Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: Md3xE9epi/mUHWShheSBX0flAusYsOXKgDkuXmUUSFE=
Subject key identifier: 90:45:D2:84:77:0B:CF:2C:F5:AD:0B:3E:1B:4A:BE:98:C5:1E:66:A6
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 01984C2FF7370103B033D6A1171662F17C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 14:01:08 +0000
Manifest this update: Sun 27 Jul 2025 14:01:08 +0000
Manifest next update: Mon 28 Jul 2025 14:01:08 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: DbP0F/wOLGyK8dKq7xYMzomABfussEHeNqPxvK9M+H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:f7:37:01:03:b0:33:d6:a1:17:16:62:f1:7c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: Jul 27 14:01:08 2025 GMT
Not After : Jul 28 14:01:08 2025 GMT
Subject: CN=9045d284770bcf2cf5ad0b3e1b4abe98c51e66a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:06:f3:c9:1c:43:cf:64:22:ca:7e:5b:58:
6d:18:f6:8d:a3:da:75:39:66:a5:10:24:fd:30:cd:
5a:0e:02:92:be:7b:62:93:2c:b9:11:2a:ff:1c:06:
94:c4:d5:76:5c:f6:97:97:5a:7b:f7:f1:20:ab:16:
d5:d8:60:55:6b:bc:25:c5:8d:55:be:ed:68:67:f5:
88:93:b5:91:db:9a:96:c8:cd:ce:e0:c1:1a:55:3f:
29:11:81:3d:de:54:ec:57:23:d3:e2:0b:65:b2:9e:
87:73:82:66:ef:41:5f:23:07:75:73:1b:f3:d3:ab:
7c:e2:ee:f0:ff:9d:8e:00:4c:77:0b:99:f8:5c:05:
fc:98:ff:4c:a6:ec:ca:d8:a5:b6:f6:f5:a0:b1:72:
42:02:7a:b0:af:03:7b:0e:c6:f0:d4:d8:00:5e:db:
5c:a1:0f:e2:4c:cf:60:6a:90:49:d3:45:20:62:4a:
e6:7a:74:c1:8e:7f:0c:bd:05:4a:d0:f2:27:e4:a5:
b6:7b:7a:a7:3f:5c:e4:f3:ed:50:cc:7c:9f:78:86:
9e:20:d6:9a:f4:7c:22:75:6b:a1:ee:87:f4:ca:4a:
d8:27:0a:a6:73:f9:ff:17:3b:68:4d:92:b0:91:44:
d7:53:4e:31:37:eb:f7:31:5c:00:2a:cd:cc:af:f9:
6c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:45:D2:84:77:0B:CF:2C:F5:AD:0B:3E:1B:4A:BE:98:C5:1E:66:A6
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:de:3d:49:35:d1:43:6e:74:2b:fe:38:51:f2:d3:61:c1:a2:
d2:7a:c8:b2:79:cb:39:d1:2a:c2:ec:47:e2:83:7e:be:4f:43:
ae:c2:09:b2:61:ef:a6:c0:40:6f:c8:d6:ab:7a:e9:2f:df:c0:
12:85:b7:a9:56:92:1f:39:20:4d:d1:b4:3d:ca:c3:9c:cb:7e:
79:16:58:55:b1:3e:d7:f6:4b:ca:0c:72:ca:2b:b2:bb:e6:0c:
c2:61:81:97:6b:1c:ac:d6:17:7f:ac:fb:e7:47:57:4b:4e:36:
fa:31:4a:cb:4a:a2:72:f4:f3:97:b8:e6:6c:31:c0:1d:1a:c5:
ed:f8:7b:5a:69:06:c7:4f:fa:28:b3:ca:5e:32:37:16:d8:bf:
20:8b:4c:75:27:8f:3c:00:67:47:48:16:63:c5:33:f6:c0:c6:
72:66:bb:8a:5d:2d:09:02:97:5d:e9:4e:f9:e1:11:4a:35:6e:
d0:88:df:97:53:87:6b:0b:2b:d6:d7:88:0d:c0:49:76:a6:73:
68:89:bf:cc:89:74:91:22:25:34:be:52:37:64:6b:40:4a:94:
86:8b:b6:6a:c0:cf:5a:d8:9e:ad:2e:b3:da:f3:f3:0d:23:a3:
77:67:d1:4e:ff:e4:1d:b0:e9:2f:bd:7c:05:e8:fc:0d:14:f3:
3a:47:f0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:33:56 2025 by rpki-client