Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
File: wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json)
Hash identifier: SM+ITe14F6ld0QsJpU14RQFYjvxNoZjiJ2W0oEsESv8=
Subject key identifier: CD:CB:8F:38:9D:4A:13:89:A6:A8:81:E9:B2:30:00:C7:93:90:B8:D2
Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
Certificate issuer: /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Certificate serial: 0198D6985758D64DF7E37D08FCB0CE624BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 11:02:44 +0000
Manifest this update: Sat 23 Aug 2025 11:02:44 +0000
Manifest next update: Sun 24 Aug 2025 11:02:44 +0000
Files and hashes: 1: BMHVHu-JbszVmlaPK0QGdQjobqk.roa (hash: G29ynB8gmG1T9KHI25JYWbt3xJ8CodHiSO5tv95eYEk=)
2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: qhO53HOcIJRoP7ZxJYJbUsdyRNwrCl9IdflifIgZ1uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:57:58:d6:4d:f7:e3:7d:08:fc:b0:ce:62:4b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Validity
Not Before: Aug 23 11:02:44 2025 GMT
Not After : Aug 24 11:02:44 2025 GMT
Subject: CN=cdcb8f389d4a1389a6a881e9b23000c79390b8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:0f:05:cc:bd:0e:27:e0:3f:d2:21:61:c1:
4f:00:53:9a:8d:03:9b:6d:00:4c:d3:d7:20:12:1e:
df:9e:14:be:3d:7a:0d:8a:95:41:5d:d5:11:c5:d8:
06:ff:e2:f6:27:36:60:51:28:39:f6:71:de:c0:91:
a7:c9:07:14:87:a1:d7:8e:3b:07:a3:67:66:cc:7e:
f8:05:da:d3:a8:91:51:c6:b0:4c:80:dd:3c:e9:97:
e0:42:95:2d:64:a5:38:fe:15:10:c4:45:b5:97:72:
bc:21:91:fa:71:bd:5d:93:fe:1d:6c:95:c9:3e:3a:
e2:10:96:ef:27:e6:e3:c7:d4:d0:ed:7d:7b:c6:bb:
53:4a:2d:54:74:33:2f:e7:c0:5a:b6:15:84:76:61:
92:8b:21:9e:29:64:af:9c:b1:f1:97:5a:27:8c:a7:
6b:21:17:18:5e:a4:93:84:7f:23:47:c8:51:b5:bc:
02:bb:04:bb:9a:37:ef:b0:bb:5d:e9:aa:e1:f9:4c:
4b:5c:91:04:5b:95:ac:15:33:7c:da:a6:55:32:01:
83:55:bb:21:44:47:6d:07:43:04:2b:ec:fe:ff:ae:
db:5a:79:a2:6c:14:e1:2a:5e:27:01:87:92:90:14:
7e:cc:eb:eb:58:65:c5:0c:60:d5:a5:44:f8:00:dc:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CB:8F:38:9D:4A:13:89:A6:A8:81:E9:B2:30:00:C7:93:90:B8:D2
X509v3 Authority Key Identifier:
keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:31:05:9f:df:ed:c6:13:53:13:df:5b:d8:26:a4:50:39:35:
5a:42:6d:09:ec:62:99:1f:61:b5:d2:43:94:eb:29:1b:c4:8f:
bc:31:fa:e7:f7:fb:ba:d0:d3:09:c7:16:26:62:bc:68:79:c8:
66:bb:7b:b4:76:8f:3b:45:87:0c:3e:81:f0:f1:63:63:b9:32:
b7:12:94:7c:df:72:96:81:41:58:30:de:b4:6b:05:e5:4a:21:
5f:c7:f0:2f:a7:7c:40:31:ee:38:76:c8:84:73:ba:cb:00:17:
06:3d:d1:97:be:e5:87:6b:84:05:be:b7:87:f8:11:cc:fc:9c:
13:87:03:db:bc:1d:f8:e7:fb:32:54:59:76:4d:be:13:e4:70:
89:0f:3e:a7:6b:20:f4:ce:80:cd:6e:3d:ff:6c:20:e7:b1:fe:
66:95:ba:81:d0:6f:30:96:42:ac:73:09:4f:72:2f:a0:41:55:
1f:37:06:a8:6b:60:f8:03:c7:85:ee:63:cd:84:73:71:c5:16:
55:e8:1b:f5:a3:13:32:3b:5b:c6:af:cb:04:45:3e:11:22:ca:
45:b8:97:15:d3:31:d8:b7:32:68:9b:cd:bb:4a:4d:df:5e:0a:
d3:02:0a:98:61:c5:a8:6e:23:75:56:9a:f5:c7:c6:8d:55:84:
84:f8:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:20 2025 by rpki-client