Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: b+lsVxlRbWMwS55aQIMHFtdFmHERSY4wxMc7MheFiIs=
Subject key identifier: 4E:68:C6:29:D3:3B:EA:68:2E:0E:CF:CE:58:B2:B3:DB:53:10:8A:DA
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 0198D54EB0CDACE705FB5834358A07597184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: XAtmHuhwyefQdFozP/JMUpm2MJqNVO3fh/7xEMG8gXA=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b0:cd:ac:e7:05:fb:58:34:35:8a:07:59:71:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=4e68c629d33bea682e0ecfce58b2b3db53108ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ca:3a:56:1a:a7:90:2e:4b:7a:b9:bb:b7:10:
98:0d:5e:2c:f4:8e:90:4e:6f:b3:ac:c3:db:d9:ed:
e4:2c:46:8d:23:77:1f:93:9e:f2:66:89:a0:4b:88:
34:1a:e6:25:35:50:3b:f4:e2:65:d9:90:09:cf:c5:
db:6e:54:1a:93:44:2a:b9:c6:38:da:4e:ab:be:1a:
2b:49:98:f6:2a:aa:7e:6a:1c:2d:80:29:f7:09:4c:
4a:57:93:9d:4c:09:44:49:c6:ad:61:f3:5c:1d:02:
33:1a:2d:a0:4d:69:f0:a9:83:8f:21:e0:2a:9b:97:
73:75:6f:26:d7:80:ae:51:4b:cf:48:3b:c1:c2:6e:
be:09:44:d8:6b:52:e2:ee:43:15:d6:5f:81:63:7f:
67:3a:cc:77:a8:b5:12:9d:aa:0d:09:44:f3:bf:c3:
29:3d:f5:95:76:55:0f:0f:36:38:ee:42:72:84:0b:
05:62:9c:14:41:a3:e4:61:98:54:50:82:72:60:2a:
41:5c:01:73:c3:a9:ae:fc:dc:a5:44:05:c1:2b:20:
b0:72:30:39:e7:46:de:ff:ba:4d:ab:58:14:79:ba:
be:d1:58:bd:3b:22:aa:d0:c9:35:e6:8a:71:2f:e8:
2f:d2:0b:6a:d2:07:a1:ca:40:16:e3:36:2d:b7:7d:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:68:C6:29:D3:3B:EA:68:2E:0E:CF:CE:58:B2:B3:DB:53:10:8A:DA
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3c:d2:fd:bc:31:0c:be:f1:bb:ca:a1:4b:1f:8d:2b:75:09:
de:8e:27:cd:95:bc:a3:8e:b3:7f:28:0f:a2:a3:52:92:e6:98:
43:1b:48:db:4c:1d:c8:76:75:61:24:7a:1e:fb:af:12:38:07:
d1:fb:40:55:8f:81:80:db:fe:c3:db:24:e0:1c:70:1a:f2:99:
be:d6:97:cd:15:73:45:4c:b7:e2:86:26:48:48:c8:b6:17:31:
8e:b3:1e:13:70:7b:4f:06:fe:b3:be:07:37:23:a3:9a:1a:71:
29:0c:62:c0:c8:67:3e:6d:f1:71:cb:8c:28:19:17:4b:15:bf:
60:c9:a8:1a:bd:14:d6:ae:d0:58:6f:17:ef:ce:ac:87:dd:56:
91:98:f6:df:1c:d4:42:13:36:fe:2a:cf:87:17:9c:f3:28:ce:
b4:bd:13:8a:4d:59:51:e8:6e:12:ae:1f:ee:00:a9:02:74:ab:
bc:aa:e0:bb:bb:be:51:ab:49:b1:27:b7:d1:84:93:9a:b9:8d:
a7:02:83:e3:cf:1e:33:d0:bb:e0:c0:63:e8:be:2f:01:f3:29:
2c:51:b0:8f:fb:78:7a:47:33:91:06:19:7a:6d:dd:ed:ba:07:
cd:31:12:68:e3:65:04:90:bf:0c:63:bd:f0:4f:8e:dc:fe:b3:
4c:d4:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:37 2025 by rpki-client