Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: 7BqhYIKonznKLbRVEAEW8FcSV77ZbrWkYop984ebR6c=
Subject key identifier: 39:8A:20:05:0B:D2:4F:47:AE:A3:91:2D:9A:A5:9E:C2:75:D4:74:5F
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 0199FC218A3A54E9480EBECF1E791CCEE8D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0759
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: sSTQJ8BZzTcFl2/buSuCWcfvOMBgjmFDOxrg2BZSddA=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8a:3a:54:e9:48:0e:be:cf:1e:79:1c:ce:e8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=398a20050bd24f47aea3912d9aa59ec275d4745f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:6b:61:30:18:3d:ad:c4:ba:ef:24:59:be:
63:22:28:fe:66:6f:88:0d:f0:6a:21:15:a2:41:a0:
c5:d1:63:04:4d:cb:cb:82:9e:76:ad:13:72:ce:4d:
cc:f1:22:a8:04:2a:dc:ec:a4:51:67:ec:3b:17:8b:
f9:29:1c:b6:f3:63:2b:31:cd:f4:01:97:b3:42:9d:
33:1a:b2:18:2d:1b:91:07:19:51:1d:31:dc:df:35:
dc:15:af:0f:06:2a:21:8d:25:c2:c1:d2:fa:dd:6f:
54:31:0d:68:30:dd:41:7b:ee:77:2c:c6:44:c3:eb:
8a:cf:04:1d:44:75:a4:e5:ff:7f:ae:d8:02:d3:d2:
83:24:9a:9a:69:64:d7:d7:d1:8e:2f:69:45:fa:af:
fc:94:a2:69:6d:7a:a2:44:73:83:0f:fe:14:0c:14:
ff:fd:60:f3:24:d0:8b:f9:ce:70:bb:2a:73:e3:a2:
b2:f8:d7:fa:3f:76:03:cc:f4:48:ae:a9:c8:2f:dc:
dd:6d:94:05:54:42:ae:f3:0b:3a:16:29:71:3d:7c:
84:a5:22:94:3d:ea:0a:87:06:cf:78:b7:dd:0a:22:
0a:ec:a9:2d:ee:e3:f6:27:ff:1b:d9:24:b1:60:f2:
23:29:75:7f:56:50:bc:7a:3d:1e:4e:1b:c8:74:c6:
fe:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8A:20:05:0B:D2:4F:47:AE:A3:91:2D:9A:A5:9E:C2:75:D4:74:5F
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ed:22:4e:49:a8:28:9b:32:52:ff:6d:90:4e:f3:d7:95:7c:
51:7b:e6:95:55:6c:ea:80:b9:cd:ed:a6:b7:26:0c:b2:57:66:
05:0d:da:00:1b:d6:88:a0:59:bd:c2:67:b8:a4:5a:14:a8:c8:
a1:4e:b9:dc:df:46:04:9d:a2:70:bd:a8:f8:d8:36:55:e7:e3:
70:71:80:9d:5a:5e:5d:27:16:99:fb:d3:79:07:1d:02:d7:61:
a5:41:88:10:3b:2a:d7:6c:14:7b:6b:30:56:89:69:cb:c5:cc:
03:e9:04:80:c1:c0:b7:3a:93:97:48:bf:35:dd:23:9f:fb:ac:
15:e4:3a:23:76:82:ba:ad:72:49:2e:05:56:9a:95:4d:67:f4:
8c:c5:e4:1f:e9:a3:ae:30:de:60:22:30:92:71:55:f8:c3:be:
59:52:bc:f4:2d:5e:36:1d:53:7f:a8:11:84:e5:f2:9c:dd:58:
dc:aa:76:3c:22:ba:38:a7:29:6f:ec:57:b8:15:70:f6:92:e8:
fa:1b:46:38:5c:78:6b:a6:8c:b5:46:15:2b:84:4d:d4:c9:c3:
0c:09:60:46:2f:d2:76:e9:fe:53:d0:a7:8c:85:a5:37:48:aa:
a8:f4:f4:aa:33:00:3b:01:ed:bd:c7:64:55:75:6a:98:de:d8:
01:f5:e5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:57 2025 by rpki-client