Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier: FTQ+0ODfbmLKCx68cr5kczoFiTFALdmcwJ4WbFwSVfE=
Subject key identifier: 80:DD:43:4F:EA:E9:33:52:17:2D:B0:0C:68:59:87:6C:30:A6:13:FA
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 0198D65FD6FE48241DAC29F891CAFA0FFB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number: 0638
Signing time: Sat 23 Aug 2025 10:01:01 +0000
Manifest this update: Sat 23 Aug 2025 10:01:01 +0000
Manifest next update: Sun 24 Aug 2025 10:01:01 +0000
Files and hashes: 1: ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa (hash: FPKU4sBZtKV03dopSyyPb4q2mr5BiiBfqidcOPbFyqg=)
2: o4qbcCQCij_4lrM4fuG-GZzDpjs.roa (hash: OQOBy/7xXgD89cYeKeQCwe26Q3oYa0ii7bEbJEXvS2M=)
3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: GE3DPANjYD9jjTWn5sCAs4vlaTzrhgzmTdalMaI+Pvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d6:fe:48:24:1d:ac:29:f8:91:ca:fa:0f:fb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Aug 23 10:01:01 2025 GMT
Not After : Aug 24 10:01:01 2025 GMT
Subject: CN=80dd434feae93352172db00c6859876c30a613fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:e5:94:c6:80:68:9f:f6:67:bf:f0:de:cc:
c7:c5:5b:c0:0a:60:ad:e4:e0:e0:a3:9c:a5:a1:e1:
24:f9:19:fe:ce:2b:cf:f5:cb:9c:a4:c5:1b:0f:b9:
95:f2:18:22:54:8f:80:4e:2a:6d:ba:41:14:f2:cf:
34:29:14:04:43:2c:22:23:06:11:a2:a1:02:08:f8:
27:d6:43:c9:90:68:a2:3f:9b:9c:8e:e6:2b:44:f8:
fa:94:b4:8d:76:e7:fb:6c:30:2c:d8:2f:27:30:58:
eb:a3:2f:87:6c:bb:ea:db:73:da:fb:14:52:26:5e:
99:cc:54:48:25:53:ad:da:82:76:5c:e8:b4:15:d6:
bf:d4:db:4e:83:6c:f8:8a:68:6c:99:90:f6:9c:34:
04:16:94:25:1c:01:cd:33:78:56:98:1d:87:2a:11:
15:6c:5a:18:de:f8:3c:5e:4c:a4:84:bb:3d:a7:ea:
83:d6:73:1f:02:ad:5c:61:68:52:49:11:55:fb:38:
a4:4d:3b:8d:61:65:0c:10:56:5a:b0:e1:73:3b:c0:
bc:f9:61:a1:99:36:df:6b:bf:b7:8a:5c:6a:17:39:
0b:09:9c:e5:88:a5:28:e7:c2:92:f8:e2:82:5a:70:
ab:5a:29:72:80:ba:f3:82:98:db:9f:a4:4f:80:b2:
ed:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DD:43:4F:EA:E9:33:52:17:2D:B0:0C:68:59:87:6C:30:A6:13:FA
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5e:bf:a4:92:25:e3:3e:a9:b0:68:21:96:04:e0:81:91:76:
fa:df:4a:3e:8f:17:bd:b8:d6:a8:ba:14:a0:be:a0:f0:b5:e6:
2e:c3:4a:bc:8a:20:12:71:f3:21:50:23:87:27:27:97:26:a2:
91:cb:a3:2d:79:c1:a7:3c:99:8f:ea:37:db:02:af:43:c3:61:
65:51:b1:6c:b1:36:8f:f9:d2:1e:9b:b0:83:06:c0:27:9c:63:
51:36:63:60:6f:b8:84:ad:d3:b6:b4:a7:3e:91:d3:d9:5a:d3:
40:7e:ba:09:74:b7:48:1d:6c:02:49:de:5a:ca:99:aa:e4:52:
70:61:1c:f7:07:b5:56:41:b8:30:26:6a:9b:46:52:3e:97:d6:
f0:d8:71:c9:1f:eb:2a:3d:9d:9a:66:d8:b9:62:3e:37:ce:6d:
67:d8:5e:d8:9e:a2:f4:99:8d:3d:30:1a:6b:40:7d:72:7b:f6:
1e:df:ae:2d:14:c9:d8:74:fd:30:f4:8e:c2:f3:8b:91:42:0d:
e7:ac:e1:8f:de:0d:88:c7:90:c1:90:21:91:74:ca:4c:39:f2:
cc:3f:fa:74:cd:8a:68:62:13:64:3d:e8:ec:34:55:58:15:af:
c0:0c:8a:10:4b:43:e0:f7:b1:6c:34:cd:3b:66:e6:b8:e6:f9:
4b:8d:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:18 2025 by rpki-client