Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
File: wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json)
Hash identifier: C6BchxQJJpkHoCsz2OZQHIbkPl5pUOSonenXFon/2Js=
Subject key identifier: 1F:62:95:2E:1A:A6:3F:47:02:00:A8:65:0B:8F:A2:D9:D7:0A:DA:20
Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
Certificate issuer: /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Certificate serial: 0198499BE36DC92BC780A0CC88DEC1A12CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 02:00:09 +0000
Manifest this update: Sun 27 Jul 2025 02:00:09 +0000
Manifest next update: Mon 28 Jul 2025 02:00:09 +0000
Files and hashes: 1: BMHVHu-JbszVmlaPK0QGdQjobqk.roa (hash: G29ynB8gmG1T9KHI25JYWbt3xJ8CodHiSO5tv95eYEk=)
2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: 7ah+wjkvCESEXMooEfHlk/9s0Z7xCVSwW5l/lwtaCPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:e3:6d:c9:2b:c7:80:a0:cc:88:de:c1:a1:2c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Validity
Not Before: Jul 27 02:00:09 2025 GMT
Not After : Jul 28 02:00:09 2025 GMT
Subject: CN=1f62952e1aa63f470200a8650b8fa2d9d70ada20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:34:60:8a:b5:30:a9:c3:f7:e6:22:9e:65:
00:79:70:cf:9f:28:fd:c9:1e:fc:d6:b4:35:69:d6:
ae:d7:f5:8f:f5:72:30:9b:2c:96:92:93:3b:10:76:
d3:37:51:62:3f:78:d2:67:55:ee:7f:c0:38:58:47:
66:82:78:66:a1:8b:f3:b9:5a:59:11:32:a5:42:9f:
b1:bd:71:ab:ea:dd:3d:f2:a2:cf:2b:1a:45:11:9e:
ab:be:09:b3:32:bc:68:6d:be:ba:3d:ba:0f:69:1e:
f1:5a:65:cd:a5:98:5e:67:22:3c:9d:3b:de:a9:2e:
dd:20:4f:ad:9a:a9:71:98:8f:4a:76:3c:1b:d1:1d:
9a:22:72:ed:40:8e:86:1c:12:6c:02:62:dc:7e:2a:
d8:94:27:f5:a5:13:6d:8f:f4:7b:52:44:a9:6e:b6:
3a:05:35:8b:af:d6:5a:b7:9f:99:a4:31:f5:7f:50:
bf:6c:62:ea:f6:34:32:24:1f:40:63:dc:41:e4:13:
e6:07:b0:a2:7f:8b:3a:52:c9:51:9f:c5:28:5f:08:
7c:fe:ca:91:06:e0:12:b8:9e:ed:ce:f5:e9:f1:62:
5a:56:73:1b:4e:2b:32:9d:60:dc:3e:a5:d2:e9:35:
29:0a:c1:83:e7:03:5a:98:29:61:79:ac:73:97:6e:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:62:95:2E:1A:A6:3F:47:02:00:A8:65:0B:8F:A2:D9:D7:0A:DA:20
X509v3 Authority Key Identifier:
keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:40:c4:61:18:71:05:d6:74:11:7c:c8:68:4b:cd:9b:ed:7b:
d8:d9:89:43:d4:e9:ef:fa:65:9c:c8:95:97:08:71:4a:70:e2:
1a:57:f9:89:e5:54:70:51:9c:de:86:bd:f2:fd:0c:7a:c6:fc:
e9:5f:34:e6:ae:46:07:6c:bc:58:44:b5:6b:f7:46:95:25:50:
8d:ec:5a:3e:e5:8a:b2:12:11:d3:81:be:7d:5c:ac:d9:d1:fc:
e6:13:74:5b:45:79:83:f8:58:c0:8e:39:52:9d:4c:02:68:5e:
06:34:bb:0e:5c:65:22:db:46:a6:d0:5d:bd:cb:f8:de:86:62:
4d:d0:ff:d6:99:83:76:ea:90:7c:d7:62:1f:96:60:15:4b:34:
8f:b9:f0:a3:0e:1a:38:9e:df:27:47:24:17:16:c5:a3:04:c8:
98:16:44:2d:2b:0c:47:16:53:0c:52:56:31:24:db:85:c6:44:
93:6b:f5:8d:29:15:67:25:33:8e:eb:83:15:7f:62:3a:7d:3c:
ca:f3:cf:72:54:fd:76:5f:01:31:4c:54:69:2e:cb:bb:83:0e:
0d:18:e6:6c:de:f9:6b:b2:46:3d:bb:41:db:33:78:6a:ae:73:
c2:56:af:48:15:cf:c9:ec:cc:2c:94:83:33:a3:c5:32:f7:33:
1f:16:7b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:18 2025 by rpki-client