Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
File: Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft (raw, json)
Hash identifier: +2UBPsmM2aCUwYrnONZbSTlEM4w2iyrFgYGmbAKuvOY=
Subject key identifier: B3:B9:14:41:76:2D:83:45:01:95:A6:F5:02:C3:72:67:A1:E2:E9:42
Authority key identifier: 5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
Certificate issuer: /CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Certificate serial: 0198D472993697A1884D35A3D972022ECF96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
Manifest number: 14B1
Signing time: Sat 23 Aug 2025 01:02:16 +0000
Manifest this update: Sat 23 Aug 2025 01:02:16 +0000
Manifest next update: Sun 24 Aug 2025 01:02:16 +0000
Files and hashes: 1: 9QUsRCAhmLwTzTZMFA3QwgGkN-o.roa (hash: BYkBRt5u6iYa0bSjaJlYJJH3gyP0JFZinNO6dVWDgNQ=)
2: Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl (hash: Y9v3g7OfQXvoekTIOCoasrAW3gfUaC0MmDbJed/XTQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:99:36:97:a1:88:4d:35:a3:d9:72:02:2e:cf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8d389278485edd50d32cf5ca84ce2728c08cc6
Validity
Not Before: Aug 23 01:02:16 2025 GMT
Not After : Aug 24 01:02:16 2025 GMT
Subject: CN=b3b91441762d83450195a6f502c37267a1e2e942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:1e:9a:27:e2:3f:c8:7b:e4:0d:08:50:a3:
4e:25:d7:5d:45:9c:3f:47:02:86:8f:da:e8:f5:aa:
0e:0a:f1:67:41:c8:51:ee:f6:06:6c:8e:a0:c2:75:
bd:e6:e2:bc:b5:ca:19:47:e2:a4:4d:4b:79:98:f2:
2f:56:49:e7:04:80:fb:2d:f8:fe:87:48:24:84:96:
44:5d:25:af:ae:ca:46:e6:78:35:78:34:ae:55:6c:
fe:cb:de:d6:97:96:64:b4:b4:68:f5:3c:ae:15:d0:
d7:db:12:29:be:c3:ef:58:58:0b:1f:77:33:56:b8:
22:d1:41:9f:c1:8a:6f:07:a2:04:5f:57:b6:bd:bc:
33:dc:e4:f8:86:ad:10:f2:0f:1a:35:c8:a3:c2:c0:
83:de:ce:e7:51:7d:02:04:23:ca:3d:f6:25:cc:5f:
ae:7a:53:18:6a:76:b4:6a:1a:6a:21:13:51:79:ae:
08:c0:f1:71:31:9a:fa:72:89:34:52:f9:b1:8f:65:
fc:f0:03:04:88:2b:f2:85:21:25:c3:bf:98:af:22:
7b:83:ba:8c:33:cc:99:01:7b:87:dd:e4:99:30:5a:
71:be:6e:85:37:66:ca:00:09:f1:5c:78:1f:8e:90:
94:10:b2:84:78:b0:2b:59:e2:8e:9c:78:ae:e2:90:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B9:14:41:76:2D:83:45:01:95:A6:F5:02:C3:72:67:A1:E2:E9:42
X509v3 Authority Key Identifier:
keyid:5A:8D:38:92:78:48:5E:DD:50:D3:2C:F5:CA:84:CE:27:28:C0:8C:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo04knhIXt1Q0yz1yoTOJyjAjMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/601d6f-b31a-492e-8ef0-52bccb06af3c/1/Wo04knhIXt1Q0yz1yoTOJyjAjMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c1:16:56:88:0a:6d:15:83:04:e5:26:8d:9a:60:f9:72:bb:
6b:ec:8c:f2:92:2d:4f:48:a4:7c:76:8d:3e:75:de:56:7b:9c:
e0:77:e3:aa:23:9c:96:9a:01:8f:0e:79:19:84:a1:17:01:3c:
48:94:07:8f:a9:9c:9e:18:9b:0c:0b:24:f0:17:80:26:55:14:
0c:df:99:62:82:48:05:cf:54:55:0c:cd:25:5e:c4:68:80:45:
23:5d:79:61:a1:8b:90:4e:29:37:51:00:41:f6:e7:83:09:bc:
ca:f7:89:ed:f3:5b:08:d7:4b:02:ae:bf:26:33:0b:69:70:da:
31:67:1e:e4:63:c0:6d:4c:d8:3a:7f:83:84:66:d4:71:ae:67:
5e:fc:0d:5b:d5:7f:82:52:29:84:ef:11:bf:b3:2c:02:fd:04:
59:79:b1:2e:95:45:ec:70:ab:be:ed:07:d7:a0:cd:95:d4:56:
96:a8:44:0d:a9:25:db:a1:7e:11:d6:df:1f:e5:cb:3b:3f:15:
0e:c3:bc:c0:86:21:c2:21:35:a4:4b:f0:68:5e:d5:76:cb:a4:
88:1c:96:20:8a:ce:7d:77:e7:3a:00:37:22:a7:fa:84:dc:8e:
35:4f:7d:05:7d:e6:72:67:0b:8a:72:93:6c:5c:97:db:e8:3d:
c3:a7:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:11 2025 by rpki-client