Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File: WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier: D6PrYFG231BSjmVjScOiIlyPt+GBudS+iZ1M7PM1+Y0=
Subject key identifier: 54:A1:CF:EA:6B:B1:03:8C:09:BD:08:11:97:E9:CF:ED:7C:A5:C7:A8
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 0198D5BC657DE0EE8491D0371CFB28CAA446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 07:02:30 +0000
Manifest this update: Sat 23 Aug 2025 07:02:30 +0000
Manifest next update: Sun 24 Aug 2025 07:02:30 +0000
Files and hashes: 1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: DpkBMW4Ze0lk73AaVGgCMDzQkydMzmPidspCJihE4IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:65:7d:e0:ee:84:91:d0:37:1c:fb:28:ca:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Aug 23 07:02:30 2025 GMT
Not After : Aug 24 07:02:30 2025 GMT
Subject: CN=54a1cfea6bb1038c09bd081197e9cfed7ca5c7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:1c:72:ef:60:50:9b:b9:b8:5c:5b:79:43:
1d:50:4f:85:43:91:a3:10:f0:04:c3:5a:ac:76:23:
0a:d8:15:06:b0:ae:7b:89:2a:6d:41:da:2a:37:76:
5c:c1:47:63:37:45:c9:8c:dc:64:c2:31:ef:30:47:
ac:0f:b3:ae:da:da:be:ff:d0:ab:54:67:78:56:4e:
29:1b:81:47:ac:28:c8:ed:8e:c8:56:8f:96:c4:e3:
1a:3e:12:fb:57:d8:e4:71:cd:5b:b5:ed:a5:6c:e6:
a9:10:45:87:cc:9b:3f:c4:29:1b:03:bd:54:f4:6f:
98:57:1e:45:20:67:13:5d:e6:97:0e:af:0e:e3:b3:
2b:9f:cf:bd:15:26:66:b6:b3:49:5a:64:e4:6f:c0:
61:22:61:44:df:39:d2:3b:b9:40:53:96:12:01:10:
a5:52:4d:95:94:2b:08:ab:65:02:4f:44:65:e2:d6:
bd:37:9f:16:19:8b:8c:25:2c:c9:83:d8:34:5d:79:
4d:97:54:45:05:ba:0d:12:fe:b8:d7:74:1f:db:27:
9d:0d:4f:89:7c:86:dc:d9:cb:72:1b:b4:f5:95:3b:
22:80:cc:ff:b0:2c:b3:80:5c:96:05:7c:62:45:92:
93:fa:7a:40:5d:f7:d2:83:75:44:6a:ce:04:d8:10:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A1:CF:EA:6B:B1:03:8C:09:BD:08:11:97:E9:CF:ED:7C:A5:C7:A8
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:8c:b0:ee:8b:d5:08:6c:19:66:b3:a8:cd:8a:f9:2a:66:19:
a4:00:ea:7a:34:b3:70:45:f3:e1:9b:d1:05:47:97:66:8d:14:
3e:e7:6d:50:01:3d:20:90:4f:2e:53:9b:3f:9f:7b:05:79:fa:
95:1b:89:08:6d:62:7d:6e:c8:3f:d5:92:a8:66:06:c9:80:62:
55:97:e5:9b:45:fb:8a:48:d2:b5:b9:a4:33:9c:5f:3b:77:b5:
f2:5b:1f:0d:94:ad:cf:a5:f3:03:6b:00:b1:b0:89:7b:48:74:
1f:8f:84:5d:52:a7:c7:74:db:2c:19:d6:59:1c:6e:a9:eb:e7:
7e:db:04:41:b6:ad:4b:96:c8:2b:dd:a1:ff:63:1b:1b:93:90:
43:3a:25:6f:ea:64:67:e4:28:fb:b3:42:2a:61:ec:de:b0:76:
ab:c9:f2:15:37:05:a7:2d:e5:c6:3c:29:9b:b7:1e:bb:ed:36:
87:ca:a1:a7:13:7b:ec:1a:cd:08:a7:14:62:db:8a:56:5b:52:
ce:89:8a:85:e9:70:89:bc:c9:32:1c:82:60:52:a4:db:08:2c:
5b:d3:f1:e3:c1:95:1c:35:d0:c4:d3:54:d5:b2:f2:23:91:f1:
9f:88:97:42:19:9f:a5:f6:10:34:f7:a0:52:64:e3:19:e2:98:
23:9b:8f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:02 2025 by rpki-client