Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: vxOhplCTE8cnK07n2wma7HqDf/mFw7aGqjIaLijmkjI=
Subject key identifier: 00:B2:E4:8C:60:3D:4E:D9:ED:4C:4C:92:03:54:21:18:B1:F3:D7:13
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 0198439A6647C3BD0434283D0F28E99D0F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 160D
Signing time: Fri 25 Jul 2025 22:00:48 +0000
Manifest this update: Fri 25 Jul 2025 22:00:48 +0000
Manifest next update: Sat 26 Jul 2025 22:00:48 +0000
Files and hashes: 1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: o/LnDsNPiHsb2sqXilAf3ThuvdT+5BzFkfQFjM8KaPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9a:66:47:c3:bd:04:34:28:3d:0f:28:e9:9d:0f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Jul 25 22:00:48 2025 GMT
Not After : Jul 26 22:00:48 2025 GMT
Subject: CN=00b2e48c603d4ed9ed4c4c9203542118b1f3d713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:83:e6:2c:27:12:8d:5f:4d:28:a6:ba:16:
2f:f7:27:a3:11:43:f7:85:15:7b:df:be:7a:56:69:
99:37:de:9a:4a:84:b0:34:6e:31:fd:e2:24:d0:dc:
9b:0f:4b:9b:e9:53:85:a6:a9:ff:69:53:a2:e2:e4:
5c:fb:30:3a:1a:e5:bf:5b:43:2b:38:0d:0a:4d:df:
e7:b6:b1:42:3c:ac:cd:3f:8a:63:98:c2:ab:54:65:
db:34:4f:05:89:29:a6:a9:9e:1e:bc:a1:8e:89:62:
76:8c:e3:8c:69:f1:da:4c:34:e0:31:05:6d:c9:9a:
c6:d1:ee:04:06:6e:5f:3a:4e:45:13:8a:28:19:8c:
e2:df:84:38:c5:2d:bf:73:bf:df:16:7f:75:a0:41:
7d:2a:79:83:b7:53:86:45:19:e8:99:96:04:f1:56:
47:67:0c:40:07:c1:58:9e:a9:b9:1c:a8:48:b9:1d:
4b:68:5e:0c:31:4d:48:6f:25:07:3f:d0:47:73:10:
6b:2c:78:2c:ed:dc:11:81:78:e3:cb:0f:ad:7b:43:
50:80:e4:42:58:19:b7:56:32:4d:a2:31:3b:93:fa:
79:c0:22:c2:a9:b8:b6:df:ce:93:d2:4f:96:25:16:
e3:0e:30:61:fa:03:74:33:10:7d:3c:36:da:7f:03:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B2:E4:8C:60:3D:4E:D9:ED:4C:4C:92:03:54:21:18:B1:F3:D7:13
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a5:5c:ee:2c:37:4d:c7:97:00:f8:b3:aa:32:17:b0:49:d7:
5f:f8:ac:fc:46:46:21:f7:bd:4e:c9:fb:bf:2c:db:7c:91:23:
f1:8a:81:e8:24:0f:58:b8:ef:5c:60:fc:3a:7c:35:20:82:bc:
6e:ba:47:0a:cb:63:93:b4:7f:fb:7d:31:32:61:82:d7:d8:d2:
2a:fe:09:b8:4c:c4:39:2d:86:56:9c:30:1e:44:31:72:53:2b:
9e:70:f8:f5:1c:ed:cb:32:4a:c6:7d:4c:a1:ce:29:27:b1:38:
c8:2d:29:0b:c3:e7:21:64:18:5b:a5:bd:f9:65:93:1f:a8:28:
4a:38:4b:f4:52:e5:1e:b5:e2:f8:89:ac:d4:e0:29:03:2e:6d:
9e:5d:9d:75:12:bb:ef:3d:45:17:22:55:2e:25:f9:2d:19:2c:
18:d6:25:3b:0e:0c:1a:d1:6b:d8:63:08:59:bb:13:0c:9f:59:
d6:44:38:23:90:82:3e:44:26:21:6d:78:58:d9:6a:1d:b5:8e:
5c:60:f7:f0:e4:d2:f8:4a:6e:45:81:90:a6:be:cc:ad:ba:45:
d4:90:65:a4:a2:f6:86:d5:7b:0b:23:2b:e3:78:1b:ac:4f:e9:
26:73:a5:ec:2e:64:38:75:87:d6:f1:16:b0:a1:9b:cf:d6:95:
df:e8:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:01:27 2025 by rpki-client