8:36:27:
31:3f:ad:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:36 2025 by rpki-client