
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
File: wT40HB4U01p0ls54KOMFX4Y5Nc8.mft (raw, json)
Hash identifier: Q81YFPwFiXqzJ0nH6Jyzv3xTfOAjb3kZ8XbwbxjB6SI=
Subject key identifier: C5:8B:52:43:24:DA:56:3F:39:EF:1D:3F:CF:60:48:79:CD:CA:D8:1A
Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
Certificate issuer: /CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Certificate serial: 0198D73B2C22660AE30701D19FE656D65173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 14:00:35 +0000
Manifest this update: Sat 23 Aug 2025 14:00:35 +0000
Manifest next update: Sun 24 Aug 2025 14:00:35 +0000
Files and hashes: 1: f1wBKCsXK0uC2nsel0GIe5b0KZk.roa (hash: G9RLd4HtWguPLDAL1JjtSWQmaqJ7AZGAeDkABfQH220=)
2: wT40HB4U01p0ls54KOMFX4Y5Nc8.crl (hash: lIYrJKOlqPs+5DrHfwuYRtMuAVFbkAwC0g48mql0KAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:2c:22:66:0a:e3:07:01:d1:9f:e6:56:d6:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Validity
Not Before: Aug 23 14:00:35 2025 GMT
Not After : Aug 24 14:00:35 2025 GMT
Subject: CN=c58b524324da563f39ef1d3fcf604879cdcad81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:07:80:47:33:03:1a:c7:d6:4e:7f:29:8d:
1d:65:01:b3:00:9a:10:98:1c:aa:0b:d6:db:66:cf:
09:dc:80:b7:06:42:8e:32:9c:bf:13:07:0f:21:ad:
78:b0:42:ee:ec:18:86:35:48:9c:ed:22:14:cc:7a:
38:08:ef:7c:fc:32:6e:09:26:9d:96:3e:84:79:99:
f0:bf:6e:a3:d9:31:ee:5c:6d:0f:25:eb:f8:d6:ab:
8a:58:53:73:b4:00:bc:ef:f4:fe:33:ff:e0:27:c2:
f6:63:09:4f:46:64:21:34:0b:99:9c:4c:dc:d1:cc:
db:a5:4c:63:e0:96:c5:af:ee:b2:e2:56:96:04:0e:
99:3c:d8:f2:34:db:c9:3b:3a:16:ab:01:39:7a:51:
60:36:b8:82:e4:a9:25:e1:2a:5e:6d:6d:96:5b:6f:
14:fb:88:65:69:1f:72:b9:68:b3:31:0e:d9:c7:29:
a6:36:a4:5a:4d:3f:1c:25:b4:75:87:65:09:d5:4a:
83:d4:a3:f5:73:9e:a4:df:ba:88:56:bf:3e:4f:d1:
37:3a:ab:ad:6c:8e:83:9e:29:d8:45:27:0f:96:2f:
e3:9a:04:25:e5:70:82:48:65:c4:63:ca:c0:e6:69:
b3:5d:97:ec:40:f6:d0:48:75:cd:2b:e3:5c:d7:72:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8B:52:43:24:DA:56:3F:39:EF:1D:3F:CF:60:48:79:CD:CA:D8:1A
X509v3 Authority Key Identifier:
keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bd:f6:dd:b6:ca:b1:bf:38:2c:4a:8f:76:07:59:92:dc:c2:
6e:11:d5:bf:e5:dc:d9:73:84:38:80:00:5c:7f:6e:29:b8:63:
1f:2e:84:d1:6e:9a:5a:bc:25:52:b6:75:8a:95:ce:3b:bb:1c:
d8:c5:52:5c:8a:99:06:6c:22:84:4e:d4:35:60:a6:e8:11:82:
6b:85:a7:9f:47:2e:33:17:1b:c6:b7:ee:9a:f3:6d:81:08:cd:
b3:62:57:68:39:31:53:47:d4:eb:91:51:a5:76:91:92:7d:c0:
a8:b3:97:77:4b:93:12:8f:99:7b:df:04:dd:34:89:3e:e0:50:
07:f6:2b:c8:68:6d:ac:c5:f4:dc:8b:bb:98:8a:36:18:83:e5:
0b:b9:72:b2:ab:e5:b4:a5:3b:0a:28:4d:28:6e:3c:e4:cd:e3:
c4:b4:da:d4:0f:e8:31:19:77:dc:07:04:5f:3d:fd:52:d1:c1:
2e:47:8e:c0:1a:30:0e:5e:98:d9:80:f9:7e:ea:f1:dd:3c:32:
da:d1:8b:a2:b1:52:d0:17:1b:6c:ce:3b:ed:72:f4:2b:bd:b8:
37:37:01:3b:81:7b:33:ba:d8:d8:fa:66:fe:28:dc:cd:5e:68:
4f:a3:0b:0c:c1:4c:d5:b1:65:de:af:a8:a7:98:f8:da:6d:06:
98:e3:69:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:55 2025 by rpki-client