Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier: L1K8jPHpP8wZa/C21RUzowD5sy7fW50ZNqSIIY5r+mM=
Subject key identifier: 7B:63:6D:BA:53:D6:A9:89:86:A2:02:7C:34:36:34:AC:11:4A:44:74
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 0198D5F1A4A2C6E5F95021EF22F542AB67D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number: 0DE9
Signing time: Sat 23 Aug 2025 08:00:39 +0000
Manifest this update: Sat 23 Aug 2025 08:00:39 +0000
Manifest next update: Sun 24 Aug 2025 08:00:39 +0000
Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=)
2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: TI/gZc4Py9tzbcVtO8wWiRst+k5Q4r8PVm5AQfZNzCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a4:a2:c6:e5:f9:50:21:ef:22:f5:42:ab:67:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Aug 23 08:00:39 2025 GMT
Not After : Aug 24 08:00:39 2025 GMT
Subject: CN=7b636dba53d6a98986a2027c343634ac114a4474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:05:3c:f6:7c:5a:ad:a8:d9:e9:c7:9a:2b:a0:
bd:02:cc:df:48:64:0c:5f:7a:25:ab:c2:99:e9:a4:
6a:d7:a5:49:29:1f:be:c9:a8:bb:ce:ac:1e:ca:2b:
ba:61:98:53:ca:b8:b0:53:ee:11:bd:f2:00:da:62:
5f:59:c5:24:d0:14:45:48:4b:f7:e5:35:90:74:16:
0e:00:22:71:d1:81:5c:d1:58:34:ab:20:87:d5:a3:
9d:22:99:41:06:74:45:07:d5:fc:a8:c9:62:d6:f5:
58:c1:17:55:f5:d8:2c:2a:1f:39:81:93:13:84:cc:
31:80:80:c9:e2:6b:20:97:12:4a:47:67:ac:4b:da:
13:e8:20:84:c4:7b:bd:c7:17:25:e8:ae:b9:e1:72:
1d:5d:a1:3d:33:26:27:51:ca:8d:2d:74:ae:d4:1d:
8a:57:4f:5a:b1:fa:24:f8:74:fa:26:af:b5:41:41:
0a:2d:4e:dc:9e:03:d3:0d:ab:05:18:ed:ab:07:19:
47:cb:86:76:d8:6e:fd:18:c6:cb:82:68:24:e4:c1:
a9:f6:d5:a8:0c:72:aa:66:42:34:a6:61:12:f1:14:
69:19:bb:fe:2b:77:bf:17:10:1f:d6:30:d6:c5:35:
66:d5:de:5c:e8:1c:6e:64:04:71:e4:f2:7b:fa:99:
1a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:63:6D:BA:53:D6:A9:89:86:A2:02:7C:34:36:34:AC:11:4A:44:74
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:12:e6:08:4e:5a:91:54:32:44:51:6c:24:4a:ac:04:27:9d:
ec:75:28:94:5a:e2:44:ec:b6:fb:6e:6c:fe:0c:ce:7d:c1:e5:
43:dc:4f:64:63:8b:88:88:da:85:6a:ce:b9:48:06:31:49:ee:
0c:48:98:50:21:e3:17:26:6d:e1:a2:b3:45:2b:ce:ea:c4:8c:
17:6b:5d:24:70:0e:9c:68:08:29:51:1d:a6:92:d2:97:76:85:
71:49:91:56:58:22:e2:b4:4c:5f:9c:a8:ee:ad:d9:e9:47:c4:
be:23:ff:fc:0e:f2:10:78:10:f7:0d:71:7f:7f:36:35:14:04:
d7:4d:75:17:35:ea:ae:6a:92:34:d3:9a:66:64:27:d1:93:84:
5e:1b:85:c8:50:77:bf:ca:f9:13:92:de:c0:02:bb:db:62:05:
12:14:d5:b9:6a:77:1b:c1:78:60:15:a0:37:01:bc:2f:46:6f:
e5:64:b9:c9:52:98:f5:6e:72:43:42:5a:86:61:13:5f:67:07:
37:cd:5e:e6:73:2f:d9:da:b6:40:d5:a0:17:c7:c1:81:ed:ff:
82:7f:97:5a:e6:ab:9e:4f:11:8b:f0:b4:25:3d:84:18:2f:53:
da:f2:18:12:52:36:14:50:70:fb:3b:41:d3:fa:3b:f0:90:6f:
9f:fe:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:26 2025 by rpki-client