Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier: o7LH3WdQ9xGIvtoz4CQV2PAEWOpbxyxCjN9ytgJ0Xd4=
Subject key identifier: DC:B8:5D:8F:8E:B3:FA:EE:87:7C:3E:2A:FF:77:50:31:A4:E5:72:2B
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial: 0199225583A7A954A7601563BE6C4513DAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number: 0BE6
Signing time: Sun 07 Sep 2025 04:00:53 +0000
Manifest this update: Sun 07 Sep 2025 04:00:53 +0000
Manifest next update: Mon 08 Sep 2025 04:00:53 +0000
Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: HCVtM03zcALEKFSTFq8+gqu8J1VJf6f+p/WiSgmCB5g=)
2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:83:a7:a9:54:a7:60:15:63:be:6c:45:13:da:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Validity
Not Before: Sep 7 04:00:53 2025 GMT
Not After : Sep 8 04:00:53 2025 GMT
Subject: CN=dcb85d8f8eb3faee877c3e2aff775031a4e5722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:83:22:31:5d:83:68:d4:1b:33:17:c5:5f:
cd:d1:1c:d1:d0:bd:09:7f:9a:cb:29:84:10:fd:b1:
98:c9:20:05:1e:f5:fe:d7:3b:58:3e:07:1a:c5:68:
9c:61:c4:dd:21:c0:0e:26:2e:22:13:56:65:3e:12:
ec:01:f1:86:e8:22:de:99:f6:af:a9:51:3a:f2:aa:
48:c9:d5:38:e6:e7:72:86:ef:df:bb:59:41:61:21:
b8:9a:25:84:ee:81:59:9e:75:fa:83:8b:fa:e0:30:
b6:65:5b:7a:da:6e:19:2f:2a:d5:53:48:43:c8:44:
80:50:80:9c:81:fc:30:7e:db:21:0b:b0:3d:5b:57:
0b:82:06:92:b9:dc:2d:40:6b:9e:69:78:84:42:98:
1d:a2:99:66:9a:99:44:c8:d0:1f:18:17:bd:46:62:
98:e3:dd:b9:2e:54:33:fd:9a:b0:8a:3f:c2:32:8a:
a6:47:3f:d1:39:2d:dd:55:77:cc:26:aa:31:0f:d2:
dd:ee:25:d3:a8:2a:3b:13:b7:11:df:2f:43:fc:49:
2a:50:dd:e1:91:34:a9:b2:f5:03:dd:6e:81:7f:9d:
d3:e0:8f:ff:e2:31:40:78:d8:c6:41:b7:39:75:1d:
2f:e4:f8:01:33:ac:15:cb:cf:61:d5:12:96:91:8f:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B8:5D:8F:8E:B3:FA:EE:87:7C:3E:2A:FF:77:50:31:A4:E5:72:2B
X509v3 Authority Key Identifier:
keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:c8:98:58:b6:cc:81:bd:ac:08:2e:14:aa:d9:5a:9e:5f:
36:b4:78:d9:a0:65:3e:93:c5:47:8c:de:6c:d5:f3:f0:24:20:
70:2a:1c:e2:2a:1d:35:90:6b:49:2f:20:1f:76:5a:52:43:8d:
7d:63:03:94:c1:4b:77:83:76:72:98:dc:39:ce:ca:8a:8d:1b:
10:18:51:f4:23:de:b4:41:29:67:f3:dd:72:6d:c7:ef:8a:4b:
3f:97:b3:c5:0a:94:be:14:57:9f:51:cb:12:8a:5c:d4:98:81:
b1:36:18:9b:ea:48:23:61:63:14:e6:e3:b3:72:c9:89:16:f9:
65:07:a7:8c:8c:6c:8e:74:38:c9:fa:9f:d4:46:85:66:d7:3e:
29:8e:b1:a7:06:90:f6:c4:f7:d8:6d:1d:60:d1:f9:d6:ab:eb:
a2:ef:b1:65:2d:0b:57:68:d6:57:ff:4b:e0:82:1d:43:b9:f3:
1c:33:dc:bc:24:a5:c9:e9:38:88:45:13:73:04:62:f0:94:ba:
3e:f4:c8:5f:a6:eb:fc:7c:5b:1d:04:fb:4c:3c:13:a0:3a:10:
09:39:04:e8:3d:6f:59:99:c8:81:97:a1:b9:2f:c8:3b:d5:48:
a9:c0:ba:a1:b8:77:02:c7:f6:71:c0:35:6c:ac:dc:cb:c1:4b:
24:fa:ea:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:04 2025 by rpki-client