Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier: 0vr9CGUxWy5mMkHf4qsUkqyGnxpttlmrUJyoowcEAxQ=
Subject key identifier: 28:70:18:FD:7E:07:2A:57:EF:E7:FA:DC:AA:F9:15:75:43:56:3C:A3
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer: /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial: 0198D583B114F7C11B7C1FE341832FD45F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number: 0157
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: uHw/dRe4IhNeN+FgXVT7/gposZMYhWb6Lf+GTKOwbGo=)
2: 42HdpJSIuZQYNL_T503F7T6tVtg.roa (hash: 2oMCOR0uoZknejKNMlu0g0SgSeLr17Imm1o0mXmKjiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b1:14:f7:c1:1b:7c:1f:e3:41:83:2f:d4:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=287018fd7e072a57efe7fadcaaf9157543563ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:c9:7b:c5:14:f4:61:e7:f9:04:7e:39:1f:
eb:a8:a4:16:8e:dc:30:88:b3:2e:fa:b9:cf:13:00:
e1:a2:57:a1:5b:66:0a:92:d6:0d:65:e2:75:7d:5b:
9d:58:5c:5f:31:bd:79:bc:79:13:89:45:ed:5f:4d:
d7:a3:95:f6:9c:e9:34:72:ee:8c:07:d7:06:45:25:
3e:f9:7b:6d:e7:d4:61:7b:da:13:4d:79:31:67:30:
c6:fe:37:c2:ab:f1:f3:41:6a:a8:43:a4:fc:0f:3f:
d4:5d:4b:60:a4:5b:a8:54:d3:3e:14:92:b6:b3:9f:
9f:4e:6c:c3:c6:57:b5:93:e0:9e:f2:ac:7e:01:95:
ac:82:90:69:ba:60:a0:c0:86:58:c9:24:41:1f:3b:
b1:c9:3d:5a:34:b5:8e:09:3f:80:c5:eb:f6:73:48:
71:33:85:16:19:82:f6:24:c7:ab:a7:01:cf:3f:00:
ee:ca:94:82:7c:61:36:b7:dc:82:86:ed:44:74:2c:
e7:b5:9f:db:fe:c1:fb:5e:34:67:35:08:cc:8b:fe:
3d:5a:10:e2:7d:69:44:b9:dc:2a:53:92:34:35:72:
5c:49:59:ec:e6:90:76:dc:10:9e:31:e2:98:27:81:
1b:65:f9:67:0d:10:70:c6:da:45:a4:5d:3b:93:50:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:70:18:FD:7E:07:2A:57:EF:E7:FA:DC:AA:F9:15:75:43:56:3C:A3
X509v3 Authority Key Identifier:
keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fb:e4:ba:73:d7:65:b5:c9:d0:35:cb:fc:23:04:22:10:2e:
a6:6b:56:4f:93:f4:3f:54:20:4a:3b:1c:84:9e:75:6d:1d:46:
b3:7f:b0:15:77:c9:a5:12:7a:65:64:20:62:50:9b:d3:48:0e:
76:2c:bf:d5:5f:3a:3d:20:51:cc:da:c1:52:73:cb:1b:1a:6d:
be:9d:d1:cd:65:ce:0e:a7:d9:0a:3b:de:af:6b:b9:1c:02:29:
e4:2d:a2:dd:93:01:cb:bb:35:0f:37:34:bc:6f:cc:81:50:13:
45:a0:38:53:2d:db:8b:96:2e:d0:1a:d7:04:7f:9a:9f:c3:16:
50:aa:d2:36:d9:9d:66:c7:44:96:69:8c:de:4f:9e:12:a0:0f:
ff:1c:84:ea:dc:46:3c:4d:65:df:67:f6:ab:00:98:cc:ab:55:
26:b3:22:8d:54:5e:e7:6c:d8:31:45:32:9c:32:1c:55:69:5e:
90:89:b2:11:1a:ee:8c:5f:3d:51:9f:47:07:c2:b2:fe:4a:cd:
90:bb:36:30:34:4f:e1:76:f1:45:a7:18:85:97:0e:ae:42:09:
24:c8:16:65:64:1c:df:e7:cf:ce:4b:5c:08:04:42:d8:59:a5:
00:42:82:9b:f8:ab:f0:ce:78:28:0b:c7:54:a8:38:0b:38:20:
5c:54:43:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:07 2025 by rpki-client