Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: 21INSI2YavBjzk2dW18yIS/U55lcj2iAXveetUuDcNs=
Subject key identifier: 88:91:2B:EF:83:50:30:8A:5B:46:0C:83:E3:6F:E4:0F:A6:86:A3:BC
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 0198D7E166CACA452EF4F89BDAF5513E9D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 0431
Signing time: Sat 23 Aug 2025 17:02:09 +0000
Manifest this update: Sat 23 Aug 2025 17:02:09 +0000
Manifest next update: Sun 24 Aug 2025 17:02:09 +0000
Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: mIU+11K3hLHCp/Kbz+D2vqXGjKqg8QtkdB/8QOb5Ogo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:66:ca:ca:45:2e:f4:f8:9b:da:f5:51:3e:9d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Aug 23 17:02:09 2025 GMT
Not After : Aug 24 17:02:09 2025 GMT
Subject: CN=88912bef8350308a5b460c83e36fe40fa686a3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:cf:05:a4:1c:32:ca:87:ff:22:7a:20:bc:
83:48:69:80:47:7e:f5:42:ef:86:de:39:46:c8:0f:
5e:92:e0:a7:d9:6c:52:34:e6:35:6a:e6:54:27:92:
c5:b7:09:2f:c0:28:fc:0b:4f:b6:50:7c:cf:36:2a:
17:f4:3c:df:75:74:df:dc:3c:a8:77:3a:e2:07:40:
f6:85:11:38:62:ac:89:9d:c2:4a:93:8d:74:02:0e:
05:f7:2b:29:57:c9:2e:6a:44:f8:57:5d:f5:06:7e:
e3:9c:2d:d8:13:c8:92:3e:26:dc:df:cb:ab:35:de:
3f:47:fa:d2:71:05:e5:88:98:f1:58:3f:80:0d:a1:
2d:62:52:af:79:05:13:dc:d8:52:54:28:be:c0:45:
26:6f:cb:a1:b9:60:e5:a3:51:93:3d:45:dd:ab:20:
2e:10:d0:1d:c1:ef:bf:11:cb:0d:62:69:96:a9:cd:
c1:59:89:1c:4c:56:3c:8e:5c:47:f5:06:ad:4b:ab:
6e:e0:0b:50:35:9b:3a:08:d6:36:cf:d0:be:2a:9d:
48:87:a7:05:d9:b1:d0:4c:d7:44:d8:d6:f7:cb:d3:
cb:0e:75:ea:40:57:6f:60:95:4c:ab:50:a7:cb:83:
0f:81:52:31:5f:d0:e6:5d:5e:1a:7c:c0:a7:44:a0:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:91:2B:EF:83:50:30:8A:5B:46:0C:83:E3:6F:E4:0F:A6:86:A3:BC
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:72:43:cd:c8:5a:4e:fa:33:b3:ce:e4:5c:f4:f0:85:c2:64:
13:f9:f0:2f:73:49:f3:16:fb:cb:06:e8:00:b2:63:bf:78:e5:
f2:87:1e:3e:98:55:34:b2:64:ae:9e:bd:e9:49:02:58:dd:76:
b9:c3:50:e1:07:cf:ae:2e:9a:6f:9e:77:f9:c5:cf:df:2a:89:
53:c6:01:0c:c7:bd:61:2b:3f:e0:4b:7c:cb:eb:db:ab:45:0f:
6d:2d:fb:01:ec:e5:5f:6f:28:25:7c:50:7b:5c:11:41:ee:bd:
ad:02:de:85:73:d7:b4:44:67:6b:1a:24:2e:86:0c:51:3b:2c:
20:9e:a0:0e:7b:0a:06:4b:6f:bd:eb:e3:72:b6:91:d9:b5:29:
59:cb:8b:45:4f:9b:6c:3b:46:2a:9a:08:90:fb:2b:ec:d9:33:
49:55:37:e3:25:a0:e2:50:b6:e2:d7:02:eb:17:01:19:cb:85:
8c:01:21:5c:99:9a:d7:b5:25:f4:26:37:c6:28:8f:d8:d1:16:
5a:36:0c:78:d2:c8:c3:7d:52:17:6d:13:b3:28:26:2c:8c:3d:
99:b1:55:3f:4a:d1:13:ac:b9:ed:67:de:2a:65:3c:55:82:9e:
2a:e8:5b:30:e7:f4:28:fb:c9:12:93:cd:60:98:4a:21:60:3b:
3c:a5:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:26:16 2025 by rpki-client