Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier: Ik8+HvNRBIEWvomFSZG2d0rpB6EVt/qunzKrlJ13uVU=
Subject key identifier: B7:5A:A0:3A:90:79:A5:07:7D:3C:11:D7:99:8E:8A:8F:84:41:0A:17
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer: /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial: 01984664ADCAC93DF6AD8DF0EE7105F6F1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 11:00:59 +0000
Manifest this update: Sat 26 Jul 2025 11:00:59 +0000
Manifest next update: Sun 27 Jul 2025 11:00:59 +0000
Files and hashes: 1: Hz0_dopdOcTkQoi-4Q3mO6vS7ig.roa (hash: b8veFauUO102FVzcJY91NJg1d1nr7MA++Qf08FQhoiA=)
2: UnNAY2Ug9GVCcRKfH683OrLARtI.roa (hash: ZNLzC1DICXd5qw96hU96BotIt+MMzxMspSwOQt7KMEQ=)
3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: 4V/YxBDaBaEUZfTGLJLLSZD4wYjNOPVGgmtZsjNTdfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:ad:ca:c9:3d:f6:ad:8d:f0:ee:71:05:f6:f1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Validity
Not Before: Jul 26 11:00:59 2025 GMT
Not After : Jul 27 11:00:59 2025 GMT
Subject: CN=b75aa03a9079a5077d3c11d7998e8a8f84410a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:2a:29:fb:a5:3e:9b:56:68:f9:a4:03:47:
e0:34:fc:71:b7:e2:5e:b2:e8:af:4e:66:c7:d8:41:
54:62:55:93:04:b1:96:dc:bc:bd:a2:b6:4d:b5:9b:
6f:96:fd:41:61:2b:5a:d2:84:07:9c:e8:0c:0b:07:
63:52:e2:5a:8e:0e:0f:30:d2:4f:37:e5:5b:18:fb:
32:b3:b6:47:35:ea:56:55:24:23:59:9c:9f:36:ce:
ab:e8:b1:f7:71:a2:c1:4a:6e:00:0b:c4:14:a2:78:
51:f2:e6:ff:7d:37:58:e1:97:bd:4e:17:5a:51:5f:
01:ce:f3:1f:e9:57:27:ad:ad:ce:b6:4c:6e:09:f4:
3c:d7:1d:c9:4d:19:cf:f5:03:92:d3:b6:a3:82:5f:
25:e5:1f:1a:99:6d:f4:58:45:8f:c9:f8:de:b1:e3:
71:45:7f:19:6a:89:94:a2:11:fe:dc:38:45:ce:13:
77:46:ba:36:27:ad:ba:b4:ce:67:34:03:a8:b2:84:
b1:39:2f:b7:97:e2:68:59:e3:44:bf:2b:f3:30:4c:
50:02:ab:a5:5d:a3:80:98:f6:cc:e9:48:ff:1d:79:
9d:59:bf:0a:07:ef:01:7d:5a:43:6e:be:4c:92:b2:
b4:9a:69:cd:e8:b7:1e:47:bc:d2:31:f4:8e:67:c5:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:A0:3A:90:79:A5:07:7D:3C:11:D7:99:8E:8A:8F:84:41:0A:17
X509v3 Authority Key Identifier:
keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a6:b7:c8:e0:55:77:e3:ce:93:a7:3c:7a:02:91:57:ad:59:
d3:e9:4c:1b:7b:14:67:e7:89:eb:76:10:d5:64:88:2d:d1:88:
39:80:2a:f3:f0:18:a5:4a:6b:1c:69:c6:02:85:08:d0:87:b3:
d4:f8:05:2e:c5:d8:f6:53:ed:ee:ac:2f:97:42:81:55:bd:a6:
1a:08:49:da:9f:e6:6a:92:bf:5b:f0:77:93:1c:66:2e:65:58:
2a:5e:d6:c0:85:39:9d:b4:94:45:95:68:84:06:58:1d:87:95:
56:9f:7d:06:d0:6f:8f:60:2c:3c:3b:e8:c6:8d:5b:63:7f:ef:
61:74:83:ec:0a:d0:f6:93:02:7a:33:5b:5a:c9:22:bb:4c:38:
4b:e6:23:5d:0c:6a:3f:1f:94:4a:e5:9c:b2:d9:37:79:32:28:
ae:f4:f2:e5:07:e2:6d:2a:ec:c7:fd:c9:c2:96:9e:77:67:92:
5b:c2:4f:b7:90:27:98:c8:00:75:5e:be:52:46:39:4a:dd:8a:
e3:1d:e5:ce:c5:d9:e0:26:42:79:58:2f:6d:0c:67:fb:e8:cc:
80:c8:02:9d:31:32:52:6b:f1:dc:62:d6:0b:00:31:d3:f7:68:
e3:37:8c:90:1b:b8:ba:6a:75:a5:92:5f:27:d0:3b:98:88:c6:
84:05:4a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:12:57 2025 by rpki-client