Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: Z3yJGhJA8kVzF7aRq3lzBOSSZiJwQiMFfKACLHwU418=
Subject key identifier: 4C:E6:63:9A:3D:CF:2E:BF:34:08:53:20:0B:5F:0F:CA:F7:54:F1:B7
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 0198D698298D57FC42D6FAE3FB7C7C80AF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 147B
Signing time: Sat 23 Aug 2025 11:02:32 +0000
Manifest this update: Sat 23 Aug 2025 11:02:32 +0000
Manifest next update: Sun 24 Aug 2025 11:02:32 +0000
Files and hashes: 1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=)
2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: BxKWzeSL7m2oobaPaMGR7zVfus8hipUhfPysRLHZA1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:29:8d:57:fc:42:d6:fa:e3:fb:7c:7c:80:af:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Aug 23 11:02:32 2025 GMT
Not After : Aug 24 11:02:32 2025 GMT
Subject: CN=4ce6639a3dcf2ebf340853200b5f0fcaf754f1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6a:f9:ad:06:8e:cf:eb:0e:19:fb:d2:fd:28:
d1:40:3f:fb:56:14:d3:3d:2c:28:73:fe:68:08:af:
0e:bd:7d:86:41:d7:29:8e:a9:b1:b4:48:ba:b1:ea:
5e:1f:21:eb:7b:24:e1:b5:eb:3b:8b:70:a3:ca:83:
89:b4:69:5e:03:59:23:7e:bf:fe:01:f7:e3:f1:db:
ff:ef:7f:aa:58:2a:5b:4c:38:b4:c4:a2:c0:91:8a:
d5:92:05:42:1c:46:68:92:dd:25:71:30:0c:f8:72:
d7:73:13:ed:34:70:f6:86:3d:8a:df:f0:2b:fb:94:
75:14:e6:5f:f7:0f:f1:93:f5:47:7a:8d:14:62:b4:
1b:62:90:f5:c3:db:79:24:53:f3:4b:7c:cb:28:21:
a2:fb:86:7b:46:c8:48:f3:f4:66:d3:2c:84:2e:88:
55:07:b2:8d:43:66:bb:ae:be:e0:10:3b:84:9c:6f:
fc:12:37:f2:7c:b6:63:e7:e8:a9:20:e6:f2:ac:38:
4e:20:74:76:a0:9c:62:47:fa:b0:87:e9:ec:0f:1d:
cd:27:f6:a9:17:47:50:83:b3:2d:61:a1:5d:7d:26:
0a:93:91:7c:79:3d:71:a7:ee:0a:09:f1:21:0e:12:
c6:ef:33:8c:48:94:f5:3a:b9:01:87:12:27:6c:23:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E6:63:9A:3D:CF:2E:BF:34:08:53:20:0B:5F:0F:CA:F7:54:F1:B7
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cc:46:d1:4f:c9:d7:11:45:4d:70:c9:07:87:48:5a:f4:3b:
e2:c9:6c:85:9d:66:ef:35:9d:48:b4:61:85:fa:fe:73:71:0a:
c6:d9:6e:75:aa:57:8e:48:ff:71:02:16:56:9f:ab:10:01:8e:
6f:e2:47:e2:96:35:dc:50:7d:59:0a:75:1e:9a:a6:56:34:07:
9f:77:ba:2e:99:b0:8f:6d:54:97:78:c3:60:9b:95:b2:82:90:
e1:5a:ae:dc:c7:2a:15:cd:a7:06:58:71:12:ba:1c:cc:f7:2c:
41:d1:06:0a:a6:7f:6e:cb:a8:52:bc:0d:a0:e8:b1:e3:41:90:
59:25:f3:bd:00:3c:b3:14:50:26:f9:19:e2:b3:8d:69:54:d4:
a9:3e:6d:1d:ec:69:96:f0:55:1b:70:60:7f:b1:30:e9:bd:37:
ba:cb:cd:89:7c:21:48:73:a3:55:a3:69:9e:6b:5a:40:91:2e:
b1:57:5f:b9:7a:7f:c8:88:57:ec:ad:3d:10:60:8a:ef:10:8c:
7b:2a:5e:d7:1d:74:0d:13:c6:99:c2:90:d1:63:5c:59:31:09:
77:e8:3c:53:c1:58:b2:1d:7b:8f:af:aa:49:4a:ee:e0:b5:89:
17:05:b6:2c:37:23:17:e0:26:e9:4c:45:52:83:29:2a:fb:20:
01:08:91:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:47:14 2025 by rpki-client