Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: /wTRD1V2WRbmHP4B1Q4r/Qt5N9Bh2tjcUii7BZ/7uQw=
Subject key identifier: 74:7D:B2:BA:8A:7B:26:E2:A4:BC:79:52:AF:DC:A4:B5:8F:03:6C:4F
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 019827B58541AB7408EB8FC994580BF22F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 0733
Signing time: Sun 20 Jul 2025 12:01:04 +0000
Manifest this update: Sun 20 Jul 2025 12:01:04 +0000
Manifest next update: Mon 21 Jul 2025 12:01:04 +0000
Files and hashes: 1: YrKYk7I6vE-csMWooaZM6NHB8BQ.roa (hash: DGcItu+t1LfBz2hIuLIG2raDTGGDZoaJ5stlNvHsdUs=)
2: qYy8XmUApmSr7E4zGQ4BdVZDGb4.roa (hash: Fn2Mqkncw63T9+361k6HpXw83uUzWzsG0tY0nJ1gyjM=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: ru+a6I2hnCAnmrAtHl0IXCPhtHUvxVZiRoPoqY6PME4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:b5:85:41:ab:74:08:eb:8f:c9:94:58:0b:f2:2f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: Jul 20 12:01:04 2025 GMT
Not After : Jul 21 12:01:04 2025 GMT
Subject: CN=747db2ba8a7b26e2a4bc7952afdca4b58f036c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:db:5d:19:d1:7f:3c:51:c2:28:da:5f:24:31:
b2:9b:74:00:02:a9:76:09:b7:52:53:ec:3d:cb:ec:
42:16:f6:1d:79:0d:d1:96:49:00:78:c7:61:b9:6d:
6f:1b:fd:f4:ca:2b:66:63:8a:e1:cd:e4:b0:23:ae:
64:4a:c2:fa:c7:36:cd:c5:cb:10:43:9d:19:f4:55:
07:43:0f:64:17:71:3e:8d:6b:ad:2b:6e:7f:78:c2:
aa:b6:ac:36:d0:43:97:5e:1f:9e:dc:32:b5:39:3c:
82:12:48:e5:a6:92:d5:3e:11:d4:a8:4c:a1:38:e5:
02:04:98:1b:a0:18:b4:ab:ea:94:63:6f:9f:3b:15:
91:b1:03:35:a9:f5:3c:df:5f:53:d7:9c:22:64:1b:
50:81:2c:71:fd:63:4c:2b:45:b4:b3:64:82:06:9b:
1f:20:98:6b:bc:a9:2f:49:8c:95:ba:d0:a9:25:bc:
be:bb:87:da:6d:78:e7:ea:ad:29:e2:fd:d2:fc:a2:
ae:97:f9:be:7f:b5:34:fe:42:52:5d:66:ab:fe:34:
a7:ff:59:f0:98:ac:0e:0c:22:79:6a:13:c1:ba:c2:
9c:1f:75:47:f3:fc:24:12:86:8f:f7:99:a7:85:a0:
ba:43:18:b4:94:f5:98:d2:39:77:c1:6e:0f:bb:68:
13:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7D:B2:BA:8A:7B:26:E2:A4:BC:79:52:AF:DC:A4:B5:8F:03:6C:4F
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:98:6d:24:17:6c:11:3b:d2:e9:6d:52:ef:6d:93:88:09:f7:
4c:e4:ea:24:f6:53:0d:90:25:7e:d4:ff:d0:17:ad:09:40:87:
20:7f:a6:9c:37:27:57:18:14:fd:87:40:92:f7:51:86:1b:d8:
b8:ec:4f:ca:ad:f4:80:c9:19:46:d9:81:05:76:00:de:b4:56:
bf:2f:fc:50:82:49:bd:69:47:9b:f0:65:c4:50:78:80:61:a7:
b0:10:8e:95:c7:6d:16:a6:f7:42:be:48:c7:c0:28:01:e1:fe:
9a:b8:44:e2:31:ab:c7:a8:44:0a:05:8e:20:9e:e2:be:b2:08:
56:8e:50:e8:13:0c:bd:76:df:40:f8:be:d6:cf:8e:56:13:b3:
16:b0:3b:f4:a0:af:cf:ee:0a:ba:a0:ff:d0:8f:34:34:81:08:
fa:30:9b:14:cf:c7:6e:8d:74:b1:42:2f:86:c0:4d:d4:a7:fc:
e2:0f:99:2a:b7:ef:59:41:e3:e7:39:43:52:3b:f9:22:05:e5:
65:a9:0a:5a:1e:4c:c5:22:15:15:f6:37:0d:42:e8:de:7b:bf:
83:e2:44:c2:9f:cc:ee:ad:e8:62:10:74:04:92:09:c1:c3:fd:
8c:61:23:10:3d:5f:b5:85:78:cb:09:7d:9e:b0:6b:37:07:2e:
9c:0c:0d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:11 2025 by rpki-client