Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier: 1SONC9/9t5fIx6dKFI4NwLLwri+ZhGUxxA95V20IznM=
Subject key identifier: CB:1E:A5:E4:18:C5:F3:76:B9:C3:80:9B:B8:41:0C:AA:F9:01:33:28
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial: 0198D5BBC099E13A67A1937393D6ED67C9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number: 0965
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=)
2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: 72zg0Zp0nSQZ5qmeYcmixnMdcA7k0SREzo4U1Oh6+ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c0:99:e1:3a:67:a1:93:73:93:d6:ed:67:c9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=cb1ea5e418c5f376b9c3809bb8410caaf9013328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:c2:2e:3b:52:42:a6:28:6f:1b:20:85:af:
c6:34:36:d9:e5:b5:6d:5f:96:17:23:52:d3:a6:10:
49:47:61:20:63:b7:e3:16:9a:df:3f:ca:53:c3:ee:
ee:e3:a4:74:f3:c8:a0:ea:eb:f9:5c:94:3f:e1:17:
16:16:d3:72:72:be:c0:d0:11:6b:85:4b:c6:81:21:
45:1b:1a:72:31:76:2b:28:42:42:ef:e5:1e:3f:78:
07:f4:8c:92:15:7e:10:25:eb:05:e6:c3:bb:01:ad:
70:11:54:75:0c:e4:c7:c1:cc:42:42:33:de:3a:60:
be:ce:34:7b:15:9a:cb:e2:8c:58:c3:00:e8:4e:b0:
dd:f1:67:5b:e5:f3:9c:3f:41:b3:f3:23:4f:a8:6d:
c1:31:6d:7c:43:df:d1:39:35:17:63:df:aa:f8:31:
a9:12:5c:2e:78:46:fe:a0:81:f7:9f:cd:15:0c:ef:
13:25:ee:20:75:e3:f2:5e:b5:51:88:80:b3:7e:78:
53:de:b8:fe:e1:1c:c6:62:fb:c6:f9:d0:3b:78:22:
4e:fc:e9:e6:ad:d0:6c:a6:6d:b1:f0:02:1a:cb:9a:
87:92:9a:91:55:49:8e:aa:63:66:3d:1c:07:84:8f:
77:50:23:a2:0c:e7:1f:b0:fe:bf:c8:17:ee:ce:8d:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1E:A5:E4:18:C5:F3:76:B9:C3:80:9B:B8:41:0C:AA:F9:01:33:28
X509v3 Authority Key Identifier:
keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:03:d4:02:e7:1c:e3:d5:28:8c:06:be:71:34:55:5a:c8:
03:34:30:4d:1e:b2:90:b5:40:86:53:e0:97:ab:f1:41:92:1e:
f1:2d:f2:77:c7:6c:e9:50:fd:92:2d:c2:76:b7:ef:fa:c6:db:
b5:c6:e5:fb:49:e6:48:63:4c:2d:87:4b:c5:6a:14:fa:65:8e:
e4:d3:b3:9f:ce:9f:bd:70:84:06:85:79:98:02:05:75:8e:7e:
63:ce:40:fa:62:3d:a0:e4:11:f1:93:80:39:09:9d:f6:cd:2a:
bb:9f:14:d7:ce:7a:52:a1:ab:05:8b:65:d9:f8:b4:77:84:1c:
c4:32:7e:11:eb:52:f7:cf:bb:e4:90:cb:b3:68:4b:6e:04:f8:
46:17:6a:03:0d:7d:f6:d7:93:89:f4:b5:ae:35:ad:8a:ad:1a:
f5:7d:4d:52:14:b7:37:d3:6f:d8:7c:fb:61:10:6d:88:f9:bd:
07:6f:58:11:90:07:99:9a:0a:a8:d7:9c:bd:83:6f:a0:5a:38:
9b:c7:d4:9e:57:20:f1:38:3e:b9:93:d9:af:6e:76:db:94:4c:
4c:02:e9:2c:21:ff:b9:7c:06:c6:53:56:6e:14:17:0a:46:b5:
c3:9c:73:24:ff:b6:11:88:11:a5:11:d8:4a:63:8f:e1:b6:2d:
70:ce:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:06 2025 by rpki-client