Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: 1aEAgoiL5QObQgB3MiPkB3fUJqnF4uby+piqYquw0jw=
Subject key identifier: D7:AB:57:1F:48:67:D7:DC:CF:72:2F:A6:D6:A7:23:39:CB:4F:E4:62
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 0198D5157685D4E04273C4F21CA1A3F97970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 04D4
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: /tUnbUl6EB9YwTIzVziaL9zGYco+SgqVL5ulF0Y/mAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:76:85:d4:e0:42:73:c4:f2:1c:a1:a3:f9:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=d7ab571f4867d7dccf722fa6d6a72339cb4fe462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:fe:98:04:73:5e:c1:a6:f0:2b:72:24:0e:
8a:34:d5:29:4f:2e:50:eb:50:79:21:59:25:28:0e:
fc:e6:9c:f7:b0:07:92:cf:da:a9:e3:4a:bf:85:b4:
80:cf:60:ef:93:3c:8a:b3:e4:98:d2:6a:80:d1:f2:
cc:f5:18:6f:8f:86:f4:fb:9b:63:4c:ea:f9:69:a2:
a5:89:5a:69:a4:06:e4:5f:cd:99:48:48:86:25:d2:
a8:12:c4:f3:55:2d:a7:87:76:c0:2b:e1:02:05:13:
46:59:37:07:9d:34:78:88:65:66:d5:db:e8:93:56:
6e:df:fe:93:b0:d7:be:89:95:1b:dc:99:c7:ab:f9:
5b:b2:b2:83:d1:2e:2d:31:c6:7e:4a:fa:a4:23:25:
05:a6:df:ea:50:b0:ec:12:a4:39:96:b6:38:fc:f7:
2d:d0:09:f7:5e:2a:db:fd:13:d4:b7:cd:10:1f:92:
23:81:09:0a:bb:33:10:cf:6f:3c:bc:9e:13:e0:0f:
7a:92:c8:80:d5:b2:52:64:2f:50:b1:e2:2f:4f:d7:
56:a9:d0:03:2a:b1:04:1f:64:0d:df:cd:ec:b1:1c:
3b:c1:db:42:75:77:25:67:f2:cf:35:05:c3:c3:25:
02:21:f9:47:5c:d1:95:d9:db:bd:25:93:09:9e:ed:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:57:1F:48:67:D7:DC:CF:72:2F:A6:D6:A7:23:39:CB:4F:E4:62
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:14:e5:85:4a:69:df:07:68:af:c4:5a:66:d8:99:40:63:49:
91:18:46:74:fc:25:07:a6:58:03:7f:79:a3:3a:29:63:62:fe:
e8:47:85:b0:6a:14:e0:94:75:95:5b:8f:f8:ba:8e:ff:ed:d7:
82:c1:a9:98:e9:e3:f5:f8:0c:1d:aa:ca:58:80:35:64:d2:88:
90:4e:a7:02:09:52:86:a8:19:24:8a:d6:16:0c:ce:5f:2e:58:
9d:64:89:f9:31:a0:bf:00:1c:23:37:70:77:4b:93:fc:3c:c9:
e8:73:ab:f4:d1:08:41:3c:86:9b:fd:82:e7:36:49:0d:37:6c:
aa:70:9a:fb:cf:fd:46:89:06:5a:b4:80:e5:ff:41:48:c1:d5:
dc:28:fe:f6:c7:69:1c:f4:9e:9c:31:aa:d1:b2:8c:fd:ad:55:
5e:13:4a:1f:5c:49:af:a3:5b:e1:fd:62:43:af:0d:c4:f4:60:
60:d4:2c:bc:d1:ac:4e:d8:5d:af:70:b3:2e:75:e5:a4:1b:a0:
00:a5:f9:c7:e1:40:9f:5b:fd:51:44:a3:9e:a5:4b:55:d2:7a:
ec:9e:b9:ab:e3:c8:85:d6:4f:ed:4d:a8:ad:e1:7b:7a:44:1d:
98:84:a5:40:17:87:38:fd:56:bd:c6:6a:33:4b:e8:f4:bb:48:
5b:75:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:33 2025 by rpki-client