Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: 5MYAh4n9cDraICDc7TAPOJwkwJz/SNnfGsILII/7qM4=
Subject key identifier: DD:59:47:6B:AA:FE:D4:08:9A:83:0C:36:C7:5E:D3:6B:4A:55:91:1C
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019922FA19781F7AE5C5D8B24938535FDE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 08AC
Signing time: Sun 07 Sep 2025 07:00:39 +0000
Manifest this update: Sun 07 Sep 2025 07:00:39 +0000
Manifest next update: Mon 08 Sep 2025 07:00:39 +0000
Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: UsoVbGLZnt9ToE7L88KXbVppIjncHOZjbHRIklTMcOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:19:78:1f:7a:e5:c5:d8:b2:49:38:53:5f:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Sep 7 07:00:39 2025 GMT
Not After : Sep 8 07:00:39 2025 GMT
Subject: CN=dd59476baafed4089a830c36c75ed36b4a55911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:43:6b:f7:b2:12:c4:2d:be:74:c9:40:17:a1:
2f:8c:81:64:9a:a7:d1:ed:d6:4f:a5:6b:2b:88:90:
43:ec:ab:6a:ed:bb:d5:f6:c2:16:f9:2c:9a:db:76:
b9:85:2e:b7:fa:ec:a4:3d:1d:d7:63:0d:ec:49:a8:
56:76:f5:2b:56:03:de:18:1c:f8:33:2e:00:62:c9:
d3:00:12:8b:23:61:a2:38:09:71:03:a7:f5:70:0d:
c7:a7:9b:50:d3:75:e6:38:b6:da:d2:92:64:a0:64:
83:1d:0e:d0:9f:9b:b4:26:83:08:8b:e3:c4:e4:8f:
65:fe:23:c4:c6:0e:b0:f1:43:56:f0:b8:a7:3e:3d:
7a:7f:66:c5:75:2e:36:57:03:6c:b6:33:0f:fb:48:
15:8c:7d:de:69:3d:67:df:d9:de:e3:be:96:2d:56:
db:9c:d7:8c:3c:9f:95:0a:d1:78:ba:8c:81:a4:bc:
5b:59:1c:0c:9d:26:73:43:e3:4a:b5:ce:11:ef:1d:
59:3c:11:35:29:74:36:a0:5f:db:df:b1:cb:8c:69:
7b:a6:30:74:69:e8:21:47:3e:8a:5b:d4:d2:d7:ba:
6d:a2:d6:bf:4a:ce:d0:01:89:89:b6:b3:ed:60:ad:
83:a7:f1:07:3d:d5:ed:7a:0c:27:1a:42:5a:ed:48:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:59:47:6B:AA:FE:D4:08:9A:83:0C:36:C7:5E:D3:6B:4A:55:91:1C
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e9:57:6a:a9:80:e9:38:e4:47:37:ee:bb:ab:f9:45:5b:65:
38:4f:6e:1a:9a:36:e1:3e:d9:ad:6a:47:51:88:52:a8:ce:22:
ea:e9:f3:62:30:60:12:9b:8e:76:aa:d0:37:1a:68:2d:cc:2d:
2e:84:0a:e5:c9:d8:fd:a8:06:7a:90:91:ba:85:a4:bf:dc:5c:
63:ab:5b:bf:ae:53:3a:33:d4:7a:aa:b0:32:28:72:12:f4:f3:
9f:f1:4d:0d:ab:09:27:69:87:e4:71:29:81:52:77:b3:78:59:
6c:b6:4f:5d:25:01:58:be:05:01:e6:e6:1f:9e:12:55:0d:63:
99:4f:f3:33:cb:32:98:2c:9c:07:24:7b:ab:35:48:ce:84:b7:
94:e1:73:98:fd:b8:e8:fe:8d:76:a4:a6:3b:21:af:6c:ba:80:
cd:81:f8:d6:ae:4f:b2:d8:85:85:b9:7a:2f:9b:96:f3:9c:91:
ee:28:43:de:31:d4:ee:5c:b5:9c:76:f2:6c:9c:6c:f5:9d:73:
0a:3b:16:5c:69:61:67:0c:35:39:41:f7:55:51:0e:bf:8b:0d:
ad:ea:ef:7c:1e:c5:d0:9c:4f:32:96:df:78:ea:5c:1a:0c:22:
6c:c6:c4:01:4f:08:0d:0d:f8:ed:24:01:81:26:b0:f3:82:df:
42:44:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:46 2025 by rpki-client