Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: xoNGTtfuuthmhc2yv2AAtTdG8ph+zMt1mtRzQW3KF/A=
Subject key identifier: 53:7B:A7:B4:AF:75:E2:00:6E:C6:55:4D:E2:67:D0:3F:1B:4A:79:2A
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 01993725FFA9A08F27F3712C9A4D6CB7CAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0C80
Signing time: Thu 11 Sep 2025 05:01:01 +0000
Manifest this update: Thu 11 Sep 2025 05:01:01 +0000
Manifest next update: Fri 12 Sep 2025 05:01:01 +0000
Files and hashes: 1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=)
2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: epM07j8n5vlFKljvYg3DejdOxEhufA4YuN4LYgKAbAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:25:ff:a9:a0:8f:27:f3:71:2c:9a:4d:6c:b7:ca:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Sep 11 05:01:01 2025 GMT
Not After : Sep 12 05:01:01 2025 GMT
Subject: CN=537ba7b4af75e2006ec6554de267d03f1b4a792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:f4:e4:cd:4d:87:21:80:b7:c7:16:54:c1:
18:25:e4:13:e3:0d:42:e7:ca:ff:f3:29:6b:6d:81:
b1:f4:56:2f:ca:fe:14:5e:4c:cf:2d:a4:20:a8:67:
18:d8:04:b6:26:01:00:49:0b:c1:35:92:a8:1a:54:
2c:14:ef:91:e4:63:34:20:e4:77:4d:60:b5:fd:f2:
de:48:51:50:0b:dc:34:1a:40:4f:29:7c:e4:52:4a:
14:19:a5:e4:17:b9:d1:2a:d3:6f:2a:10:48:56:99:
d2:d7:40:d4:a7:ea:28:06:03:1b:a4:bb:7a:17:ac:
26:99:47:53:a1:94:97:7a:0e:4d:2d:d9:9f:c1:cd:
90:7a:25:14:e6:c5:bf:27:1b:f4:5f:6e:53:0a:fb:
d9:45:d3:a7:65:0f:93:24:75:a4:95:0a:af:5d:62:
c0:9e:08:aa:25:31:23:48:be:23:49:4c:98:0c:7a:
f9:c7:b4:ba:50:e7:3b:ec:20:2b:20:0a:dc:94:12:
ca:5b:71:d2:31:78:4d:af:95:25:e4:52:42:9d:bc:
58:e8:95:ac:75:4e:de:8a:11:e8:ef:b3:c6:82:f3:
b9:bb:c4:57:66:6e:cf:8c:8c:fd:20:61:7d:74:ca:
15:17:b5:d7:ff:a4:bf:c3:d0:88:21:f6:ed:6f:98:
d7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7B:A7:B4:AF:75:E2:00:6E:C6:55:4D:E2:67:D0:3F:1B:4A:79:2A
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:05:08:8f:36:7f:fa:ae:72:78:19:3f:6d:71:87:39:62:eb:
1f:e0:52:74:16:1d:c5:63:fd:d4:b7:51:79:70:f8:ad:eb:08:
50:9c:1c:c5:43:a6:13:f7:c2:b4:ac:2d:c4:77:71:ed:5d:c7:
f4:fc:2d:f6:26:67:26:66:ff:bf:9b:80:a9:fa:67:c2:6a:8d:
3c:c7:dd:c0:b1:44:30:20:5d:ee:c4:48:36:6e:2d:0e:45:93:
c6:0c:21:f7:7e:a6:26:14:a3:99:f3:87:49:ac:b2:e0:eb:03:
be:62:60:63:44:43:c5:30:b8:7a:dc:46:28:6a:a5:7d:51:86:
8d:48:e0:b8:95:31:56:d4:c3:1b:a6:eb:b6:92:2a:e6:79:f1:
01:b8:21:c2:ea:94:69:39:65:63:98:88:df:24:77:fa:5f:15:
37:d4:25:35:ce:3c:db:1c:92:ae:5c:45:98:d8:48:6a:1f:aa:
c9:9c:b2:77:02:f8:60:ef:c1:3d:ca:d5:b8:70:9a:f2:4c:2e:
fb:75:70:b7:67:fb:f7:c7:1c:ed:a3:88:af:c0:46:46:14:08:
f6:7e:a0:e0:c7:28:f5:45:e5:77:b7:b8:14:ee:cb:fa:7b:be:
44:43:76:b3:5a:d0:e8:67:ea:b9:3f:04:4f:0b:bd:0f:ef:da:
16:07:e9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:16:12 2025 by rpki-client