Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
File: wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft (raw, json)
Hash identifier: tQox1gfMJjC131YndMZ5JZaJ8DL807FVTVgZz/70Xhw=
Subject key identifier: 19:35:5A:94:6A:4E:12:DF:58:9E:D7:56:C0:57:01:F9:9C:EC:CE:59
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 0198D773C9DCCCE835130D0F2224B8B57727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
Manifest number: 0D21
Signing time: Sat 23 Aug 2025 15:02:26 +0000
Manifest this update: Sat 23 Aug 2025 15:02:26 +0000
Manifest next update: Sun 24 Aug 2025 15:02:26 +0000
Files and hashes: 1: PJ3v6hx1GuVvKbnyJ-k0p1XrVzI.roa (hash: vSG0XnrDzzP8WtxkP9Iqj2yAInaVzagq/kUPYgF33Iw=)
2: cycF2JveybPX6grJ41wnOXvTGTE.roa (hash: aip8c8zGmCpS8zi0B5jF1UO7lc36UgLVySSkHDz+xxU=)
3: wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl (hash: HtsC0Uickid7j/pmdBsbTCd4ci15qHeX+e7sZMZm7ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:c9:dc:cc:e8:35:13:0d:0f:22:24:b8:b5:77:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Aug 23 15:02:26 2025 GMT
Not After : Aug 24 15:02:26 2025 GMT
Subject: CN=19355a946a4e12df589ed756c05701f99cecce59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:93:ad:e8:7f:eb:ea:de:5a:1d:39:04:98:e5:
7d:8e:59:56:02:7e:95:ef:23:16:19:39:b3:af:54:
c5:45:0c:22:23:59:39:33:71:4f:22:35:d9:37:19:
b0:4e:00:f1:55:7d:55:61:ab:53:a1:fa:53:09:ed:
01:60:e3:2a:b8:f8:06:07:c8:7c:7f:44:57:59:1f:
a5:d8:2b:cc:e8:4e:cc:fb:b9:da:f8:4e:62:93:11:
f0:85:e1:6a:f0:e1:79:0d:0d:44:d6:01:66:66:9e:
9e:c4:67:b0:a4:91:7d:a8:e6:25:b4:01:16:b3:e7:
e9:0e:0e:9f:f7:ef:4f:65:f8:a0:07:17:53:9b:99:
5d:74:68:b2:d5:3a:3a:f4:fe:f9:53:80:fa:9e:38:
23:4c:bb:31:96:77:6d:e6:26:fc:16:af:31:6f:92:
17:f8:99:7f:6b:3e:80:8c:32:5e:6c:9b:45:47:80:
0c:b6:4d:17:d6:a1:c4:96:41:d9:c0:4f:99:03:5d:
9a:86:60:44:da:90:4d:c5:4a:3b:da:26:a5:b4:0e:
f5:b7:0b:5e:c4:53:14:32:cf:c5:19:f9:83:51:46:
d3:3b:e7:f6:2e:5a:be:e1:5a:14:7c:7f:37:a4:8e:
fd:a1:fe:ec:da:5c:68:a0:16:cd:dc:39:85:b5:84:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:5A:94:6A:4E:12:DF:58:9E:D7:56:C0:57:01:F9:9C:EC:CE:59
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:dd:e4:66:81:aa:f7:07:8d:e3:5f:fe:06:47:4d:49:16:8f:
96:38:c2:e2:d3:16:20:76:80:f6:86:2d:94:ba:e6:60:f0:c3:
85:0f:7f:c8:88:bf:e0:aa:39:5c:5f:cd:98:3e:8a:7b:e5:5c:
05:48:cd:89:67:61:36:e0:37:3f:da:65:60:ba:42:f4:24:a6:
35:35:78:07:eb:88:b7:df:1e:79:9f:94:e7:05:c0:32:6e:68:
0f:bb:cf:b0:10:6c:a9:ae:28:5a:d0:a4:4d:a2:66:fb:e0:7b:
76:a7:8a:80:b5:06:39:b0:e9:89:82:38:64:ee:e7:cd:8c:74:
6a:6f:e0:c0:76:ff:ce:75:fd:5c:ac:f8:da:b3:c6:e0:6f:b7:
d5:18:e7:fe:55:2b:8d:92:7f:fb:3d:4d:3e:66:ac:57:d2:82:
91:b3:22:49:21:b7:25:85:76:a0:a0:f7:8a:d4:3e:79:2f:2d:
b1:75:13:5f:66:8e:66:ac:fa:05:84:a5:cd:4f:47:e8:e4:4a:
24:fc:a0:38:47:d0:05:6c:e1:47:fc:82:dc:d2:c9:41:f1:80:
28:fc:40:34:10:52:a5:82:f1:35:cf:6b:75:dc:70:a5:fd:37:
85:e2:ad:b8:98:44:1a:08:61:e6:51:50:96:97:f7:ad:01:f2:
ac:b7:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:26:45 2025 by rpki-client