Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: m65jPHO2rZFKvmjEzx2mOCoT3QwPjoyv/qnm/l/ZgHY=
Subject key identifier: 71:09:73:0A:5F:89:93:37:3E:B9:5E:60:4D:88:A9:31:9D:FE:B6:7B
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 0198D705AF55E721CE7C4462357098541148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 133F
Signing time: Sat 23 Aug 2025 13:02:10 +0000
Manifest this update: Sat 23 Aug 2025 13:02:10 +0000
Manifest next update: Sun 24 Aug 2025 13:02:10 +0000
Files and hashes: 1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: HXd2mrmDgnDz9r7k2VGCciUHXixfjDpC0yTEXgxfxhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:af:55:e7:21:ce:7c:44:62:35:70:98:54:11:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Aug 23 13:02:10 2025 GMT
Not After : Aug 24 13:02:10 2025 GMT
Subject: CN=7109730a5f8993373eb95e604d88a9319dfeb67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:f0:f6:85:12:21:7a:30:06:41:86:61:25:
02:95:dd:17:9a:00:db:78:77:2f:56:87:18:43:cc:
5c:6d:91:6c:0c:28:44:94:e1:16:50:49:9b:ae:12:
e2:8e:e4:b3:49:67:14:f2:c6:4b:43:bc:bc:3a:51:
98:c3:dd:c5:90:9b:4e:0a:7b:b0:a2:a5:c8:ea:3b:
f6:c7:c9:80:93:6a:c5:aa:ba:05:f6:ac:dc:34:44:
50:cb:35:49:8e:b0:ee:ab:48:6b:44:6e:d7:ee:89:
52:c8:0d:ec:ac:0f:14:7c:f8:53:52:3f:b2:a8:8b:
34:ea:18:2d:f1:55:97:9d:30:0d:8a:9e:40:57:dc:
64:43:db:0c:73:dd:85:5a:1b:09:30:d7:f8:2d:a9:
ff:ae:8c:71:52:6c:c0:e8:65:c9:ee:fc:a1:7c:75:
62:82:ef:59:f8:ff:d4:60:08:d6:d3:2d:d9:a8:b8:
72:42:cf:4f:59:a2:4a:93:de:e2:86:1a:68:75:fb:
a8:51:29:8b:fe:39:37:8f:36:51:a7:44:12:d5:5a:
99:5f:c5:63:26:1b:05:76:91:c5:f8:21:a9:02:80:
4e:49:55:ed:27:34:31:90:34:f2:4b:80:7c:bd:82:
b3:4c:80:c0:dd:b6:b2:25:42:f6:f0:de:da:33:b3:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:09:73:0A:5F:89:93:37:3E:B9:5E:60:4D:88:A9:31:9D:FE:B6:7B
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ea:5d:76:dc:db:72:9a:a9:af:9e:ab:ab:77:59:49:35:b1:
67:f2:52:4f:7f:cf:c0:3d:86:c7:c6:2d:b5:e5:26:2f:30:06:
23:8f:6a:2f:56:89:b9:6a:46:e9:85:ab:12:34:62:ca:88:fb:
51:cd:f3:e5:93:08:6d:82:8f:51:6c:43:fc:19:60:3a:37:08:
18:5a:7e:6c:d5:92:7b:ba:62:3e:71:62:63:7a:95:f9:51:2d:
50:bd:5a:71:8c:7e:fd:b1:4d:c8:d5:b0:8a:53:e0:37:8a:57:
ab:64:7f:38:9d:7b:e9:e3:e0:1d:0c:5a:dd:34:0b:69:7d:18:
5d:90:3b:1b:f4:f2:37:dc:cd:6b:9d:2f:4c:b8:97:e4:1d:ec:
4c:f3:8f:88:63:7e:19:61:ba:06:48:e3:92:ed:54:3b:b0:95:
f0:8a:4c:5e:64:c1:c7:6b:7b:91:8e:f5:2d:cb:da:be:2c:8d:
22:37:46:f0:4a:83:a2:b3:a3:83:f6:9e:f7:18:f8:c9:0a:11:
03:7b:77:28:2d:fe:18:8e:88:86:c8:d1:39:78:63:74:92:53:
10:0a:4c:3a:8f:02:a9:a9:60:02:7f:d9:1c:05:44:8d:54:65:
f3:96:2a:fa:fd:b7:46:7f:d7:24:7d:0c:3f:cf:87:a0:9e:dc:
f9:55:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:34 2025 by rpki-client