Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: +7kedI+vlcFgrOK+36xPVdVxy6QhtEi/DEqXsi+glEM=
Subject key identifier: 30:24:50:53:FB:C2:BB:42:3B:59:00:B1:5F:A0:14:3E:BF:C7:25:B9
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 01984B8AA8E229DE93E58BCD2F9023EFE0FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0C06
Signing time: Sun 27 Jul 2025 11:00:34 +0000
Manifest this update: Sun 27 Jul 2025 11:00:34 +0000
Manifest next update: Mon 28 Jul 2025 11:00:34 +0000
Files and hashes: 1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=)
2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: z8vOUQTpeylLnJVXbRujK3wQc9l2SaO4lqDkP2C4hB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:a8:e2:29:de:93:e5:8b:cd:2f:90:23:ef:e0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Jul 27 11:00:34 2025 GMT
Not After : Jul 28 11:00:34 2025 GMT
Subject: CN=30245053fbc2bb423b5900b15fa0143ebfc725b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e3:76:f5:31:15:70:34:07:cc:20:8f:6b:19:
f8:4e:de:2d:27:b5:26:d8:de:88:1b:6d:9c:7f:72:
80:bb:99:48:14:15:a4:54:1d:11:cc:c5:fe:a3:32:
6e:a3:bb:8c:9a:6a:0f:b0:af:9c:09:f7:a9:b7:65:
59:35:68:2a:1d:41:ad:ae:27:76:82:b5:75:07:52:
2b:84:01:6d:e2:49:bf:28:53:56:82:4c:42:75:ef:
11:06:5a:6d:3e:9e:4d:a8:e5:b2:66:78:d0:53:7c:
22:59:85:32:9e:15:46:38:be:37:ff:cf:93:de:df:
1d:87:f5:26:83:77:2e:da:0b:87:d6:04:d8:b5:bf:
47:67:9a:e2:84:59:46:2b:3a:98:0e:81:1c:fd:f9:
6b:71:43:95:12:a6:78:21:45:26:ec:8e:9d:82:1a:
b8:63:44:0a:d5:ee:d6:5c:f7:e4:58:b9:b6:12:fe:
a0:fe:94:02:90:cd:50:71:16:84:5a:9c:98:31:08:
37:83:53:11:25:72:3b:87:63:ed:f8:9c:26:c0:70:
a6:12:ba:ff:aa:97:08:d3:a4:c2:71:fb:40:7f:f9:
5f:1b:fe:00:b4:1d:f6:f3:60:d7:1f:79:6b:5e:de:
93:e3:0b:83:aa:22:a0:3b:83:d8:78:f8:8d:61:6e:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:24:50:53:FB:C2:BB:42:3B:59:00:B1:5F:A0:14:3E:BF:C7:25:B9
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:94:42:c5:f3:2f:d6:52:3d:e6:2e:e3:55:da:ff:92:c3:00:
44:c6:f8:49:61:b8:59:90:c6:ca:55:10:c6:31:a0:ce:dc:4a:
56:1a:aa:15:fd:50:31:03:9f:9e:24:80:3e:95:50:74:b8:46:
75:28:0a:cc:03:5a:cf:14:44:21:28:1e:a2:90:ed:ad:5f:22:
39:bc:a1:05:51:6a:52:73:dd:72:57:ce:e1:3b:eb:d9:4b:11:
11:0e:b9:52:86:fc:90:3b:54:7b:82:e9:c5:33:06:f9:5e:c5:
b1:ef:f7:bb:1e:6a:16:08:ab:e0:5e:34:58:20:d7:2d:bf:5a:
1c:c0:7c:33:54:3c:ea:7c:a0:b9:d0:b5:ff:90:fb:0f:2d:92:
9e:37:0d:c1:5d:c7:d7:58:95:b0:05:e4:09:17:e2:5c:da:a5:
7e:86:21:a7:88:56:a4:32:9e:bf:fa:80:b7:3b:6f:6e:bd:e8:
71:fb:64:0d:bb:7d:2e:d5:c5:8f:de:3d:ad:5a:82:56:ec:b2:
51:a0:f0:5b:d6:aa:87:e3:61:6d:4b:f1:78:79:6a:44:98:49:
4a:f4:16:99:42:51:61:9b:cf:2a:4f:31:26:9d:d5:d1:7a:e8:
e8:e9:97:c4:49:f0:88:75:ef:49:41:83:eb:76:79:08:a9:91:
dc:88:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:08:47 2025 by rpki-client