Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: 12MbezuPr96DEtSBZvWv1KjmvS+axVI8ASElZpriZFg=
Subject key identifier: 1D:43:44:A1:84:6A:C7:A3:26:84:F5:49:12:56:33:6E:76:A5:02:EC
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 0198D54E481CB80E4ED5DF0CA555B91AF670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: n+KflFxoprOuCiyC7Lo28N1p1ADCj5Y537+yv/FLWUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:48:1c:b8:0e:4e:d5:df:0c:a5:55:b9:1a:f6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=1d4344a1846ac7a32684f5491256336e76a502ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:09:eb:f9:34:d0:ec:74:14:9b:be:07:a0:a1:
4f:47:d8:27:49:20:54:6f:c4:69:21:d6:30:be:46:
c8:f3:4a:cc:b3:da:a8:ac:18:6c:8c:bc:62:c2:77:
b9:5c:46:2c:78:5a:5e:27:52:73:9c:c6:0a:7c:cf:
43:bb:b9:9f:b1:49:2c:df:e5:81:ba:40:f1:50:67:
05:e4:68:b4:45:10:73:b3:85:b5:57:ad:73:52:69:
e9:61:c7:cb:f8:6a:b3:77:4a:f1:5c:62:e4:af:72:
00:7e:cf:0e:0e:9b:be:64:99:5a:32:f1:55:4f:38:
62:b7:9d:0a:6a:29:9e:28:95:4c:84:7b:fb:dd:82:
59:05:02:8b:78:14:37:32:03:c9:13:b8:5a:70:90:
9c:64:01:b5:10:5f:b8:56:98:1d:52:3c:49:75:89:
2a:55:6f:da:9b:d0:0c:82:63:eb:ee:a5:57:1e:99:
7e:2d:35:f8:28:6c:4a:1e:93:ab:33:13:84:04:1a:
82:c1:48:4c:ec:90:00:34:2f:a0:db:a6:a1:4d:8c:
52:79:1a:31:c2:ec:ea:a1:99:a4:e0:40:27:53:bf:
98:23:95:02:ca:cf:b6:62:88:21:53:cf:97:ee:c3:
53:52:95:93:cd:c2:df:71:af:de:83:9a:63:3f:27:
88:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:43:44:A1:84:6A:C7:A3:26:84:F5:49:12:56:33:6E:76:A5:02:EC
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:34:4d:08:f8:4a:d7:45:66:d0:38:f9:6e:fb:3d:e5:82:bb:
e9:4c:a1:11:69:5f:02:92:28:cc:27:16:e8:5a:86:9b:9c:57:
8c:ae:df:d4:0d:23:d7:98:5e:5d:37:b5:00:08:d1:79:08:ef:
e2:2d:3d:ab:34:a4:4c:b9:e0:f0:8a:c6:5e:16:4d:5e:a2:c6:
c7:b7:ce:15:44:7f:c5:c1:9d:1e:78:a3:0d:ab:f1:30:41:c9:
20:19:34:9f:c3:07:b9:98:56:ba:ce:b2:f5:cf:bd:ce:53:5d:
64:30:8f:51:1b:5e:65:17:c2:50:96:18:e6:22:7d:2e:d1:51:
87:eb:67:2e:8b:db:29:3b:f8:48:73:3e:10:b4:ca:51:24:96:
fe:59:c7:4c:a3:62:98:f5:2f:49:1b:08:01:7c:11:5a:1d:29:
8d:9d:d1:d2:ee:83:0f:c3:6e:fc:87:f7:17:aa:d6:c0:48:6e:
42:7d:85:e4:2e:a0:7c:d1:d9:31:4e:30:28:00:08:b7:8e:26:
fe:4f:62:d0:c4:41:45:ba:e4:2d:b0:93:cc:29:11:f6:1f:b2:
27:a7:e9:f5:95:30:d2:ec:86:0b:69:cf:bb:1b:7c:f4:11:4e:
79:70:56:a7:9d:17:6c:e6:89:02:3e:53:ec:05:28:40:85:69:
01:e4:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:43 2025 by rpki-client