Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier: FHH7d6gtyt7tdBzGEYshFXm58s3RXV+1r8U5DqPTc4w=
Subject key identifier: 4C:68:F9:77:DC:0F:36:D4:5C:CE:4F:2F:C6:01:25:CE:4A:D1:51:EB
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial: 0199239F028A3D9961078D453E40AC35CB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number: 106C
Signing time: Sun 07 Sep 2025 10:00:47 +0000
Manifest this update: Sun 07 Sep 2025 10:00:47 +0000
Manifest next update: Mon 08 Sep 2025 10:00:47 +0000
Files and hashes: 1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=)
2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: CORCOzDCnADUVQoqVYaXQUbF6ncZ7FnoCz58oGlC/mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:02:8a:3d:99:61:07:8d:45:3e:40:ac:35:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Validity
Not Before: Sep 7 10:00:47 2025 GMT
Not After : Sep 8 10:00:47 2025 GMT
Subject: CN=4c68f977dc0f36d45cce4f2fc60125ce4ad151eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:13:ee:82:aa:5a:ab:95:79:59:43:24:0d:
d1:60:9c:41:c9:f9:26:14:d3:32:26:78:23:a9:32:
c1:91:7b:d6:8b:fb:da:08:27:30:d1:08:c8:c3:d6:
91:c7:1e:dd:9b:86:9a:f0:dc:0f:ee:41:4c:f8:7d:
dd:c9:71:04:a6:a5:3f:e6:10:80:2f:87:9c:10:3d:
60:65:f4:e8:27:84:d2:3a:21:f2:1e:4f:5d:4a:b6:
3b:ee:e5:93:09:a8:c0:20:bd:1c:b5:25:01:9c:ba:
36:35:c3:ba:dc:ff:b9:15:92:f5:ee:16:44:80:85:
f7:3f:9f:a4:0f:10:64:98:2a:18:bf:f9:73:b4:0c:
52:37:81:3f:f0:bb:44:f9:65:fd:ae:33:f0:17:03:
6c:d8:97:b3:d0:f5:0f:e1:cd:0a:06:9c:89:f0:8f:
95:e4:80:67:33:ad:b5:67:8a:8b:07:f3:47:cf:e8:
19:52:ce:11:bf:73:e1:6a:4f:76:bd:fd:fb:e1:ed:
68:41:b3:49:00:8b:75:46:bf:39:ab:bf:86:c2:17:
da:7d:51:a5:4c:86:18:83:01:2d:f4:43:dc:c6:51:
65:88:dd:c8:32:3c:69:ea:7c:16:11:1c:9e:20:23:
a3:88:c5:e5:b8:e7:74:e1:cf:71:fc:fa:f7:c6:c3:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:F9:77:DC:0F:36:D4:5C:CE:4F:2F:C6:01:25:CE:4A:D1:51:EB
X509v3 Authority Key Identifier:
keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2f:0e:b5:8e:74:50:61:d3:54:ed:06:d8:9e:a3:42:60:9d:
b9:04:ec:52:e1:08:fa:da:6c:5c:56:16:f7:0e:5e:c2:5d:5d:
e9:f9:68:ca:f6:c0:16:85:4e:93:bf:b2:d6:79:f1:b7:72:12:
73:d0:0b:58:91:25:c1:07:f2:6c:91:5d:f6:00:77:96:bc:42:
cd:d5:51:f8:ba:f9:1c:53:14:0a:30:18:92:5b:f0:7c:d7:36:
79:68:ba:b4:f1:26:6d:e4:f7:7f:9a:f9:63:8d:ec:00:5c:34:
7b:6f:25:b8:e9:74:bb:16:8d:e7:8b:5d:ec:18:8e:b5:e3:21:
af:7c:cf:68:bf:81:d0:ef:e5:d4:70:5c:b1:66:dc:1d:63:b4:
17:60:61:84:9b:c7:8b:f5:7b:94:1f:6f:c8:4d:1f:71:08:62:
9b:f7:4e:1c:4a:fc:21:e7:25:5b:4d:30:b1:01:dc:34:b7:9a:
3a:63:63:ee:59:3a:32:b1:93:16:72:c1:a8:de:6b:d9:ae:c8:
2e:53:c0:be:da:1e:e4:19:d7:92:b1:d3:f1:0e:04:27:a2:9a:
a1:4f:42:af:05:03:c2:14:3c:68:9f:4e:ab:a0:b0:53:7c:0f:
09:81:66:09:4b:df:31:01:0f:88:fe:a4:45:1b:c1:24:2d:55:
87:4b:ef:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:36:43 2025 by rpki-client