Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
File: wXO75fcjeEWsqNMmO41R7zePwSA.mft (raw, json)
Hash identifier: th6AyUpERB/jkA8787i51Sq6vzJP27Bkxpv0jFlutDY=
Subject key identifier: E2:F2:E0:E2:2F:E2:28:A1:4A:C8:A1:51:E4:D3:84:1B:62:34:DA:F9
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 01985AC9175097C881E61F848CCFC0FD50DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
Manifest number: 02FD
Signing time: Wed 30 Jul 2025 10:03:04 +0000
Manifest this update: Wed 30 Jul 2025 10:03:04 +0000
Manifest next update: Thu 31 Jul 2025 10:03:04 +0000
Files and hashes: 1: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (hash: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=)
2: wXO75fcjeEWsqNMmO41R7zePwSA.crl (hash: P6jJE1Be2UB85fr23UEnYsUUD1xG69b6sLeo8JtT0Kk=)
3: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (hash: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5a:c9:17:50:97:c8:81:e6:1f:84:8c:cf:c0:fd:50:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Jul 30 10:03:04 2025 GMT
Not After : Jul 31 10:03:04 2025 GMT
Subject: CN=e2f2e0e22fe228a14ac8a151e4d3841b6234daf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:6c:27:ce:23:fe:b4:7e:70:0e:e7:d4:9f:
82:f3:d1:fc:98:eb:21:8c:68:b8:62:99:f0:ba:a9:
6d:1a:f0:90:2f:66:f8:b2:66:6e:75:31:a8:6b:97:
fc:4c:54:46:ac:5b:42:7a:c0:15:86:4f:f6:c3:05:
bd:4b:96:ba:3f:07:5a:17:b1:ae:e8:cd:ee:dc:8c:
aa:1e:5d:c5:a9:a0:f5:65:80:6b:88:6a:be:99:40:
5b:2f:4e:66:ec:81:e1:c5:ae:ce:41:95:59:1f:59:
5f:10:bd:f2:c7:ac:c3:0e:48:bb:4b:02:d9:59:44:
1c:cb:08:0a:b7:f5:96:b5:85:4e:34:b8:17:5e:af:
a0:9d:67:27:82:87:88:e4:c8:f1:d3:d4:7e:a8:27:
3d:7d:f1:70:0e:6b:88:07:4c:86:de:f1:69:11:82:
1e:64:76:13:33:c4:a2:42:f7:90:99:20:34:5e:dc:
99:c2:70:c0:cb:4e:67:b0:c4:2a:49:c3:9d:cf:1e:
8e:2d:f8:77:29:26:75:0c:93:09:13:20:42:f7:cf:
33:27:29:ff:31:b7:39:17:02:34:61:2b:8f:94:99:
33:18:70:8f:b1:64:f3:42:cf:bc:7d:08:b3:ff:f4:
bd:53:22:65:a0:78:86:12:42:e3:f7:32:da:9f:45:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F2:E0:E2:2F:E2:28:A1:4A:C8:A1:51:E4:D3:84:1B:62:34:DA:F9
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:17:c9:fa:81:02:d4:de:6f:43:14:0b:10:a6:03:4d:eb:2d:
1a:2e:3e:4e:e5:82:1f:5a:88:23:4e:98:b1:c8:43:d4:1f:bb:
47:49:1b:86:3f:fb:bf:1a:cf:8c:eb:97:55:22:ef:7d:f3:5a:
27:74:53:ca:62:d3:96:32:fa:6c:4a:54:30:5f:d7:b4:ae:ee:
9c:5c:e8:17:54:87:00:8f:77:24:5b:b9:88:87:55:6f:22:e5:
da:0c:20:02:5f:47:4b:e2:da:7f:39:4b:28:3a:81:c1:a3:21:
af:5f:f8:52:1e:be:df:ad:0c:cc:f0:f0:57:3f:29:29:68:82:
64:ed:8a:ab:3b:9d:19:e1:b3:de:07:11:89:96:ed:c9:14:3a:
78:92:a1:da:63:6a:c4:81:55:36:a7:48:f5:ac:76:84:c5:4e:
b1:b4:3d:79:45:31:48:33:32:e0:a9:50:bb:2b:e1:84:66:1b:
ac:4f:3b:a8:a5:00:5a:9a:eb:d0:ec:1a:b8:11:b2:44:79:c2:
93:87:ea:c5:12:93:fe:fb:39:37:7d:c1:68:cc:1f:28:89:1e:
93:2a:a5:31:fd:15:60:45:72:b2:10:15:c9:44:7f:db:99:25:
ec:b2:83:e3:44:c3:fe:5b:06:2e:3c:39:a0:29:de:e2:6b:31:
d6:4f:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 13:20:19 2025 by rpki-client