Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File: wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier: 40Se5Zs2ZLV0VX3/GrnbrCZQEWoFDuKrNCun0twGuJk=
Subject key identifier: 6C:C5:4B:F6:A5:86:10:54:F1:E0:73:8F:A5:BB:D3:A7:4C:0E:52:B9
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer: /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial: 0199307EA0D4C98FBD3912D7B0FAEF554184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number: 0AE3
Signing time: Tue 09 Sep 2025 22:00:28 +0000
Manifest this update: Tue 09 Sep 2025 22:00:28 +0000
Manifest next update: Wed 10 Sep 2025 22:00:28 +0000
Files and hashes: 1: _vDgQuqvDJFp6MMZOZL5IEmORHs.roa (hash: 7Xz5OI/32CttzkIydxRg2GdNWdK569D5srRiLf2kPkg=)
2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: AHntB4saOMUr/8av/RMBIsKrfinBT7823hekW7Z1qIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:a0:d4:c9:8f:bd:39:12:d7:b0:fa:ef:55:41:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
Validity
Not Before: Sep 9 22:00:28 2025 GMT
Not After : Sep 10 22:00:28 2025 GMT
Subject: CN=6cc54bf6a5861054f1e0738fa5bbd3a74c0e52b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:d9:73:80:d3:35:d4:ef:74:76:b6:10:43:
9c:12:bd:7a:10:df:67:44:ee:e0:e0:e9:35:41:bf:
c8:33:6b:08:5a:a4:33:09:69:dd:b2:98:76:23:f9:
0e:f3:bb:66:eb:b2:f0:fb:9c:32:d3:1b:32:8f:11:
b3:95:8d:ac:ec:d3:aa:b2:51:db:0c:69:f5:0e:60:
ab:3a:2c:d9:28:c7:c6:7d:d8:42:c9:b9:f0:81:59:
b2:a6:fe:89:f0:c5:11:b4:8c:6d:0d:1a:05:b5:24:
ca:95:bb:ba:60:58:02:05:1f:5a:27:8a:ce:cd:5e:
4a:e8:19:dd:28:67:2d:7a:10:e2:1a:1f:02:0a:4e:
7c:ef:43:0a:d1:89:2a:e7:45:f9:3a:f8:8f:8a:87:
46:5f:fe:8b:98:c6:54:c1:d4:aa:4a:c8:c4:fe:ed:
0a:6f:c7:ed:7e:4b:aa:31:9b:8f:67:e5:c7:41:a1:
d3:9e:60:32:27:27:e1:1b:4e:dd:58:ad:de:42:1c:
1b:42:02:6c:49:a6:01:e1:9c:e1:51:1a:f7:2e:f0:
07:2d:f4:12:6e:ba:f7:f3:2a:ab:68:be:3e:a1:66:
dd:6e:bf:1d:a8:d9:23:7e:aa:3c:41:76:28:9f:fe:
bf:85:98:21:45:7d:fc:55:e2:44:ff:32:ef:69:9a:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C5:4B:F6:A5:86:10:54:F1:E0:73:8F:A5:BB:D3:A7:4C:0E:52:B9
X509v3 Authority Key Identifier:
keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:90:bc:55:e3:25:01:7d:7b:bb:cf:bc:de:7b:91:fc:1f:
16:61:22:bd:d8:6d:9e:1c:bb:c5:08:15:11:ab:dd:ed:8a:c8:
5a:1f:cd:fd:ca:8e:43:43:2c:bc:c7:0b:1c:ef:99:85:0b:7d:
db:5e:ca:dd:3a:60:5e:5c:d5:4b:f2:82:cf:f6:10:ee:b0:c6:
1a:b8:b7:b4:89:5b:cb:7c:50:9a:5c:c2:f2:10:07:7b:32:fa:
36:43:24:7f:dd:b1:58:5b:19:5a:d8:44:8e:9c:ba:f5:27:d0:
fb:14:fc:c2:c6:27:76:55:40:7a:1c:2f:44:48:69:ed:40:e5:
c7:34:bd:0c:aa:e5:10:84:79:6b:00:b5:44:7f:31:bf:6a:71:
4d:c1:9d:7b:e3:02:ca:cc:ab:c2:71:a8:c3:53:4d:da:63:7f:
3e:c3:e4:50:dd:8a:a5:f2:a8:cb:2c:d8:40:16:98:97:b5:94:
e1:42:6a:7a:63:1a:e9:cb:0f:cf:3e:96:5d:33:f8:51:22:94:
1e:aa:53:0f:59:2f:4b:95:8d:ef:a3:f4:00:3d:a9:9e:d1:94:
7f:bb:3a:85:57:05:11:e7:6c:17:83:c7:5e:8b:87:eb:ae:ea:
1e:a3:38:7f:4f:12:f8:98:de:5b:ef:61:14:dc:c4:2a:2d:a7:
92:af:a9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:36:47 2025 by rpki-client