Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
File: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft (raw, json)
Hash identifier: bn9dHTX83Ctm5XqNX/vu2/84YBVjOZgEMV/oB/ChPQY=
Subject key identifier: AE:FF:83:94:D8:34:30:79:B3:FD:5A:81:10:7A:14:FA:13:83:81:C4
Authority key identifier: C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
Certificate issuer: /CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Certificate serial: 0198CAC9AE7783668AF2E0C07D798E9E8C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
Manifest number: 0632
Signing time: Thu 21 Aug 2025 04:01:11 +0000
Manifest this update: Thu 21 Aug 2025 04:01:11 +0000
Manifest next update: Fri 22 Aug 2025 04:01:11 +0000
Files and hashes: 1: ZWfwRz9SdF5HlUEU_xQsfm2pEuc.roa (hash: FPKU4sBZtKV03dopSyyPb4q2mr5BiiBfqidcOPbFyqg=)
2: o4qbcCQCij_4lrM4fuG-GZzDpjs.roa (hash: OQOBy/7xXgD89cYeKeQCwe26Q3oYa0ii7bEbJEXvS2M=)
3: wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl (hash: b3nrHFcrvzXBTT+lvNscBYEMNQR/X+njve0DS2y3vtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:c9:ae:77:83:66:8a:f2:e0:c0:7d:79:8e:9e:8c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2a29cc518010f7676353ff296644d9bd4a355cb
Validity
Not Before: Aug 21 04:01:11 2025 GMT
Not After : Aug 22 04:01:11 2025 GMT
Subject: CN=aeff8394d8343079b3fd5a81107a14fa138381c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5f:b1:0a:3e:6a:3f:c6:3a:2f:22:00:99:16:
04:f7:2a:19:09:7e:f3:49:db:13:ab:43:b8:da:05:
1c:43:54:49:86:8b:fc:8c:aa:c1:6b:eb:af:fc:d7:
f7:25:c2:a9:a7:78:09:30:d2:60:a0:0d:6a:cb:92:
b7:7a:cc:4e:12:42:e4:90:7b:de:93:11:db:93:0b:
f0:de:85:54:0e:b7:5a:39:03:73:85:cc:12:dc:5b:
90:6f:88:6b:03:34:4a:28:3e:9f:81:26:a7:1a:79:
7c:44:22:31:83:dc:30:e0:19:3f:1f:00:2a:14:86:
bb:ca:48:28:f9:3e:22:a1:e5:c4:71:7e:6f:b1:59:
bd:d3:2f:19:3f:6c:53:2a:b8:d7:db:f8:59:69:a1:
73:dc:91:a4:87:47:42:6e:97:06:e9:d8:68:cf:76:
98:0d:66:e3:28:f0:28:b4:0b:99:41:5a:6f:52:c2:
f8:d7:c5:f4:dc:65:b6:43:07:7d:40:6a:fb:8d:45:
f0:77:90:85:48:12:af:ae:cc:71:5f:2a:f3:f7:58:
ad:71:38:c1:3e:19:d6:78:36:32:c1:ef:10:3c:eb:
a0:33:f1:85:e7:05:a8:10:4d:28:95:ba:b9:35:b3:
b7:b0:97:ec:b2:12:11:18:63:66:f8:8f:22:a6:cb:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FF:83:94:D8:34:30:79:B3:FD:5A:81:10:7A:14:FA:13:83:81:C4
X509v3 Authority Key Identifier:
keyid:C2:A2:9C:C5:18:01:0F:76:76:35:3F:F2:96:64:4D:9B:D4:A3:55:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/39ede1-bfe1-472e-874c-7c1f0cdfce77/1/wqKcxRgBD3Z2NT_ylmRNm9SjVcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f1:35:ea:a1:c9:27:a1:3a:3d:8b:5f:5b:70:a6:3b:13:d1:
49:98:e0:d7:1c:fb:5b:41:36:3a:da:d0:3e:d3:55:04:f7:43:
8b:2e:4f:79:78:e5:a8:3a:ca:74:58:e5:66:55:32:68:7f:66:
2e:5d:b6:c7:b1:5c:ac:cf:9e:38:0b:b0:72:c0:0a:05:53:49:
1f:ed:f5:f2:40:06:0c:f2:ce:53:50:08:1a:42:be:4a:1c:58:
35:41:1d:e4:b1:e7:a9:46:10:c2:7e:86:ca:d5:bc:26:40:23:
22:9b:b1:49:4f:3f:5d:2a:a6:44:9e:56:87:1b:12:85:ac:05:
bb:30:a3:36:fc:a1:bb:83:02:4c:70:34:8d:99:09:28:3f:52:
37:1f:f1:82:e7:62:82:41:4e:07:46:96:d5:f7:68:a8:aa:7c:
8b:c6:18:31:76:0b:93:94:cf:ed:c7:aa:7e:08:4d:c3:2f:1b:
8d:75:e1:1d:2b:74:70:35:29:60:a1:cb:c9:6a:05:27:2d:03:
ab:be:ab:cf:68:ad:40:4d:8c:13:16:74:a0:2b:37:1b:93:f3:
52:a4:e5:83:ed:95:23:97:dd:b9:ad:09:88:b7:e5:77:9c:0d:
e2:cf:d6:7b:b9:90:61:bf:0c:88:72:94:26:f5:8c:7e:4a:70:
45:31:b1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 12:46:22 2025 by rpki-client