Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
File: wIi1a9ngFvm8Uhr03CSebRJWsd8.mft (raw, json)
Hash identifier: B2H4MxWxk1TB5N8hRdyqJ8D7rU+KRIu/cnNx6cfpMfY=
Subject key identifier: 86:80:5D:2C:F2:33:AA:3B:A8:1B:AB:5A:EC:75:D0:A5:6E:FB:35:02
Authority key identifier: C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
Certificate issuer: /CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Certificate serial: 01992443F0FD79F67E372F5F59CF5A48A5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 13:00:56 +0000
Manifest this update: Sun 07 Sep 2025 13:00:56 +0000
Manifest next update: Mon 08 Sep 2025 13:00:56 +0000
Files and hashes: 1: fc5qhRUu_bBsdB33TSVsq6f89o8.roa (hash: lZbvlThe0e2vAA/qHSYCgpP/K95jAN4HZKyoWaj+RfI=)
2: wIi1a9ngFvm8Uhr03CSebRJWsd8.crl (hash: Azfk7AhHONj4n7O+FoJdxzsOGf6vp94BUEr8z24bXvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:f0:fd:79:f6:7e:37:2f:5f:59:cf:5a:48:a5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c088b56bd9e016f9bc521af4dc249e6d1256b1df
Validity
Not Before: Sep 7 13:00:56 2025 GMT
Not After : Sep 8 13:00:56 2025 GMT
Subject: CN=86805d2cf233aa3ba81bab5aec75d0a56efb3502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e9:49:b6:3e:38:1a:01:10:1e:7b:2b:c1:29:
cc:bf:6a:c9:e0:54:c2:85:c7:33:13:66:fc:31:a0:
cc:94:e5:5b:2f:72:18:e7:d8:ce:4f:f1:b7:2a:0d:
86:f7:ad:43:ac:c5:3b:c1:39:d3:81:7b:c7:40:06:
31:5e:19:6d:32:da:de:54:c2:dd:50:bb:0b:68:3e:
d9:8a:4f:15:03:81:74:f0:13:7e:56:95:81:34:2e:
cf:e8:fa:93:ed:c9:93:c6:63:b7:59:c6:82:82:ba:
0e:f7:5f:dc:1b:dc:00:e7:7b:a4:5e:d6:1c:e4:1f:
e1:2d:49:c9:3f:90:1d:19:15:56:47:6f:e8:b2:ad:
07:f2:0c:3e:ff:2d:18:7a:e3:d1:32:39:30:e8:3a:
2d:c8:c5:cd:fc:51:5c:f3:ae:ae:82:20:f8:de:b8:
f9:4d:60:5c:a0:f9:dd:e9:ae:16:51:f8:eb:df:6b:
b2:97:4e:09:0c:3c:a4:a0:de:f9:0b:2d:f1:4e:b9:
7c:ee:67:68:42:82:e1:c8:b8:28:7e:b4:28:61:8b:
65:67:85:0d:9c:f4:c7:07:1e:90:85:98:7a:91:02:
60:67:63:29:6b:15:27:a9:11:c3:41:08:b7:bd:07:
70:c3:bd:d0:63:3a:0a:bc:fa:eb:5a:ee:24:98:c5:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:5D:2C:F2:33:AA:3B:A8:1B:AB:5A:EC:75:D0:A5:6E:FB:35:02
X509v3 Authority Key Identifier:
keyid:C0:88:B5:6B:D9:E0:16:F9:BC:52:1A:F4:DC:24:9E:6D:12:56:B1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIi1a9ngFvm8Uhr03CSebRJWsd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f5ac46-4c59-4b3e-b71e-becf12862497/1/wIi1a9ngFvm8Uhr03CSebRJWsd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6b:dd:af:0b:0e:ef:ce:41:b7:cb:8a:3a:f5:ad:26:88:6c:
a5:cb:ad:61:3a:37:73:8b:54:ac:c4:da:8e:dc:f0:7e:c6:25:
f7:6d:e5:97:2d:05:67:7a:c9:74:bb:23:e0:32:60:4a:26:03:
b0:7e:4c:ca:2c:ff:2c:c9:e8:97:97:35:5b:d7:e7:8c:e2:66:
54:b8:04:31:16:28:cb:0c:27:8e:91:b1:44:19:58:1e:89:a0:
4a:be:0b:c3:88:66:42:4c:d5:bc:08:f9:85:ca:28:8c:bf:af:
d0:51:05:7b:9e:54:e2:d1:de:28:5b:be:9c:bd:3c:41:4f:1b:
68:07:cc:ce:77:85:77:bb:76:5e:a2:68:1c:15:19:aa:8d:64:
84:a7:80:69:40:65:20:bc:4a:14:8e:03:74:e5:90:90:ce:58:
eb:ac:2b:c8:83:55:f9:36:86:40:47:3c:65:fd:f1:8d:7f:70:
7c:c9:45:b3:8c:5a:33:1d:ec:e7:ce:e3:4f:26:1c:0b:5c:ec:
f5:80:dd:ef:69:63:5d:05:2e:a7:e0:8a:27:3f:12:b1:d5:93:
08:5b:84:cd:f1:25:8a:92:0b:c3:64:70:00:33:ad:28:4c:87:
ea:43:24:41:04:8c:76:6a:a5:6e:24:4f:36:a1:81:42:68:50:
56:0c:73:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:42:07 2025 by rpki-client