Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
File: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft (raw, json)
Hash identifier: RAkPRo4QRYd2eiL4HKBZL1r8qhGZh6HqNgXS1PhVGGM=
Subject key identifier: D5:17:E6:E8:54:F3:50:47:28:88:76:21:5D:58:87:FD:56:99:51:0C
Authority key identifier: C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
Certificate issuer: /CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Certificate serial: 0198D81676ED934B2C19C0F0AFDC716FB80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
Manifest number: 0594
Signing time: Sat 23 Aug 2025 18:00:07 +0000
Manifest this update: Sat 23 Aug 2025 18:00:07 +0000
Manifest next update: Sun 24 Aug 2025 18:00:07 +0000
Files and hashes: 1: g5yuydF4Poe4QOJQ8dgMQtQLFlA.roa (hash: ztDU3PoyCa7wU7AjEFCTcvzcTrmXKsTMTZ/tLyZjIE8=)
2: nPjV6lYXInJfXl86tbhvs9WXUa4.roa (hash: asKBhySwit3PBxbedsUA8HTRnekoYKrc5tk7Wn5QFGc=)
3: wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl (hash: pZ6Nxkh90jVs+a44leogpTb2t1nL7dTTYgyvXQ1dHqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:16:76:ed:93:4b:2c:19:c0:f0:af:dc:71:6f:b8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c224b69ed4a23b7b3e0674a3f994601d73b7baff
Validity
Not Before: Aug 23 18:00:07 2025 GMT
Not After : Aug 24 18:00:07 2025 GMT
Subject: CN=d517e6e854f35047288876215d5887fd5699510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:43:2c:33:af:ed:36:54:73:a1:9a:d5:60:
45:9d:92:2c:50:55:52:b0:93:77:0f:7e:42:dd:62:
e6:19:dc:bc:0f:66:25:98:c2:6a:29:3e:c8:84:98:
01:c6:6a:c9:2d:1c:1b:b6:0b:ed:94:40:ad:9e:c4:
eb:45:fd:dc:d4:e0:10:4d:6f:4d:48:d3:40:20:59:
93:a5:b8:35:bf:10:73:a5:43:e0:ff:f2:e8:43:d5:
f4:53:f4:50:63:ab:25:39:87:7f:f3:ae:71:fc:22:
af:16:b8:6f:56:7e:30:c6:8c:ef:03:f6:eb:ef:1e:
ca:5d:f0:69:f3:a3:f7:6d:66:1c:b3:7e:d7:7e:6b:
e6:f8:35:79:87:9a:8b:fc:6d:79:1a:7e:57:87:6b:
44:ef:48:88:8c:6a:37:ca:f0:ad:ad:1d:67:90:64:
c9:a8:d8:b4:4c:e3:96:1b:d6:34:d8:10:94:9f:9c:
9d:2c:54:09:89:b4:09:18:38:8b:e7:f6:36:15:71:
42:07:67:54:d2:3c:90:e3:91:3e:ca:2e:0c:e3:e0:
92:9c:d3:36:98:25:4c:58:89:7a:ea:e1:c0:8f:e6:
8a:c8:8e:84:7b:d0:48:86:18:77:7d:05:0b:5e:cf:
16:e4:cb:29:25:d0:b0:fd:22:07:1c:17:8c:5b:3e:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:17:E6:E8:54:F3:50:47:28:88:76:21:5D:58:87:FD:56:99:51:0C
X509v3 Authority Key Identifier:
keyid:C2:24:B6:9E:D4:A2:3B:7B:3E:06:74:A3:F9:94:60:1D:73:B7:BA:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0af199-fe47-4f5b-9c68-15b944577c86/1/wiS2ntSiO3s-BnSj-ZRgHXO3uv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bb:bf:f2:55:ff:36:db:ab:09:39:79:c9:61:06:5b:c7:4a:
62:b9:5e:e6:9f:d2:7d:a2:51:af:c7:54:d1:ca:f2:fd:55:2e:
86:cf:27:1d:87:a0:e8:a9:ac:06:5e:b2:43:91:17:77:3f:4c:
39:9f:12:f1:3c:b9:a0:66:05:5c:42:a5:5e:7d:40:4f:02:2d:
d6:0b:c4:24:f3:f2:c1:21:e7:82:bb:84:fd:0c:41:11:b2:a9:
f4:78:16:a5:c5:0c:2c:66:76:09:43:d2:4f:da:03:3a:23:7a:
97:f5:6c:24:08:2a:8e:ee:89:ec:6d:09:99:5c:f0:69:b2:e7:
f4:fa:d8:7f:1e:70:2e:f5:81:db:29:65:79:2b:0c:d1:fe:54:
c5:4f:83:0c:54:67:db:90:40:56:2d:2a:52:b2:13:ef:be:e2:
f8:1a:d0:22:27:49:de:9f:71:7a:18:b8:a9:5b:2c:74:26:23:
5f:5f:f0:7f:ee:52:5c:07:04:dc:5e:da:ba:a8:40:ba:dc:be:
7f:c0:12:2f:ef:d7:45:32:78:3c:10:6e:1a:cc:6b:2a:07:ce:
7a:b1:73:3d:62:db:c3:04:cf:b8:f0:25:14:c6:1f:4c:ad:b1:
2b:cb:d8:b3:5c:46:26:02:f3:3d:59:26:34:d5:d0:d1:a1:59:
1b:48:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:24 2025 by rpki-client