Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: ehxCU0Y/NMiNqj6Hwt3R6kA3Jss4FeESsbL7AagbSnU=
Subject key identifier: AB:83:42:58:1E:8C:50:B0:C1:7F:E0:5F:37:DE:F7:0B:BF:6E:22:8C
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 0198499C58392861AC583A7754875DB4F842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0678
Signing time: Sun 27 Jul 2025 02:00:39 +0000
Manifest this update: Sun 27 Jul 2025 02:00:39 +0000
Manifest next update: Mon 28 Jul 2025 02:00:39 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: oLmyjLnwPRXQHjusBC3d1WN1XBAhHq62YLt9xV0rySg=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:58:39:28:61:ac:58:3a:77:54:87:5d:b4:f8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Jul 27 02:00:39 2025 GMT
Not After : Jul 28 02:00:39 2025 GMT
Subject: CN=ab8342581e8c50b0c17fe05f37def70bbf6e228c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:75:49:fa:f6:0d:4f:d4:e5:60:b7:aa:97:
2b:cc:c1:c0:78:be:8e:9e:4a:14:6f:4d:dd:f9:2b:
f7:67:42:48:11:54:3d:b0:bc:c7:36:46:53:fd:a0:
49:05:da:42:14:b7:48:12:42:6e:61:60:e5:ef:f5:
ed:f1:ff:c8:c0:c8:e5:92:21:0d:60:fe:75:2b:16:
02:f7:80:04:32:d7:56:58:90:a2:7a:63:ca:dc:b9:
24:b9:4c:d2:11:cd:0b:93:3c:86:d8:f0:3d:50:f6:
3c:85:64:56:69:55:87:d1:cb:ed:5b:33:b8:f4:4d:
b4:6c:96:c8:50:2c:1b:9b:42:cd:30:ad:56:75:9e:
42:29:58:28:42:44:99:bc:13:7a:b3:71:f5:93:d4:
02:22:a7:60:64:2d:d2:1b:35:b4:e7:9a:f4:28:fc:
cb:75:f0:b9:30:a8:1c:d2:6b:23:81:17:2c:e6:37:
61:a8:a4:ab:2d:22:e2:8a:4a:69:81:f3:d6:d9:81:
04:ff:db:82:70:57:55:b5:de:3e:94:08:4f:ac:a3:
ff:94:67:e4:53:8e:71:20:fa:9c:70:9d:f8:d4:d6:
86:e2:93:87:a4:e6:72:f5:d2:3e:ee:3d:08:08:b5:
3d:53:ad:32:b4:52:2b:05:e5:f7:dc:89:d4:9a:7d:
75:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:83:42:58:1E:8C:50:B0:C1:7F:E0:5F:37:DE:F7:0B:BF:6E:22:8C
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:07:3f:ee:8d:6a:a9:f6:43:01:62:d8:4e:b0:54:7f:5c:41:
d3:49:d9:d6:54:7c:b5:05:c1:3b:fa:d8:ea:ea:af:aa:fe:c9:
ac:24:6d:cf:70:7d:92:ef:b1:1d:f9:86:b0:04:cf:aa:41:9d:
ff:19:e2:75:87:c0:17:d8:c6:ed:af:33:b8:a4:0a:c1:13:58:
2d:da:8d:dc:11:5a:bb:a1:ec:ab:50:9d:8c:45:78:0c:3d:f4:
82:f1:64:5e:fa:9e:da:f1:77:00:ae:35:b1:18:5f:5b:cb:16:
ea:ef:60:25:47:87:3b:a4:05:50:e9:19:1d:a5:4f:3e:46:04:
b6:02:c6:c1:4f:c6:32:78:27:e2:57:7a:2e:e8:29:8b:7f:d5:
ee:75:48:26:65:cb:38:28:c2:2a:71:d3:5e:3f:0a:53:b4:e4:
30:4e:e8:ab:89:93:96:a0:e0:1e:f1:d6:f6:37:09:f3:00:dc:
6b:be:9e:df:28:09:fe:3d:12:64:91:31:e8:83:be:f2:75:a7:
3b:af:17:05:8f:ea:28:f8:07:5f:9f:2e:5f:05:05:b7:ac:a3:
cc:1a:c4:31:91:bb:06:f2:78:9d:85:b3:5b:e4:ae:5b:6d:59:
e8:c9:54:14:cc:31:d9:32:5b:1c:00:39:30:65:64:40:e9:1f:
90:83:12:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:01 2025 by rpki-client