Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: tCMeey4pcshI0tNC5zqw/sqLzCh0R3SZLeNfzXWr2i8=
Subject key identifier: 62:17:C1:8C:63:96:79:5D:DB:42:DD:DD:8D:7A:EC:77:99:D1:86:AF
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 0198D5F14D91DEC1DFCF0DE8DB78C7136B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:17 +0000
Manifest this update: Sat 23 Aug 2025 08:00:17 +0000
Manifest next update: Sun 24 Aug 2025 08:00:17 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: iHV0ALfhmVlDUEogCDq6DmG/hPNRwrRNEEkOvKBjWo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4d:91:de:c1:df:cf:0d:e8:db:78:c7:13:6b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Aug 23 08:00:17 2025 GMT
Not After : Aug 24 08:00:17 2025 GMT
Subject: CN=6217c18c6396795ddb42dddd8d7aec7799d186af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:90:40:1b:71:84:f4:34:e9:eb:17:7c:a0:d5:
8f:9d:1b:0c:b6:f7:c9:c5:36:85:ac:f4:0d:da:45:
37:b3:9f:8f:d8:a0:b1:1d:f5:8c:d1:3f:f5:67:86:
fa:29:df:3a:83:c6:45:3c:2c:d4:94:61:91:c3:5d:
fb:d0:77:e6:ce:02:7c:d7:7c:d6:62:55:bc:40:01:
69:9f:50:10:6b:d0:39:97:67:2a:e3:58:35:9d:28:
e8:91:e5:91:a9:84:ca:9a:6a:29:9b:cd:1a:5a:0a:
d1:3e:80:6c:07:5b:86:36:d5:cd:3c:08:d1:f2:ee:
82:66:ac:4b:0a:36:1d:3b:62:ec:6d:1a:ef:77:1b:
a5:d4:ad:37:6a:d6:95:c9:70:90:51:fa:c3:18:22:
b4:dc:8a:cb:8e:5e:05:95:56:a5:ad:f2:86:a1:4a:
c1:da:94:49:a4:17:be:b9:59:9c:0f:e3:cf:cd:45:
0b:2b:4f:29:4c:35:d5:3d:6c:8a:29:50:19:b6:05:
64:d1:6f:0c:28:c2:cd:41:b1:6f:44:12:8f:eb:10:
8f:4a:49:ac:ca:3c:f5:6b:80:f0:f9:a8:dd:db:02:
35:80:bb:12:ee:ab:12:14:e3:b0:42:fb:89:af:16:
93:62:12:11:38:0d:3c:d3:f6:f7:e2:65:23:09:a0:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:17:C1:8C:63:96:79:5D:DB:42:DD:DD:8D:7A:EC:77:99:D1:86:AF
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:80:b6:29:3d:ae:7a:70:d5:09:4d:cb:8c:67:29:89:3a:e0:
03:5a:3b:a5:8a:9b:8d:6d:95:27:c4:08:3a:42:df:94:e2:8f:
cb:3f:69:ac:20:c3:59:2e:aa:53:b5:c8:d3:f5:17:84:96:13:
c7:83:d0:f9:15:4e:0b:5e:d2:71:e9:19:fe:d3:7b:49:aa:00:
0b:e3:07:e4:fa:62:b0:85:0f:9c:9c:98:46:80:91:9e:ef:a6:
e3:8b:24:08:39:2c:99:a3:99:76:ed:d0:5d:51:3e:b5:79:5d:
50:be:22:76:3d:e7:07:b2:ea:37:45:fd:d5:c7:1a:85:99:46:
11:cd:6a:b8:12:c0:4d:44:5b:47:de:d2:21:98:85:01:bc:34:
d9:02:08:5e:d3:2a:64:f5:a2:dd:3e:b4:53:64:d8:28:41:d9:
c5:a7:e9:f7:9d:19:e2:cb:27:4c:a5:f2:61:29:e3:7b:91:32:
a5:8a:c1:ee:e8:51:31:7d:b9:ce:56:15:8c:c4:93:b6:bd:be:
7a:9a:7e:a5:e7:01:dd:40:9a:e2:95:9a:75:be:5a:38:ff:ef:
c2:4b:bd:aa:ae:65:44:39:53:b7:5a:5f:ce:74:1f:b4:13:39:
6e:c6:2b:6b:ce:29:93:3c:f0:9e:fc:03:b2:5c:5b:dd:f6:35:
92:1a:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:14:15 2025 by rpki-client