
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File: wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier: MG4aGfOWAP66W6+wh3IwJP1NEHvGwmr1Sd8Daoaektg=
Subject key identifier: B1:B3:C0:42:E2:3C:83:EE:66:FF:F8:3B:AB:CA:69:F1:14:9D:8A:DE
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial: 0198D7E1A5253A46A504F9B573BC40FE74E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number: 15DF
Signing time: Sat 23 Aug 2025 17:02:25 +0000
Manifest this update: Sat 23 Aug 2025 17:02:25 +0000
Manifest next update: Sun 24 Aug 2025 17:02:25 +0000
Files and hashes: 1: vKd8NlEx5qop4iqu250zXE8t3lE.roa (hash: FN1Ryr/mI8CQAU+QgnXcKT4FTQKee0OFCoQuRyraQ08=)
2: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: onSl+0mX2KkLQ7PcES3fqPGUiEuzK14s3D1xUL4oCTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:a5:25:3a:46:a5:04:f9:b5:73:bc:40:fe:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Validity
Not Before: Aug 23 17:02:25 2025 GMT
Not After : Aug 24 17:02:25 2025 GMT
Subject: CN=b1b3c042e23c83ee66fff83babca69f1149d8ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:c6:db:a7:c7:5f:fe:79:85:3c:bb:03:1c:
c7:55:e7:4e:66:0a:47:a9:86:a1:b9:a2:10:fa:c5:
e6:04:71:d1:90:f0:cd:4d:ac:df:47:12:c1:95:0f:
b5:7c:fd:93:c6:cf:be:a4:3c:9b:a4:8e:47:a9:60:
4c:fc:e7:3d:76:45:51:9b:99:3a:d8:5c:b6:a1:c4:
12:67:96:8b:d9:77:15:5d:65:5c:9a:fe:59:07:8d:
94:92:19:3b:64:71:f8:da:13:8e:4b:e1:d0:eb:a8:
4e:10:fc:02:38:5d:9f:42:fe:ff:83:6b:3e:d8:eb:
13:1e:42:42:19:7a:ba:2e:50:7f:59:a3:22:f3:a3:
bb:f5:99:8c:87:0b:35:97:af:8d:ee:09:f0:13:cb:
08:30:3f:02:3e:37:1f:66:ab:45:05:a1:28:8e:12:
96:92:17:98:4f:48:ed:b3:98:c5:f1:83:5d:40:e1:
5b:a8:0a:a9:12:9e:00:a9:3a:8d:18:8f:fd:15:44:
3e:c3:54:7f:58:57:a3:48:e2:92:28:eb:53:ac:70:
36:eb:0f:8d:24:6a:f0:22:d9:cc:f0:9e:8c:1e:c0:
90:93:e9:5d:b9:bc:5c:5f:7d:5a:6f:4d:dc:f4:ab:
27:4a:54:89:43:f0:3d:b0:7b:b7:86:db:fc:58:8b:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B3:C0:42:E2:3C:83:EE:66:FF:F8:3B:AB:CA:69:F1:14:9D:8A:DE
X509v3 Authority Key Identifier:
keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8b:7b:60:56:21:13:8d:54:68:ae:c9:d5:b4:f5:07:82:5f:
69:7e:bd:f1:c5:b3:08:6b:06:9e:08:cd:aa:2c:14:ea:e2:e2:
c0:1d:b3:95:a4:a1:9c:41:1a:02:71:77:9a:db:e9:32:ed:bf:
8f:2f:d0:3f:4e:0a:51:95:34:ad:54:6f:80:25:4b:60:37:ad:
94:a1:f2:19:b2:0d:16:bf:4d:a1:bc:59:94:0f:fb:28:4c:53:
67:72:ef:f4:73:66:79:61:31:9c:82:ae:dd:39:c8:00:d4:1c:
02:64:01:53:c4:4e:7a:a2:dd:2d:d9:2b:79:aa:c5:6d:74:07:
24:4c:f3:61:65:ba:b5:d9:28:d6:b4:b9:36:a0:49:bf:7d:db:
f3:b8:57:7e:9b:ee:24:da:ec:e6:e6:e0:ef:4a:b3:c8:c9:1d:
91:33:8e:f0:55:df:74:3a:8a:b8:5b:f5:83:50:af:9c:85:11:
6d:d3:64:83:50:7f:a3:0c:7c:b3:aa:00:d5:14:38:80:cf:a9:
5e:37:ba:46:fa:02:99:45:4d:9c:2c:83:c7:79:d3:e5:81:4b:
5d:f9:20:8f:79:5b:1c:95:77:61:39:7c:c8:37:c4:70:b9:a6:
e1:8f:51:cc:db:cc:ab:c2:5c:1f:fd:7d:a1:53:c4:1c:fa:98:
7a:79:07:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:10 2025 by rpki-client