Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: vwqOGDSimVbYNittq3Ilot6mic/tNC72clYiPE4tr6c=
Subject key identifier: 22:7C:AE:1D:0C:48:63:D3:2D:03:B5:BC:0D:CD:DE:BD:7C:26:C4:76
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 0198D47290D86CA389E1CE24EC5AE9C96EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 1043
Signing time: Sat 23 Aug 2025 01:02:14 +0000
Manifest this update: Sat 23 Aug 2025 01:02:14 +0000
Manifest next update: Sun 24 Aug 2025 01:02:14 +0000
Files and hashes: 1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: 0aeRQsCy2urbGFUTL5qJgLpV2T9CHIwoeQ2F1JutI0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:90:d8:6c:a3:89:e1:ce:24:ec:5a:e9:c9:6e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Aug 23 01:02:14 2025 GMT
Not After : Aug 24 01:02:14 2025 GMT
Subject: CN=227cae1d0c4863d32d03b5bc0dcddebd7c26c476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:11:01:d5:d5:85:a0:57:a2:c3:bf:5e:0e:
12:27:18:ba:21:30:41:75:bd:7e:f5:eb:f4:86:39:
85:bc:7e:75:66:e8:ca:65:ff:7b:fc:02:2f:be:db:
5a:aa:6c:86:9b:59:7f:05:16:82:39:89:72:2f:8d:
de:9b:44:23:6b:83:71:5a:34:42:0d:9d:43:b3:db:
af:bb:76:8c:79:24:72:6c:8a:59:55:34:37:81:23:
bc:d2:f9:8e:bc:54:c7:36:7e:80:2f:e9:cb:d2:40:
43:b0:c6:c0:1b:c6:ef:49:a7:34:00:6a:c9:fa:a4:
3d:0d:0a:8b:e9:92:74:38:3f:72:d4:ae:61:b3:4a:
7b:16:45:d4:73:69:78:33:cd:1d:ee:4d:0c:0a:74:
b8:72:01:a1:c1:8a:34:21:49:31:87:f7:72:f6:f1:
e6:90:b1:e9:30:8e:46:07:d6:9b:5f:b7:f9:a8:a2:
de:bf:61:6a:63:c2:fd:93:fd:dc:ed:de:0a:3c:8b:
ba:f8:61:8c:6a:89:0b:9b:3d:46:c2:f8:7c:88:b5:
4c:52:4d:29:d5:42:00:f8:ed:32:42:25:c3:fc:2b:
c6:bf:75:4d:7d:d7:94:02:04:13:6b:99:89:2a:59:
13:ea:9b:bd:7b:67:63:0c:df:e4:25:7d:6a:56:cc:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7C:AE:1D:0C:48:63:D3:2D:03:B5:BC:0D:CD:DE:BD:7C:26:C4:76
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:01:1b:f1:40:a4:77:bd:2c:42:39:22:c2:02:04:33:8e:56:
35:5d:e3:25:d5:34:b9:80:bb:24:b3:86:b1:1c:56:0d:22:19:
c7:65:7a:d8:3e:bb:97:5b:e2:22:8d:c7:42:43:73:bb:99:c6:
e0:ee:d5:e2:1f:a1:dc:17:3d:8d:a1:b1:f6:17:16:46:81:c9:
54:53:c2:95:67:b6:4b:fe:e2:47:94:15:aa:45:bd:36:33:af:
d3:0f:6b:fd:d9:bc:a8:0e:98:8d:16:99:34:1a:f0:8d:59:0f:
68:a0:2b:68:47:9c:ad:ce:93:ad:53:f9:82:fe:cf:0a:18:5d:
9d:89:db:80:ca:d1:b1:1c:b7:73:eb:7c:98:ee:f7:40:8b:f0:
5a:bb:63:a9:1c:95:03:ab:c6:f5:2a:fc:12:33:79:34:98:1c:
3e:34:43:1b:ec:e2:41:c8:a4:1c:2a:cf:45:65:9e:bf:c2:d9:
53:a6:14:d6:6c:d0:86:53:b5:0a:11:2e:18:db:a5:f5:3c:4d:
fc:b0:13:19:58:c7:6c:3b:25:5b:f3:59:69:a9:9b:57:d2:32:
80:22:eb:5d:31:0f:99:ae:c9:61:7c:7d:a2:52:2a:d3:0f:ba:
5b:b1:31:73:82:af:22:ba:2e:7b:db:a1:cd:ac:7e:35:55:e8:
92:27:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:13 2025 by rpki-client