Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: TrJu0iG0DMqyZaLqxG1munn7Cx9KJUpT9TZFRKNtcIk=
Subject key identifier: 3E:CA:CE:F1:AB:83:12:54:83:25:71:5C:59:BA:71:47:8E:C8:A7:08
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 019846641870C761777E4C354D0E949AF02F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 041D
Signing time: Sat 26 Jul 2025 11:00:21 +0000
Manifest this update: Sat 26 Jul 2025 11:00:21 +0000
Manifest next update: Sun 27 Jul 2025 11:00:21 +0000
Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: VREuBMnhxRcqDR3nagLlE201cA4mOnsz6OGQbnwAVFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:18:70:c7:61:77:7e:4c:35:4d:0e:94:9a:f0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Jul 26 11:00:21 2025 GMT
Not After : Jul 27 11:00:21 2025 GMT
Subject: CN=3ecacef1ab8312548325715c59ba71478ec8a708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:b2:2f:6b:6f:81:7d:fa:cf:ca:9d:aa:2d:
c9:6d:57:9f:6d:33:4e:0a:2e:ff:62:d6:9e:2d:5d:
05:e6:f7:76:23:a8:1a:36:ef:6f:68:cf:6d:e1:7d:
3b:09:13:b7:47:0c:9b:7f:34:54:cc:0d:66:c1:a3:
29:5d:64:6a:ca:3a:b3:5d:50:bd:9b:73:80:1b:4c:
47:22:1b:cd:01:d5:58:28:4c:af:ea:b2:c0:46:55:
9d:85:3b:4e:83:55:a6:3b:67:14:34:a9:6b:aa:d6:
d0:d0:68:d1:73:87:84:8a:b4:39:a1:dc:82:67:15:
d8:9b:03:b1:77:77:a1:88:a0:93:19:71:bf:a2:66:
d2:26:8d:90:66:a5:e3:a4:36:50:82:17:6f:90:40:
f7:b3:d2:83:e2:bc:b2:8a:c9:c8:3e:33:c7:74:53:
66:83:d6:12:06:d3:d5:81:35:22:bd:e7:74:d0:2e:
0d:12:95:9e:61:76:2b:b3:f9:c4:da:15:c5:4b:2a:
7d:13:a3:58:68:bf:0e:ce:12:b7:28:5f:24:cf:5a:
19:63:64:fe:eb:a7:09:90:9a:50:20:03:e9:84:10:
fe:aa:7d:69:48:97:ab:32:e9:b7:a2:7d:e5:5c:c1:
96:8c:5a:cd:a3:d7:2d:65:32:81:51:49:34:e9:bc:
a3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CA:CE:F1:AB:83:12:54:83:25:71:5C:59:BA:71:47:8E:C8:A7:08
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:dc:72:7e:3d:66:a3:b0:05:44:a8:47:ec:d9:cd:11:31:
24:d0:3b:76:cb:d0:9e:16:8b:5d:95:50:7a:70:c1:ed:8a:50:
f5:dd:3f:ca:54:2d:44:69:eb:26:67:e9:94:c3:72:38:6d:bc:
d4:60:d1:9e:3b:a3:20:4e:c0:00:21:cb:e2:d0:93:64:72:52:
d9:b2:e7:39:33:43:9b:48:83:67:eb:3c:b5:e7:65:9b:a9:48:
f4:7d:fd:dc:6c:c8:c9:6e:71:30:eb:33:ae:8c:5b:a3:c3:08:
d9:a2:6f:1c:ab:b0:c9:5d:f3:f1:40:1d:78:ab:af:19:53:2f:
a3:5d:59:68:13:a3:2c:9d:91:4a:b7:5d:3a:26:1c:4c:72:ba:
c6:9c:da:60:cd:14:3a:ab:f5:8c:c8:b0:fd:a3:58:b0:a0:1f:
38:a5:bd:7a:b4:21:96:07:45:9c:18:9a:a2:be:6a:71:82:34:
5f:4e:b6:41:f0:33:d6:eb:1f:ea:7b:fe:c6:f9:2b:35:18:89:
8e:0b:49:d8:66:58:ea:02:b3:a6:9e:99:cf:b3:aa:b9:b2:26:
e5:87:38:7a:8c:b5:fb:b6:1d:b9:84:3d:ef:2b:59:0a:80:aa:
58:07:d5:6a:b4:dd:55:9b:36:4d:80:71:5b:ab:63:1f:bc:70:
ee:de:dc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:59:51 2025 by rpki-client