Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: 4GbpqJAFTYz+Yr9kzWk59fAEwk/zECy8/ZatqFDkeU8=
Subject key identifier: 2F:3E:C2:01:19:01:CB:73:E2:8C:F2:CF:73:08:45:52:B2:16:8D:0D
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 019930EC6D8407F0742B4635C32048550F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0D4E
Signing time: Wed 10 Sep 2025 00:00:24 +0000
Manifest this update: Wed 10 Sep 2025 00:00:24 +0000
Manifest next update: Thu 11 Sep 2025 00:00:24 +0000
Files and hashes: 1: DkCgqG244-xdfGSiZiRL_6jjMU4.roa (hash: LYv1Ix1K/vm79oDEZ0SXpTqFtZHiYhhxeZ+EeZAbK6I=)
2: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: dO700mEOz5Nt7rcw3+1xodDts9Jm38GsV5tuDqzCxUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:ec:6d:84:07:f0:74:2b:46:35:c3:20:48:55:0f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Sep 10 00:00:24 2025 GMT
Not After : Sep 11 00:00:24 2025 GMT
Subject: CN=2f3ec2011901cb73e28cf2cf73084552b2168d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:2e:9e:3a:b7:44:47:d4:3d:f6:9a:e0:eb:
58:d1:1c:2d:eb:08:aa:87:1f:66:f7:db:cf:90:f6:
42:23:b3:37:d4:78:ac:f0:bf:03:db:4b:a9:54:ae:
d1:02:3d:73:1e:e5:2f:85:ca:c4:d1:0f:0f:a7:13:
7b:5f:ac:be:9f:70:8d:01:ef:8f:32:f1:a1:8f:57:
c6:d5:36:80:ef:22:4e:b0:39:a2:a2:1e:5a:d7:c9:
4a:3a:16:1b:92:bc:16:37:1b:c1:7f:00:7b:a1:93:
d2:8e:62:f4:bf:d1:9e:d6:0c:13:ec:61:96:2f:d5:
1d:da:d2:bb:2c:b5:ac:47:04:71:c7:fb:33:da:0e:
dd:39:d6:5c:00:c0:b2:23:6d:95:dc:07:2d:6f:94:
ec:cc:a3:f3:a0:55:8e:6c:9a:3f:4c:c6:6c:8d:2d:
bd:44:f7:d2:af:ed:81:41:1f:a6:a1:61:75:40:ee:
dd:bb:49:40:d7:a5:8a:b0:09:38:5d:d2:f3:a1:74:
85:6d:0f:fd:60:b8:91:19:7e:97:d8:0e:cb:ff:92:
2a:e0:bd:66:55:f0:31:7b:ef:d9:5a:4c:78:c3:9c:
af:b4:63:b2:b4:46:7f:ad:55:f4:26:52:4d:a3:17:
94:49:6b:b6:b1:41:32:83:52:77:db:bb:8a:40:52:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3E:C2:01:19:01:CB:73:E2:8C:F2:CF:73:08:45:52:B2:16:8D:0D
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:42:cb:03:40:e7:74:34:08:2b:66:41:ae:20:5a:45:21:4a:
49:23:da:56:80:84:cd:fd:c5:d1:ba:bd:88:68:5b:16:30:4f:
bf:7b:1b:42:cd:ed:6e:a7:a2:9c:dc:e7:89:ab:82:48:b2:fc:
fb:4f:f1:19:80:cb:09:73:a2:85:45:e6:a0:dc:ad:11:50:fd:
04:11:04:94:6d:4c:1a:b4:72:79:6d:be:68:2f:90:34:bf:98:
42:5f:21:96:62:fc:12:a4:d0:5c:40:d9:22:27:f1:f9:01:a9:
97:40:d0:22:e9:a3:b8:07:50:df:20:cc:e6:83:c8:fc:57:66:
f7:16:45:e0:e1:f6:f1:b4:4e:26:bd:68:4a:39:a5:21:a2:bf:
56:cb:03:d5:a3:c1:b8:6a:ac:6b:9a:9c:e1:52:c6:01:5a:87:
75:15:72:d3:d5:84:e8:1d:db:c2:2c:56:42:63:90:6a:7b:84:
56:8a:fa:58:b5:c5:54:d1:9a:13:90:8d:46:5d:c9:63:a7:0c:
7b:a6:1c:07:45:14:ad:d7:a4:da:12:bd:84:c2:45:07:99:36:
1f:e8:61:48:6a:77:5e:10:56:c5:5a:d6:da:89:16:4f:65:3d:
fe:26:1a:46:57:c0:51:7a:93:cc:e9:c2:60:52:55:d3:43:93:
e0:f6:4e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:17:45 2025 by rpki-client