Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
File: wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json)
Hash identifier: gTSIqNN4P8slPQHL6xdGcH4bq6xgDEV4u9Flge/HIfQ=
Subject key identifier: B1:38:A0:62:FD:45:EA:57:78:C8:A8:86:0A:C1:D4:75:0F:AE:A9:8F
Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52
Certificate issuer: /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
Certificate serial: 0198D51578D711BE1669DDCF187570201BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
Manifest number: 012C
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: 2qyhqFKpARK1F2ET6I7_YKaOPc0.roa (hash: qGM3ZFQucsF8/9E/V05Xc9DkgTgt/0zHmMZ5RCHxskE=)
2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: ACge48In6qD4p79rq9W+w1oyWY565zrwkAL8xhOZjhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:78:d7:11:be:16:69:dd:cf:18:75:70:20:1b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=b138a062fd45ea5778c8a8860ac1d4750faea98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:35:22:55:12:3b:8c:e6:c4:77:22:cd:ef:
45:c7:2c:6e:c7:81:19:00:8f:51:cd:ea:b2:05:bb:
c4:c7:6f:61:2d:58:e2:f2:a1:c0:98:7e:27:c7:73:
1b:96:37:32:f1:66:00:30:3e:8e:2c:df:b9:c4:09:
63:b9:ab:d3:0c:c3:bd:7b:7c:5d:d0:8c:07:0d:3d:
6d:76:a4:93:2b:87:5d:98:27:ae:3d:3a:96:0f:b9:
05:0e:9e:a1:ce:1c:c6:56:56:94:48:33:de:c8:ae:
75:8d:70:89:83:2e:28:f5:3f:36:49:37:1c:b9:f4:
ae:54:75:4e:67:74:0b:3f:f5:e5:78:03:bf:01:10:
c1:f2:1a:bf:fb:23:f4:13:bb:c5:6b:76:9b:99:25:
05:dd:95:06:95:a1:2a:39:9e:d7:51:13:64:65:e2:
27:e9:a2:dd:e2:b8:f4:45:53:e8:52:e7:c0:8f:c8:
4c:02:55:d3:82:6f:d4:8c:c0:ae:26:58:8a:5a:c3:
7a:05:59:ac:96:67:c8:b7:3b:47:4b:67:36:83:ec:
71:65:04:95:00:b9:9b:dc:01:69:86:32:1d:7d:03:
1f:e0:ea:4d:71:f7:35:61:32:d3:ed:a1:24:53:7b:
70:b5:8c:5c:a5:9d:fe:5a:1f:1d:16:81:32:60:b3:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:38:A0:62:FD:45:EA:57:78:C8:A8:86:0A:C1:D4:75:0F:AE:A9:8F
X509v3 Authority Key Identifier:
keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ca:f8:05:ea:d2:97:32:f5:9a:cf:47:8e:17:78:d7:e5:62:
53:50:d4:f0:9c:99:7b:7c:8a:36:d0:4c:a4:8d:91:4e:02:c8:
21:f3:5e:a4:e4:ad:09:56:11:39:82:15:a5:3c:cc:a6:c5:d4:
8c:cc:52:72:96:75:eb:2e:37:9a:cc:23:18:59:79:e7:cb:b2:
be:03:66:7e:7c:04:08:c5:c2:dc:e5:f0:a8:9a:02:2f:08:97:
35:3e:fe:cc:ce:a6:06:94:27:d2:8a:a2:2b:38:26:67:8f:1b:
21:4a:f1:82:3b:80:ee:cb:72:68:64:59:9a:d4:85:1d:16:c2:
de:7d:28:b6:d9:57:09:4c:35:fa:1b:58:ba:da:5c:99:39:ae:
8c:93:2a:f0:47:ec:bb:58:4d:b4:ca:61:02:69:86:32:7d:24:
28:02:99:ab:a4:b1:9d:9b:e8:43:26:af:f0:1f:ce:e1:24:25:
14:ea:d1:8d:ef:b4:4a:f7:f7:40:6e:ba:0d:58:31:92:31:b9:
83:c7:ef:cb:e0:a7:80:94:a6:8e:5d:54:a3:3f:9d:2a:69:bb:
15:65:a8:fb:5b:c3:88:f9:55:5f:2d:69:c6:b0:78:52:bd:45:
2e:20:f5:f5:71:f2:c8:db:b4:c8:78:a6:a2:e6:07:58:32:24:
94:74:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:17 2025 by rpki-client