Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
File: wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json)
Hash identifier: hBXcUrOLrWbQ6cv/xOqYdXnUWPHO5s0CWu1OmY+0mco=
Subject key identifier: 73:D5:87:5B:A2:4F:6E:00:68:54:A6:CF:AE:AA:EA:70:07:64:EF:CF
Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
Certificate issuer: /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Certificate serial: 019935022DCCDBD7AF23C7CDB70E8F5A950D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
Manifest number: 12A1
Signing time: Wed 10 Sep 2025 19:02:39 +0000
Manifest this update: Wed 10 Sep 2025 19:02:39 +0000
Manifest next update: Thu 11 Sep 2025 19:02:39 +0000
Files and hashes: 1: 2tiVBKWJb3sKibII0w4_JEP8cX8.roa (hash: yXLW83i0e/6bCMs04Sj4WwVKDgNnsbMkg4zpZba2Js0=)
2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: 5pzGrULcaEm4C5LzYdSqUnyMMi3seUqa17edVOmA//Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:2d:cc:db:d7:af:23:c7:cd:b7:0e:8f:5a:95:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Validity
Not Before: Sep 10 19:02:39 2025 GMT
Not After : Sep 11 19:02:39 2025 GMT
Subject: CN=73d5875ba24f6e006854a6cfaeaaea700764efcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:fb:fd:5b:de:2f:9d:5e:71:4a:62:fa:61:
19:d2:a6:21:a7:d9:7f:36:0f:80:76:39:1e:b4:9e:
8d:70:27:61:cf:fd:0f:37:d2:f4:56:d6:a7:cf:dd:
84:1b:44:33:1d:26:02:ed:eb:71:b7:14:db:4a:4e:
7b:26:e4:89:f1:f6:65:32:a6:2c:47:3d:13:2d:ef:
c1:ff:ed:b2:3d:4e:a6:87:d3:5a:d2:c1:3b:b2:e5:
4d:1a:0b:da:cf:56:bc:98:7c:40:61:e3:95:ed:25:
fc:30:1d:89:96:14:6e:e9:d2:4b:ff:7f:5c:bd:1d:
5a:7a:e6:f9:43:41:63:2e:dd:30:54:84:f6:dd:d7:
92:8a:3a:f5:9d:ec:ca:5b:33:8e:09:cc:81:82:33:
06:54:b7:5a:3d:3c:31:d7:5f:61:e8:c9:8f:72:ae:
d8:47:87:70:4a:ce:9d:57:d8:33:1c:2e:37:65:18:
68:a9:7a:4d:f9:2a:55:a3:99:bf:5e:1e:8d:00:03:
73:4b:7c:87:c5:84:6e:7c:29:d7:1b:7a:7c:00:96:
a5:01:80:46:2b:29:5e:c5:7a:4d:02:22:d8:f1:13:
85:ee:a5:13:dc:a5:03:6f:46:23:a9:f8:60:f5:44:
f7:83:03:04:78:81:0e:93:46:64:9b:fb:ec:59:f9:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:87:5B:A2:4F:6E:00:68:54:A6:CF:AE:AA:EA:70:07:64:EF:CF
X509v3 Authority Key Identifier:
keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:22:3b:4a:9e:59:97:22:b5:56:6e:28:7d:e6:32:1f:5d:fe:
32:5d:e4:5a:59:7e:ce:5d:10:00:46:b3:22:93:b4:01:28:f6:
31:5f:a4:72:1c:fe:eb:31:98:7a:f5:e5:f1:bb:78:32:8e:a7:
cb:9d:3e:d4:50:dc:67:0f:e9:87:db:ab:36:fa:41:3a:ed:9f:
58:f4:49:18:66:72:3c:90:e6:b1:8b:fc:79:86:ef:66:2d:47:
d5:27:e5:60:da:5a:b7:61:53:17:c1:b3:9e:f4:02:93:5d:1b:
58:28:3d:51:e5:d6:99:3b:92:1a:fb:8e:99:71:dd:5f:4c:71:
76:9e:d7:23:45:9d:ae:da:2b:7c:40:d1:e8:c3:61:fc:18:6e:
9a:be:27:d4:d5:19:62:2a:a0:6a:14:b0:2d:56:32:2a:9e:bf:
b4:e2:64:ee:3f:44:5a:f6:34:1e:5f:3e:8a:57:af:fd:31:9e:
09:59:e8:bd:c9:e9:83:fb:3e:75:37:ee:63:66:f3:1e:e7:64:
c8:e5:f0:e8:59:56:7e:f9:92:5a:d1:c5:28:a3:b5:54:d5:95:
82:fa:e0:a2:20:e7:ee:54:7c:cb:13:1c:29:45:54:1c:b4:fd:
90:43:c6:a3:bf:93:09:5d:63:33:bb:3c:e3:b4:98:f3:39:70:
1d:dc:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:34:18 2025 by rpki-client