Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
File: wBOZtGfJBmYt4A7HZsx-AA6uwns.mft (raw, json)
Hash identifier: HbIwuRyxakkMgtXuQ4DmWkL1NJAfGxZJZzJ9XU4o2uw=
Subject key identifier: CF:48:3A:F9:B0:DF:CC:2F:E7:11:BA:D7:1E:64:F2:93:56:72:D2:3B
Authority key identifier: C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
Certificate issuer: /CN=c01399b467c906662de00ec766cc7e000eaec27b
Certificate serial: 019853B1DBFA8866D7272DC6B806AF317C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
Manifest number: 0E
Signing time: Tue 29 Jul 2025 01:00:21 +0000
Manifest this update: Tue 29 Jul 2025 01:00:21 +0000
Manifest next update: Wed 30 Jul 2025 01:00:21 +0000
Files and hashes: 1: UTQYRCNOm3VBuYeHl9ZTyAq17o0.roa (hash: ui16kZERZdp4gocWkTM0v5MtuCmUvQ5EbzfrDpvuRz8=)
2: wBOZtGfJBmYt4A7HZsx-AA6uwns.crl (hash: OC5LthmhsGRA+3dHvmKDzWnxIaJdyD6YIOLalr3JHVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b1:db:fa:88:66:d7:27:2d:c6:b8:06:af:31:7c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c01399b467c906662de00ec766cc7e000eaec27b
Validity
Not Before: Jul 29 01:00:21 2025 GMT
Not After : Jul 30 01:00:21 2025 GMT
Subject: CN=cf483af9b0dfcc2fe711bad71e64f2935672d23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:d2:1d:ad:0d:30:1a:5c:c4:2a:e6:de:c1:
31:d8:31:c7:06:ff:1d:56:89:12:f6:9c:de:43:34:
06:ad:ff:f2:8c:f3:96:ac:d9:86:9b:16:34:ba:f1:
40:bc:00:20:3e:f0:4b:a3:ab:a9:a4:f4:a8:d9:82:
31:e8:f3:32:8b:54:f4:d9:0a:c0:dc:96:59:4e:41:
3b:3d:a9:27:b8:b3:4d:34:61:b3:c0:d2:0f:80:ea:
fe:50:61:fd:80:61:b5:6b:b0:c3:db:16:45:59:fa:
f5:82:32:cc:85:35:3d:c9:48:8e:b5:a5:0b:c5:73:
e3:16:ff:ad:60:79:b0:89:4f:f6:c3:db:30:b6:94:
9f:e2:1d:06:6f:7a:c4:33:fa:27:c0:70:a4:5c:c9:
b9:d6:74:84:c4:c1:14:a8:b7:a9:49:50:52:3a:41:
f8:9a:6d:46:ff:d2:a4:7e:72:97:f4:e0:b9:21:f9:
cd:8b:19:79:23:dc:27:82:10:77:32:9b:18:04:14:
0e:78:a6:db:25:67:ae:0c:79:11:f0:f4:bb:90:a6:
3e:2b:6b:da:2e:f1:69:18:b2:cf:d6:aa:f2:38:2f:
0f:07:9d:fe:50:62:21:22:e9:30:9a:d6:cd:fa:a1:
c7:14:f6:c4:09:22:36:67:56:a9:5f:b9:2d:c5:31:
24:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:48:3A:F9:B0:DF:CC:2F:E7:11:BA:D7:1E:64:F2:93:56:72:D2:3B
X509v3 Authority Key Identifier:
keyid:C0:13:99:B4:67:C9:06:66:2D:E0:0E:C7:66:CC:7E:00:0E:AE:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBOZtGfJBmYt4A7HZsx-AA6uwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/4c849f-8650-4a1e-be59-1e63bbd70d96/1/wBOZtGfJBmYt4A7HZsx-AA6uwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:49:99:f7:17:60:9c:36:26:db:9e:fa:26:1f:10:a2:db:cb:
24:31:0f:d2:fe:90:ee:77:8d:5d:6c:85:4e:bc:e9:a6:20:89:
9c:5f:20:9d:a4:6a:e4:04:68:7d:dc:0a:89:ad:3e:10:0a:52:
4a:b1:08:85:2a:91:75:7a:82:b7:f6:10:e6:c9:f6:1c:d3:fd:
f6:cd:0f:f8:5d:59:64:fe:9c:d5:2e:47:7f:84:b1:69:4f:71:
d3:a1:cb:0d:25:cc:a0:fd:06:20:e1:69:27:37:e8:3b:06:54:
9b:8a:40:91:1e:f7:5a:ba:06:1b:8f:fe:3b:ac:e8:80:1d:03:
68:19:e3:32:36:3b:88:04:5b:07:8d:08:11:d4:9e:60:07:0b:
10:8b:cb:ff:f5:b1:c2:ce:45:a2:57:d6:a6:8e:3f:53:ab:21:
dd:96:66:ea:f4:0c:d0:11:ce:d0:04:28:fd:ac:27:b7:4f:08:
e0:b7:71:17:ce:93:38:d4:26:c4:48:74:46:b0:58:aa:e3:61:
e8:66:d2:81:56:aa:96:41:d6:33:d4:56:f4:6e:d7:db:c8:56:
d3:a5:54:e1:5a:33:e6:72:4d:f9:19:b6:42:c1:3c:9f:1b:82:
15:52:d3:c0:12:93:4a:3c:13:48:ec:d4:21:9e:cc:46:c8:76:
01:b6:e7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:33:56 2025 by rpki-client