Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
File: weOkSujPAkPx3_4mhOPdWo_IXXk.mft (raw, json)
Hash identifier: kwL/YS1DannatqGP+Qk5srrD2r+cCj6Che+UFxcyWkw=
Subject key identifier: CB:1B:8A:0D:E4:CB:1E:4C:D6:63:BA:67:7A:85:69:78:77:DE:B6:1E
Authority key identifier: C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
Certificate issuer: /CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Certificate serial: 0198D73B8276B6DCB2312FDC935FC83DCA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
Manifest number: 14C2
Signing time: Sat 23 Aug 2025 14:00:58 +0000
Manifest this update: Sat 23 Aug 2025 14:00:58 +0000
Manifest next update: Sun 24 Aug 2025 14:00:58 +0000
Files and hashes: 1: 8SCwalNOCtaX1GmWAS6VFuVHGa4.roa (hash: MCBdmn43q9v0IHNEMsKZZxueWeuhZImr9/xukqPZ3tY=)
2: weOkSujPAkPx3_4mhOPdWo_IXXk.crl (hash: Xo0VJ6vFaIrFtlQVQ3dtTSgLwmSVa96RiPZAtGjYDfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:82:76:b6:dc:b2:31:2f:dc:93:5f:c8:3d:ca:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e3a44ae8cf0243f1dffe2684e3dd5a8fc85d79
Validity
Not Before: Aug 23 14:00:58 2025 GMT
Not After : Aug 24 14:00:58 2025 GMT
Subject: CN=cb1b8a0de4cb1e4cd663ba677a85697877deb61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:39:af:f1:9f:ff:a2:86:3e:70:74:31:90:43:
7d:ac:b0:49:08:83:1e:33:f1:b0:28:9a:78:f4:66:
f0:cf:26:71:36:f0:2a:1a:85:3c:0a:2d:7e:49:7c:
16:fb:77:a7:cf:ba:6f:81:b0:c8:aa:8d:5f:d4:a8:
3e:1e:ec:cc:25:6a:45:da:79:03:61:83:1b:9c:a1:
dd:71:c5:01:39:8b:c3:81:0e:8f:67:77:82:ad:99:
cb:5a:c2:70:ed:84:c3:27:c9:e9:c5:aa:60:2d:2f:
39:70:ea:21:e2:c9:8c:29:81:ef:96:0f:cc:c3:9c:
f1:02:87:57:7e:72:9e:0e:c5:3f:ca:c5:1f:6a:d5:
09:33:cc:75:4a:c2:18:ee:28:f2:16:70:17:cd:02:
fa:e7:6e:c7:df:f5:63:8c:01:36:ca:9e:d6:d1:b1:
86:4f:cb:a6:03:b4:96:a7:c9:3e:5f:1b:b4:a7:8a:
1a:0f:08:7a:a9:db:74:45:31:8b:1a:88:64:46:4e:
20:fb:e2:03:9e:4c:14:61:e0:5a:48:4a:62:5d:0c:
71:17:69:e6:6e:33:dc:6f:44:5c:2a:f2:60:8f:1f:
d6:39:71:cc:4b:54:f8:95:52:bd:85:d2:98:7a:2c:
d2:e6:82:de:da:a2:43:05:65:57:8b:4b:a6:c5:cd:
2d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:8A:0D:E4:CB:1E:4C:D6:63:BA:67:7A:85:69:78:77:DE:B6:1E
X509v3 Authority Key Identifier:
keyid:C1:E3:A4:4A:E8:CF:02:43:F1:DF:FE:26:84:E3:DD:5A:8F:C8:5D:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weOkSujPAkPx3_4mhOPdWo_IXXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bf4a44-bb8a-4651-a0aa-38d292d0f7ec/1/weOkSujPAkPx3_4mhOPdWo_IXXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:da:1b:e3:01:c0:93:9a:e3:e0:84:3c:ab:6f:44:bb:1d:2e:
05:15:ac:4d:f9:66:94:83:7d:a6:5f:d0:e0:59:00:0a:af:ab:
5a:63:4b:12:2f:8a:d5:44:09:79:e1:20:e8:57:80:51:33:14:
27:18:85:40:98:ce:b2:db:72:54:e2:ae:9f:8b:c5:0e:1e:90:
89:d3:6d:13:4b:70:75:20:70:e4:47:b7:fb:45:df:23:62:80:
31:47:50:0c:20:d0:28:47:df:d7:ad:77:21:c8:85:0b:ad:aa:
9e:79:ab:8b:d8:69:aa:2f:26:8a:d6:fb:8f:06:d3:c4:c8:8a:
ad:71:f2:74:de:38:eb:4f:ff:a9:1e:a9:95:84:76:66:5c:b9:
d8:25:ad:04:d2:7e:7a:c1:f3:c0:2e:3d:a8:57:23:cf:51:c5:
aa:ae:26:ef:ed:1b:76:ae:87:3c:ee:69:1a:68:ee:40:51:c9:
69:af:43:c3:6b:91:5d:a4:e3:89:38:c5:7b:6f:a1:67:c3:40:
d5:e1:ce:59:86:9e:21:41:72:c4:c7:1c:78:66:ab:bd:90:a9:
90:cb:41:68:fe:91:71:42:4b:44:0c:8f:3f:f1:1a:0b:b9:2b:
ca:6e:41:88:e3:f6:41:4b:52:33:f8:96:ec:a3:55:a1:a1:f4:
a8:0f:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:28:43 2025 by rpki-client