Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
File: _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json)
Hash identifier: GEEKyi16sFIotsvGXO4306e8TDXCGX/iulnDuTP20PU=
Subject key identifier: 7C:D7:1B:BB:E9:67:D8:6C:BE:99:DA:76:3E:3F:14:CD:0B:AA:8F:ED
Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
Certificate issuer: /CN=ff0732a42328074701142221e3d46a29f296c29c
Certificate serial: 01983CBCBAA04C6B77DA4BB37E03052C415C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
Manifest number: 01A9
Signing time: Thu 24 Jul 2025 14:00:58 +0000
Manifest this update: Thu 24 Jul 2025 14:00:58 +0000
Manifest next update: Fri 25 Jul 2025 14:00:58 +0000
Files and hashes: 1: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (hash: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=)
2: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: qD25jG54jk99cAxfYGe7i3EE6dIYNQLjhYOoLQi1DnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3c:bc:ba:a0:4c:6b:77:da:4b:b3:7e:03:05:2c:41:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c
Validity
Not Before: Jul 24 14:00:58 2025 GMT
Not After : Jul 25 14:00:58 2025 GMT
Subject: CN=7cd71bbbe967d86cbe99da763e3f14cd0baa8fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:e1:a6:96:0a:74:82:aa:04:35:7c:ec:70:
fa:ee:22:12:ee:db:cd:75:11:00:ec:84:80:ce:46:
45:a1:6c:4b:11:fc:56:6f:b0:e5:52:25:1c:68:90:
3f:8c:83:73:f9:19:22:3e:61:23:44:89:e8:77:a3:
62:13:d9:cf:35:9a:d6:43:aa:e9:82:62:69:b7:b4:
ea:a1:a0:0c:69:ce:19:3a:f4:d1:0a:8c:32:c2:d1:
4d:9c:3b:ba:12:31:f7:ab:95:e8:58:ba:96:69:39:
cf:d7:63:35:c4:a6:6f:04:8d:f0:7a:27:65:b3:51:
06:87:2c:5d:40:06:9a:63:5b:a1:4a:66:61:a4:ef:
4f:7f:e0:02:da:ac:e7:1b:6d:bf:22:16:57:46:27:
9f:0b:a0:c6:53:90:b6:da:4a:37:df:ce:38:51:b3:
e0:35:89:b8:9d:7f:06:3d:d8:17:3a:8d:f2:88:7d:
fc:e7:c0:e1:d3:50:bd:16:5c:5a:6b:7f:fb:e3:d6:
e2:11:54:81:0e:3b:9b:d5:0a:0f:7b:24:d6:88:7d:
f3:fd:cc:75:1c:49:3b:a5:e5:32:bc:58:a0:28:67:
07:80:21:f1:d8:3d:81:7f:f2:67:97:41:13:d5:af:
89:62:6d:61:11:27:92:29:6f:a0:d6:6f:36:15:9b:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D7:1B:BB:E9:67:D8:6C:BE:99:DA:76:3E:3F:14:CD:0B:AA:8F:ED
X509v3 Authority Key Identifier:
keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:46:0a:67:22:e4:d5:8c:74:b5:44:db:c7:01:d0:f2:a5:a0:
fc:3b:b3:50:76:64:c8:da:f9:55:a4:91:66:89:31:b9:77:7c:
fa:76:39:44:4a:b4:7e:dc:c1:13:f3:32:92:20:ec:e3:e5:87:
40:5e:6d:23:02:60:79:5b:b9:d6:95:28:82:89:86:74:cd:5c:
a5:97:fa:4a:14:ed:fa:18:71:99:b4:5f:71:d3:93:65:97:b9:
7f:19:3c:df:5c:e7:2f:90:49:f1:bb:2d:e6:60:31:d2:2a:07:
d9:50:bc:03:74:5f:bb:96:1c:71:7d:e4:4e:6d:c8:22:b3:9b:
3b:55:ac:84:f1:49:89:33:8b:d6:25:80:8a:f8:9a:7e:51:f0:
3d:5a:8e:0e:81:6c:84:70:21:1b:4a:d1:d5:71:5f:87:ab:f0:
0c:c1:23:f9:24:6b:51:85:85:1d:19:ab:da:df:88:2d:81:9f:
09:8e:fc:e1:25:fb:6a:20:59:53:bf:bd:81:24:6b:be:da:e6:
d1:2f:2b:6b:75:62:d2:65:c4:99:55:03:50:41:de:06:86:d7:
d2:97:ab:fa:6f:70:e9:1a:eb:1b:f4:d6:e1:68:9d:5d:f4:bb:
88:f0:8c:63:ab:d4:68:62:7b:81:52:10:ed:ff:60:63:3f:b1:
9b:ac:8e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:13:23 2025 by rpki-client