Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier: Ty1P1RWGsevk49Vxwndw1NdLoHnbK/1fS6k1hQnA6Ko=
Subject key identifier: 02:8D:1C:1D:C9:80:F6:CD:5B:B6:0B:3E:75:AB:3C:86:33:D7:9A:07
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial: 0198D65FD33DC4EFE8EFFED8FD78032E2833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number: 0330
Signing time: Sat 23 Aug 2025 10:01:00 +0000
Manifest this update: Sat 23 Aug 2025 10:01:00 +0000
Manifest next update: Sun 24 Aug 2025 10:01:00 +0000
Files and hashes: 1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: 4RrwRV0RxPqvOuwD5MTzBfF8L06tDJUIe61tZAO73XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d3:3d:c4:ef:e8:ef:fe:d8:fd:78:03:2e:28:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Validity
Not Before: Aug 23 10:01:00 2025 GMT
Not After : Aug 24 10:01:00 2025 GMT
Subject: CN=028d1c1dc980f6cd5bb60b3e75ab3c8633d79a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:fd:c2:5e:4e:72:0c:27:8f:f2:7e:86:82:
42:92:3a:67:7d:2e:5f:8a:3a:6c:0e:ba:ac:1c:eb:
84:fb:5b:56:44:73:3e:c3:a0:57:da:02:90:e6:0e:
25:5a:55:ca:c1:06:44:82:d6:dc:d7:fd:36:7a:55:
dd:91:0d:37:c6:cc:68:c9:c2:c8:6c:b5:5e:d3:d8:
57:19:ec:22:1a:ca:c9:91:fd:93:cc:ef:94:fe:41:
03:cc:77:d5:3e:74:0b:26:72:ea:84:45:e5:ab:c1:
f5:06:00:5f:24:02:16:d4:00:1c:fc:4f:d2:1f:df:
a9:cf:97:6d:a7:f5:e2:7b:14:32:6f:80:b8:60:25:
79:96:5a:d3:7a:65:e4:f6:36:ea:a5:15:14:c3:1f:
a3:b2:e6:02:1b:40:e7:74:ec:ab:58:29:d1:95:36:
65:c8:a9:36:cf:5a:9a:d0:74:fb:6a:db:56:8b:27:
ac:c4:ce:4a:44:e1:6f:a9:eb:57:34:7d:30:22:70:
8f:70:e7:9c:d6:0c:4c:a5:83:25:d8:0e:be:56:3f:
ed:3b:e0:e6:b0:a4:ea:4f:9d:2d:65:fb:ad:7b:5d:
88:aa:03:95:7a:06:6f:78:03:dd:0d:f1:a7:8d:52:
79:ef:28:f1:52:81:af:62:3d:12:aa:bf:93:76:d7:
ab:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:1C:1D:C9:80:F6:CD:5B:B6:0B:3E:75:AB:3C:86:33:D7:9A:07
X509v3 Authority Key Identifier:
keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:63:1e:8e:7d:85:d0:a8:48:3f:ce:d8:97:d6:8a:29:dd:a6:
0d:10:84:56:98:b9:0d:a0:f3:46:54:f4:0c:aa:e3:54:1a:a5:
80:04:b9:a3:20:c9:3e:06:84:3a:3b:af:5d:36:b9:e1:4c:c5:
fb:40:fe:32:fc:48:01:9f:99:45:14:4c:be:5c:7e:18:8b:97:
e2:59:d1:43:6a:8f:68:7a:b8:c6:8d:51:f4:e1:21:9a:30:76:
b6:be:92:8b:d4:ba:fd:77:c3:72:c1:0b:07:a8:7d:63:2e:f6:
7f:71:83:96:00:9c:2b:a7:8c:2d:ab:06:e9:1e:00:43:74:15:
19:54:bd:90:85:9a:9b:01:08:ec:39:12:c9:bc:c9:23:b0:58:
4b:71:b3:80:30:ae:08:c7:e7:67:07:24:3a:ef:22:2e:1e:33:
97:36:cd:ab:58:70:39:e8:ba:3f:96:ca:9e:8e:4c:c7:7d:28:
23:9e:9b:69:56:d6:43:a4:9c:db:25:3b:bf:da:f1:99:7c:52:
41:a3:d2:a6:52:8a:9f:43:4e:64:71:e3:c5:2a:bf:0e:07:ae:
3c:af:43:e8:6d:43:0e:14:0a:7f:6b:59:80:40:05:6e:7e:f0:
9d:dd:6a:ce:fc:d6:b9:51:ae:77:69:6d:ec:da:72:dd:6a:67:
12:4e:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:14 2025 by rpki-client