Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: wx/KcgpfcKBOturUCJPhHBSjef0c4NUovRmgYINghFA=
Subject key identifier: 24:95:BF:BC:6F:FC:36:A9:7B:61:9E:5E:87:9C:8D:36:0A:A9:1B:95
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 0198D6602D5A2F632108E31935ED08418715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 53
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: 6dPthsF1SSLUrw-8wd5QNobYALo.roa (hash: CmnlVEiEx4rD/KLQtwZBi42ENs4iCe+rnAiQ+mn7tNY=)
2: AM62_hNG9hkzgdOgJu_7Pl-u4oI.roa (hash: aTW9umwh2RX7kyAdVmGDBiqiexRFNiZSuIDuhZf0vOA=)
3: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: hmk+wkiuIMej9NBcv8XmvCAMvhrWlh8/dg3wYZCPnEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2d:5a:2f:63:21:08:e3:19:35:ed:08:41:87:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=2495bfbc6ffc36a97b619e5e879c8d360aa91b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:95:6f:1c:6b:6c:2b:a6:74:29:e2:43:ef:
84:16:b9:33:74:20:e5:fe:8c:4d:90:0a:73:98:02:
84:16:23:8b:b3:d5:98:03:ba:16:0d:ba:c6:9b:55:
53:23:56:19:37:8f:e2:cd:d9:71:6f:b5:0d:6c:02:
e8:ed:41:b6:d9:f7:fc:9d:24:fc:f0:23:71:83:a6:
1f:10:7f:a9:5e:69:64:85:a6:a3:88:5e:80:9a:60:
43:33:f2:89:6a:68:b3:6d:06:55:10:44:ac:64:df:
0d:8a:a1:0f:66:d1:08:0a:40:23:11:2a:65:c5:1d:
c6:a2:ea:39:ac:37:2a:50:36:15:dd:d1:bb:bb:d0:
49:69:49:c8:d9:ac:65:11:bc:25:ec:51:02:53:41:
38:b2:75:27:29:ff:b1:10:6d:cc:ba:08:24:e9:b9:
e7:b7:00:36:71:39:90:de:9a:cd:86:bd:7d:ec:a5:
21:28:a9:ae:d2:49:ca:3b:10:3a:8f:76:99:09:0a:
aa:6c:5e:9d:f1:25:86:a7:ae:f7:1b:cf:cb:cb:20:
cf:75:1d:62:d8:02:9e:d8:d4:bb:47:86:23:1a:29:
fb:09:cf:a4:b6:92:c5:a6:3d:cc:19:48:61:80:11:
bf:0a:15:c7:bd:72:19:1d:5a:2b:2e:77:6d:23:77:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:95:BF:BC:6F:FC:36:A9:7B:61:9E:5E:87:9C:8D:36:0A:A9:1B:95
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cb:8a:6e:09:2b:ce:16:eb:fc:8c:10:65:6c:55:58:a2:61:
3c:99:bf:f3:f1:fb:d6:53:f9:ee:98:d8:00:e9:82:3a:58:d1:
ce:1e:f9:16:db:62:13:22:5b:d3:c4:25:ed:0b:91:82:91:b5:
3d:e2:0e:0b:a6:28:cf:12:ac:d7:f7:e5:1e:f4:a3:7a:1d:31:
30:2c:18:16:05:c3:27:a5:84:67:09:4f:78:5c:b2:9f:3d:61:
c4:f8:11:4d:04:d2:1e:4e:c4:d0:17:b1:ce:10:6a:d8:c6:0b:
1b:17:ab:59:f5:7c:dc:12:bf:9c:ee:b8:a0:da:07:86:dd:da:
72:46:6c:e9:43:6a:92:dc:82:88:8c:4f:70:3d:29:47:c3:b7:
59:67:fa:ce:0c:43:a2:c1:cc:1d:0c:f6:e6:64:79:ad:3e:ef:
aa:bf:75:ae:f7:29:b6:c7:4d:fa:05:d7:bc:29:81:89:eb:26:
e8:44:1e:60:de:40:ea:0f:f2:e6:59:98:24:41:98:18:cb:66:
4c:ca:c8:3f:2d:4a:24:38:5e:6a:fa:b1:23:60:0c:0e:f2:7a:
9f:cc:ce:f5:e7:05:91:e1:a1:40:6d:97:5e:02:96:8d:58:2c:
2f:0f:61:ae:c3:6d:c3:de:93:8b:f6:af:eb:b0:18:7c:a6:b4:
5a:13:3b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:07 2025 by rpki-client