Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json)
Hash identifier: YNKwk684WNaSpD547U4PI2FU/1EyNj8k0ZOZ067uFMc=
Subject key identifier: F2:51:1B:2B:04:DE:71:96:75:A8:9A:A5:5B:F0:20:7F:C1:13:6A:C6
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial: 019921B2329251FEDD30D8B7CD178A9A6651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
Manifest number: 0991
Signing time: Sun 07 Sep 2025 01:02:30 +0000
Manifest this update: Sun 07 Sep 2025 01:02:30 +0000
Manifest next update: Mon 08 Sep 2025 01:02:30 +0000
Files and hashes: 1: BTTvC8v66O2EpK1CYoUyKwsnmsY.roa (hash: 8Cg+TzwOE6bqFQKwpEVGr60uQJS1JrcoMWvltGsfhb0=)
2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: 7s1Z3xoipqvO1NUpG984ARV1MOFzdw/Ph19RgCUbiiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:32:92:51:fe:dd:30:d8:b7:cd:17:8a:9a:66:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Validity
Not Before: Sep 7 01:02:30 2025 GMT
Not After : Sep 8 01:02:30 2025 GMT
Subject: CN=f2511b2b04de719675a89aa55bf0207fc1136ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:f6:fc:ab:94:87:27:ab:89:06:c4:ac:28:
00:03:24:3b:0c:68:43:97:65:bc:36:b4:90:83:8d:
e0:b7:52:7d:1b:be:03:ce:c1:e9:28:5f:58:55:e4:
1f:26:88:5a:48:80:d6:ea:b2:e0:11:5e:a0:7b:fe:
b3:3a:71:ff:69:01:5b:18:8b:3d:4b:2d:92:35:bb:
97:93:7d:d3:e2:47:62:02:7f:d7:1c:c4:fb:d2:43:
e6:bd:5e:95:98:d4:63:84:0f:c8:97:9d:08:29:37:
76:cf:39:09:59:08:91:c4:53:e7:19:38:7b:0d:5c:
e0:89:4e:be:07:f1:a7:40:d6:91:18:ff:c9:a6:ae:
85:1a:4a:0d:7f:7f:98:d7:a8:63:16:8c:83:56:11:
9d:f4:1d:6f:cf:67:c4:7f:42:00:69:97:7d:64:f1:
06:c0:d2:88:09:0c:96:6f:a9:6f:3a:72:64:a1:8d:
ec:4f:ed:14:19:a6:56:80:6f:e3:7c:92:2c:55:b6:
8b:31:c7:14:38:fb:9c:7f:4c:3b:c3:16:86:68:7d:
57:e0:be:f4:22:c2:3c:61:09:30:63:fa:fe:03:06:
95:ae:e9:30:e6:d7:17:7a:6e:4c:64:41:74:43:77:
86:0b:a1:25:7d:b0:66:f1:27:dd:86:04:ca:7f:55:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:51:1B:2B:04:DE:71:96:75:A8:9A:A5:5B:F0:20:7F:C1:13:6A:C6
X509v3 Authority Key Identifier:
keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bb:4d:25:fa:3b:ec:af:b2:be:3a:53:27:dd:2f:ce:95:17:
02:62:0a:71:2f:97:e0:04:5b:09:d9:97:64:4d:8d:ea:d7:47:
5b:36:a5:2e:a0:b0:f4:48:9c:ef:d4:f2:91:fa:a7:5c:4b:bf:
ba:78:e0:87:54:82:71:15:c5:d1:8f:ec:8c:03:28:dd:9c:25:
07:a7:f1:cc:90:1a:fc:f7:27:21:66:ec:57:4e:29:2c:d5:77:
6c:b8:84:87:ee:01:7b:fb:1e:8e:dd:f6:cd:55:c3:9d:8f:c5:
a3:74:a6:ae:99:9f:ea:06:86:cf:ba:24:82:b9:8f:52:22:58:
c1:48:ec:80:6f:4b:70:12:1e:a0:9c:d6:8a:31:e0:af:df:fa:
85:ab:13:79:76:9b:c2:e4:c5:2e:5b:b8:ac:1b:4a:b6:f6:7c:
55:70:85:df:14:95:47:e6:0f:76:9e:82:1e:45:8c:51:c9:7f:
a3:a9:a1:19:ac:1b:e5:ff:31:47:e9:2d:63:99:63:b2:de:de:
3c:3b:eb:3a:7c:dd:51:7b:e0:f9:6f:b8:a8:fe:14:ec:39:e4:
ef:55:34:dc:64:8e:9f:c2:70:32:f6:73:76:2e:55:be:22:95:
14:07:9e:1d:04:17:5a:90:3a:36:7b:51:92:7f:e3:5f:c8:bc:
62:9f:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:01 2025 by rpki-client