Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json)
Hash identifier: Ni5l2epvzXzc0SO4b6JTyq4RyKKyeiu76sqg2ikjZ84=
Subject key identifier: 6C:FB:27:4E:51:65:A7:93:3A:E5:10:3E:94:A5:72:A0:AA:EE:82:DD
Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Certificate serial: 01984A40DCD84502F48D290B94FD40CC20E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
Manifest number: 08CD
Signing time: Sun 27 Jul 2025 05:00:21 +0000
Manifest this update: Sun 27 Jul 2025 05:00:21 +0000
Manifest next update: Mon 28 Jul 2025 05:00:21 +0000
Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=)
2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: mXi+YHTaQWFWkDM87eWqHZ+5pZ7tVleAXhr8SIL6BIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:dc:d8:45:02:f4:8d:29:0b:94:fd:40:cc:20:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41
Validity
Not Before: Jul 27 05:00:21 2025 GMT
Not After : Jul 28 05:00:21 2025 GMT
Subject: CN=6cfb274e5165a7933ae5103e94a572a0aaee82dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:bd:64:73:ea:82:8b:91:1c:ff:9b:d0:44:
1a:e3:0b:da:aa:57:0d:6b:ac:73:85:e1:55:b9:45:
53:c4:19:bd:e2:7b:db:e3:40:2f:dd:cf:ac:d1:03:
14:80:bb:92:97:21:f5:34:36:a2:85:e9:68:3a:c4:
92:06:40:fb:63:fc:00:99:9e:d8:78:8d:77:b4:0a:
28:7f:03:88:8b:c5:2e:9e:f7:73:05:52:81:83:c8:
bc:58:df:8e:26:4f:f7:5b:8f:3a:ae:a7:57:5b:51:
21:42:5e:16:49:a4:8a:6c:2e:3f:63:d0:1c:7e:86:
ae:bc:3e:64:af:92:07:50:4d:ca:99:51:08:8d:35:
0a:18:0f:a2:6c:b8:63:fb:b7:a6:87:cd:4e:3c:28:
16:0a:d3:01:62:ed:fd:a5:51:93:fc:db:07:62:07:
16:01:55:25:b9:8f:f1:dd:9b:d6:39:b4:da:c2:d0:
53:87:28:0a:22:04:8d:0e:31:5b:0b:22:45:6a:44:
d6:9b:60:2d:2d:22:24:4e:04:50:73:4c:af:48:be:
75:54:d4:6a:8c:70:f3:77:eb:3d:8f:fb:14:4e:33:
63:6c:c7:5c:73:f5:d4:f0:18:25:b8:51:2b:db:b1:
5f:8a:fa:bc:e4:96:d5:5e:5e:8f:b6:58:6d:55:0d:
5a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:27:4E:51:65:A7:93:3A:E5:10:3E:94:A5:72:A0:AA:EE:82:DD
X509v3 Authority Key Identifier:
keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:3b:3f:8a:79:23:d8:c1:4c:c8:95:82:18:fa:45:77:3a:41:
c9:34:84:13:35:b3:b1:b8:cd:47:9c:aa:11:95:f7:6d:93:88:
1d:55:c4:25:93:61:81:0e:df:93:c0:bb:84:c1:79:55:44:17:
4f:ca:19:b8:4d:cf:13:30:c4:b2:45:9b:38:3e:1d:72:82:55:
cd:ab:d3:5f:cd:c5:a7:d9:14:ee:de:dc:76:0c:7c:30:b9:d6:
5a:7f:f2:8d:c8:66:57:9f:35:50:00:06:d7:3c:be:2f:3f:c2:
3b:25:85:87:b5:44:ea:6f:f3:0a:0b:21:ad:d1:15:c9:2d:0a:
76:79:bf:56:0f:0d:3f:c1:2f:67:86:4b:98:04:b1:b5:24:d8:
52:1f:7a:ff:6d:0a:fc:1e:ba:3d:3c:fe:f6:69:5c:f4:a0:2b:
eb:4f:c8:5c:4f:53:d7:0b:0c:73:3f:08:68:41:c4:2c:ad:64:
79:5f:ec:24:d7:5c:51:7b:72:f8:bc:34:51:65:90:7a:5b:20:
ad:da:d4:ad:48:42:13:fa:dd:9f:21:fd:30:c8:e7:6b:4b:51:
68:e8:1e:53:bc:32:d1:f2:0b:17:e1:6b:80:64:9f:9c:00:f8:
94:cc:a4:e4:31:f8:85:7a:97:6d:a4:95:b0:3d:1a:c5:72:33:
24:3e:eb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:51:41 2025 by rpki-client