Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json)
Hash identifier: pTuu6XBTf0LeIhgQX7o4j1tzIfaVM75Xh9XrUacXpdg=
Subject key identifier: 00:7E:86:20:25:32:13:19:CD:11:87:56:7A:65:24:65:49:D4:AE:BD
Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Certificate serial: 0198D54DE3EACDBFF383A2C0D6AB52289B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa (hash: a8BYVN01+QzzRYrawK1TfdRTG9b4FCkotHQL9E9gZ7Q=)
2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: efesCNumDp+lOIz+S4+BM495BniMABYDKuV275hQ6+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e3:ea:cd:bf:f3:83:a2:c0:d6:ab:52:28:9b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=007e862025321319cd1187567a65246549d4aebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:35:c5:82:5a:07:0a:36:72:3f:f1:5f:8a:
d5:1c:97:cb:1e:46:ec:4c:73:9e:f8:a0:8c:e8:a1:
87:c1:f2:75:1e:b3:0d:ba:a9:d8:da:ed:74:4c:f2:
ff:6d:ac:d3:7a:38:6d:d3:0e:f5:a0:02:13:0b:0a:
d4:33:59:f9:b5:d5:d9:df:47:34:93:ee:3d:de:ef:
ac:46:13:88:61:16:6c:36:b0:21:57:82:de:42:bf:
c3:8a:9d:8b:e7:e5:ba:3b:3c:16:03:d4:09:7e:e1:
22:84:d7:d6:b4:f3:fb:76:da:f7:17:21:4f:e2:75:
02:4c:b1:10:ac:f7:8e:8a:36:3d:96:0f:3d:e1:54:
c7:4c:ca:77:78:9f:72:0a:4c:62:e2:ec:9f:d7:94:
b8:d4:65:b2:ef:01:84:9f:a4:32:bb:66:7f:64:79:
78:f7:2d:84:07:53:6b:57:52:f4:c4:db:8f:eb:91:
cb:8b:3c:3f:15:a7:02:ca:40:3f:be:f0:7e:e4:e0:
c5:8c:41:9c:5b:e6:85:f1:61:7f:98:ee:31:cc:eb:
58:c9:0a:37:0d:64:6d:ea:4e:6a:53:15:cd:bf:f8:
77:79:00:de:32:a1:48:fc:72:3b:8f:e1:d8:93:e1:
d3:f3:68:9b:c1:97:ba:6a:32:ea:62:7b:03:07:33:
92:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7E:86:20:25:32:13:19:CD:11:87:56:7A:65:24:65:49:D4:AE:BD
X509v3 Authority Key Identifier:
keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b3:b1:93:68:5a:b1:9d:30:77:f1:27:49:d6:d7:7d:6e:c7:
2f:fe:2f:de:5c:a6:a8:f8:80:d1:d9:6d:ed:21:55:86:a1:6c:
14:f4:65:23:b8:f9:50:97:62:2e:2a:43:ee:9f:56:5d:16:ed:
f9:8c:0c:e3:96:e8:bc:65:86:77:71:04:c7:d9:16:6c:39:73:
45:47:ea:0c:05:fa:56:4c:a1:fe:8a:14:25:4d:0a:ad:0a:4b:
ec:5d:4b:bf:24:84:22:df:8a:5f:32:f8:50:f3:d6:fd:31:5c:
8b:8b:6e:44:d2:66:2d:35:70:c8:e9:da:cc:d3:45:98:2c:81:
a2:5a:41:14:90:7a:60:02:e4:9a:49:7a:13:51:de:74:ee:09:
d9:ab:5e:b8:dd:9f:b3:87:cc:c0:3e:e7:46:89:ed:96:fd:b0:
8a:74:bd:c1:78:3a:66:38:3d:b0:a1:73:30:78:df:d2:9b:3e:
e9:43:02:9f:73:23:ed:c3:40:30:7a:7a:7e:ed:f7:26:8a:77:
1b:c5:46:88:e4:a5:9f:93:08:26:40:f5:12:bb:2d:aa:2b:6c:
6e:c1:32:7d:d5:c9:0d:93:a1:4a:c0:72:ff:28:78:d3:d6:c4:
12:cb:eb:01:00:f9:8a:ef:ca:5e:23:9d:97:25:ce:57:47:d0:
ac:dc:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:16:58 2025 by rpki-client