Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File: wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier: rjDwnnNstbxIhdiehyUNxflrYpM3T/MecsFP+1UEUZc=
Subject key identifier: 04:A9:87:16:FA:FE:17:1D:DF:9F:97:6E:41:16:84:23:63:71:9A:86
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer: /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial: 01985268BAF5C370A36934F79EAC71BEBBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number: 0136
Signing time: Mon 28 Jul 2025 19:00:51 +0000
Manifest this update: Mon 28 Jul 2025 19:00:51 +0000
Manifest next update: Tue 29 Jul 2025 19:00:51 +0000
Files and hashes: 1: YfJtBuAEzwrAwSN_J7xGNSKCjCE.roa (hash: XmpRYRo5Vs4yfW8P8k8ClzDTbvhLktOQ+0fCN4Fj/SI=)
2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: 739ByMLxZv7chAoDhLf1SpBFYbUUGbaVC+DNj62dD24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:ba:f5:c3:70:a3:69:34:f7:9e:ac:71:be:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Validity
Not Before: Jul 28 19:00:51 2025 GMT
Not After : Jul 29 19:00:51 2025 GMT
Subject: CN=04a98716fafe171ddf9f976e4116842363719a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:63:73:44:ee:24:d9:40:d3:3e:e8:09:4f:
29:e3:dc:d5:79:e5:39:07:e6:09:03:31:3a:ca:38:
fc:10:2c:b5:d7:86:19:bd:f8:70:a8:90:75:c1:7e:
76:19:89:f7:74:e7:e2:12:0a:1a:dc:7a:f0:db:ea:
8e:5d:a1:a6:20:f5:25:c2:49:82:e0:f6:2f:34:a4:
e4:f6:ca:27:b9:26:90:df:57:86:02:5e:2a:d4:4e:
cf:02:47:38:49:ec:15:0c:9e:87:5b:4f:3b:3a:a1:
ec:da:8e:2e:c0:43:9b:3f:39:a1:e7:7b:d3:0f:f0:
fa:9d:29:da:bb:c6:c0:41:9d:cd:57:f6:0c:72:c5:
ff:09:94:fe:3a:33:07:2e:6d:07:67:3f:9d:d8:69:
81:b0:01:b2:6d:81:fd:45:34:0e:25:70:be:ff:03:
8d:05:b5:19:a0:da:fd:c9:f6:e4:dc:bf:e6:a0:06:
e1:82:c2:bd:14:27:17:c6:29:0e:a8:51:35:4a:1c:
38:82:6b:22:a3:8d:97:45:0c:f9:c6:29:ad:cf:d7:
22:23:eb:63:fa:5a:c8:4f:25:f7:4d:17:be:4e:c6:
3d:4c:6c:0e:2f:f8:b9:1b:5c:22:8b:ae:3e:5d:92:
10:94:ba:41:a7:76:0b:03:e6:e9:74:2c:cd:64:fe:
94:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A9:87:16:FA:FE:17:1D:DF:9F:97:6E:41:16:84:23:63:71:9A:86
X509v3 Authority Key Identifier:
keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:69:05:7f:38:52:f1:3c:bc:25:c5:c0:8a:97:04:5e:8d:4d:
9c:59:c3:f4:56:7b:e0:e1:2f:a0:6f:90:af:54:f1:be:8b:df:
4d:32:eb:0f:c9:18:78:c7:f5:b1:ca:24:fc:00:29:be:17:8b:
88:6d:b5:12:cc:ed:5c:e5:d7:bd:f9:ad:cd:4f:d0:1f:54:c6:
df:39:db:34:a4:a7:75:9e:e2:c8:33:ab:b5:d8:49:7e:49:ee:
e2:63:37:fa:89:b6:b6:0a:30:7e:04:d8:8e:6c:51:ae:7d:2e:
c2:13:de:f6:56:e2:b8:60:79:bf:da:37:27:04:c6:c6:f5:31:
28:b6:5c:17:0c:ae:29:a9:64:95:14:e3:64:da:0c:e7:b3:7b:
05:d2:d5:1f:4b:7a:6a:42:da:05:6a:d1:64:3d:d5:fe:a3:b2:
ed:5e:65:28:55:22:de:85:50:65:5a:65:9a:ef:4f:13:f9:80:
fb:e2:c4:1d:a9:ea:37:e8:ad:a8:e0:11:37:27:90:33:1a:05:
f8:50:9c:a2:e8:d5:40:34:e9:9e:33:72:c1:e8:c4:67:ac:cd:
fd:5b:72:b9:7c:0d:69:e2:40:48:51:9e:ca:f5:0b:6a:bb:58:
15:32:fd:4f:f9:3a:ec:44:31:a2:5a:88:be:ca:12:9d:75:54:
cd:e7:0d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:44:20 2025 by rpki-client