Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier: Sak1Om1FotjygkdBvRgLNcpx8fFQoyYsBDqQ+04+sjE=
Subject key identifier: B9:1E:43:43:66:F0:98:A1:29:AF:6D:25:88:E5:75:1E:10:87:68:27
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial: 0198D4739F1BAA843833CE4CF81EF4C02A42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number: 0AF8
Signing time: Sat 23 Aug 2025 01:03:23 +0000
Manifest this update: Sat 23 Aug 2025 01:03:23 +0000
Manifest next update: Sun 24 Aug 2025 01:03:23 +0000
Files and hashes: 1: KSBa2zQ1tYI2KvNAmb1TOOD_qJQ.roa (hash: dc4hBbdFYwTuGA/xpkix9p/ifR2D23egaqG5vWC5QGI=)
2: lQvman0TcS9UAXTyd3ZXIdLOBqI.roa (hash: P14NthyAGiyfoJgBsi6HRoRfnfWtEu8GOwgj8n8I3ag=)
3: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: unJhyJneBvSfMvNV9Id2f3CnTY4BJDl60V1trCRyQds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:9f:1b:aa:84:38:33:ce:4c:f8:1e:f4:c0:2a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Validity
Not Before: Aug 23 01:03:23 2025 GMT
Not After : Aug 24 01:03:23 2025 GMT
Subject: CN=b91e434366f098a129af6d2588e5751e10876827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:a4:73:13:d0:ac:11:d4:5c:cf:50:8f:bd:
1d:5e:32:8b:73:d9:6f:72:db:53:85:f1:75:a5:1f:
ea:89:0c:26:07:45:9d:86:28:25:4f:63:f0:58:91:
d8:9d:96:3a:a4:51:b2:2e:af:61:40:7a:83:4d:2a:
91:f6:d7:6f:7f:f0:19:82:c2:38:a0:89:c2:c3:2f:
8c:a5:e5:80:80:de:c6:46:be:9c:fe:d3:e9:97:c5:
a3:75:8e:df:c7:5c:b7:f1:92:d3:63:20:4b:50:71:
c6:57:b6:26:fb:84:f1:1e:9d:5d:20:98:92:52:5b:
38:95:f2:5b:3d:4d:43:03:c4:01:93:d5:8c:ac:aa:
a3:98:91:38:4b:b7:ca:1d:7e:d5:42:15:ae:10:9d:
5a:7e:a2:b8:ef:ff:90:84:0f:c5:80:a5:f5:2e:db:
fa:0e:7e:75:08:af:d5:fe:04:7b:ac:1b:ff:59:4b:
ed:94:8c:60:87:3c:d0:2d:95:75:b6:c4:c3:59:12:
60:a8:98:37:80:f8:fa:e4:83:46:6f:bc:de:7d:23:
e5:dd:d6:e1:ef:62:cf:18:95:9a:bb:0a:44:d2:af:
6b:f6:62:e2:93:c8:5f:24:83:d8:81:f2:b5:01:6f:
33:a4:b3:18:e8:05:29:e4:9b:76:0b:ca:f2:6e:25:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1E:43:43:66:F0:98:A1:29:AF:6D:25:88:E5:75:1E:10:87:68:27
X509v3 Authority Key Identifier:
keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0b:30:6c:c2:81:0e:86:c4:14:4d:f0:ed:4e:78:8a:0a:f6:
be:fb:18:c6:79:9a:e4:67:bf:4c:55:0e:0d:b2:9f:71:25:1c:
39:2a:c4:8b:bc:94:3b:19:b4:f1:8a:8a:b4:6c:08:dc:38:bf:
51:33:9f:9f:f8:31:0f:c9:b7:d5:c7:a4:a7:2b:85:e4:a4:69:
00:64:5c:61:63:0e:af:80:e0:3d:80:b3:8d:39:e5:13:4b:fb:
ed:d4:f7:ba:f1:c6:2c:5a:12:cb:0f:27:eb:8b:fc:31:62:d1:
bf:6b:79:c1:d9:79:c1:4e:90:20:04:58:b2:0e:a8:ce:18:2c:
73:05:48:c7:0b:05:32:87:48:92:70:c6:83:57:fc:58:a8:14:
b1:ff:35:67:a1:6b:f5:d9:7d:6f:47:27:6c:f5:06:d3:e6:3e:
79:86:e7:42:55:b7:07:0a:cc:b2:6f:32:94:60:4a:f4:2a:5e:
1b:63:e5:2e:c6:24:2f:e4:98:78:da:a4:94:58:5d:2e:ec:0d:
31:3e:4d:28:f2:11:67:50:d4:b2:be:c8:a6:12:ca:f3:9c:6b:
82:66:08:4a:60:62:55:a9:d3:02:a2:20:51:3a:46:97:cb:76:
4b:4b:44:d1:f0:9c:2b:b9:ef:59:dc:a2:b2:c9:a0:fa:e0:90:
16:92:51:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:55 2025 by rpki-client