Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: GDeyi8Wi6FwlixPN5FuzFJvz4CV4EFTpkxwDIhxu5fw=
Subject key identifier: 0B:35:15:45:CE:D6:32:6A:90:B2:15:5E:99:8F:65:5E:6C:BD:40:B3
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 0199530ABA74ED23EA9BC40CCBB6F75CD400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: 033A
Signing time: Tue 16 Sep 2025 15:00:35 +0000
Manifest this update: Tue 16 Sep 2025 15:00:35 +0000
Manifest next update: Wed 17 Sep 2025 15:00:35 +0000
Files and hashes: 1: HfvQGv3fkx8EbAZWjLyDRRI_Z8o.roa (hash: L6g/T7YHsTiEPnLp25ze+rccMiIRyJAPI1nh81w0wDo=)
2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: 0D+217suH8hYXYfUC8q4ybzYSV/Ep+8fPCxjM7Br3l0=)
3: x4NMd_GpZKC3wjvt7UJp4kwmNNg.roa (hash: KiYRpe0+Ri1YnwEQ5QKwXeajhvNgmP7QYMIxZrED/ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 13:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:53:0a:ba:74:ed:23:ea:9b:c4:0c:cb:b6:f7:5c:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Sep 16 15:00:35 2025 GMT
Not After : Sep 17 15:00:35 2025 GMT
Subject: CN=0b351545ced6326a90b2155e998f655e6cbd40b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dc:ff:fe:4c:88:b6:59:27:f1:60:ea:ec:7f:
ee:d8:89:e0:93:2f:e9:c0:c4:cd:68:32:9a:1c:04:
4b:15:84:bb:3a:41:2b:68:be:0e:64:66:3a:00:f0:
f2:e9:45:ac:4e:87:fc:aa:e2:88:93:ea:5e:10:4f:
92:82:d9:f1:4a:dd:b2:b4:4a:b4:fa:5e:1f:bd:64:
88:4a:b2:62:fd:73:88:91:66:f7:ba:a6:2d:35:2b:
8d:5e:5b:50:11:26:c8:f2:36:47:5b:37:d2:3a:71:
2c:2b:07:9a:d1:ff:46:55:98:0d:7e:aa:35:64:2d:
05:72:e3:90:31:3b:cc:7a:71:f9:82:63:e4:f2:52:
29:52:24:ed:73:fc:4c:46:06:f7:89:4e:84:87:c6:
1c:80:3c:2a:74:9e:33:f6:fb:0c:3b:7a:88:07:fe:
58:6a:55:2c:8d:1e:59:a0:e8:be:c3:b5:1e:0a:64:
8d:da:ab:ec:e4:95:c4:37:df:fb:cb:dd:66:62:a7:
cb:dc:b3:5c:ea:96:66:8b:f5:4d:9a:09:11:a4:52:
40:61:12:0a:c2:00:4d:47:3f:04:a1:eb:1a:04:51:
47:9a:dc:87:f8:f3:4b:43:d9:66:1b:59:a1:a8:39:
f2:ab:c9:d5:27:76:17:63:89:66:b1:78:b3:b7:6d:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:35:15:45:CE:D6:32:6A:90:B2:15:5E:99:8F:65:5E:6C:BD:40:B3
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:73:20:5f:ed:d3:a8:3e:fc:d9:dd:84:1b:1a:32:8e:c4:2c:
fa:20:bd:34:e8:12:31:99:fc:ea:76:ff:99:82:d9:03:cf:08:
87:14:28:76:c2:1c:50:00:d3:aa:02:4e:98:81:9c:24:43:fc:
1c:05:84:c6:d1:5b:09:5d:ab:80:c7:28:08:c9:ab:22:f6:ee:
a4:96:59:14:3f:ab:5c:98:81:9e:25:08:05:b5:95:56:17:5a:
ec:84:e6:9d:d6:68:62:a7:8c:27:f8:fa:fc:35:68:58:4e:f2:
69:9b:e7:0f:74:ba:09:40:05:1d:20:2e:4c:6b:30:2a:52:2b:
f9:61:f0:fd:80:e0:ee:96:d3:d6:26:ea:9e:b9:8d:00:69:2e:
5f:31:58:51:4c:e2:ce:8e:95:a2:9d:2f:75:a7:46:a4:ac:89:
0c:4e:af:b5:9a:4b:28:46:bf:79:22:7a:86:6a:9f:5b:5f:43:
37:fa:4b:f5:e7:f6:e7:f9:c4:c2:4e:2d:31:c0:86:fc:9e:f5:
ea:9c:43:51:37:76:7f:b0:25:29:1b:6e:1c:f0:62:b9:e3:93:
5f:3c:0a:46:a3:d8:fe:c3:84:6b:b6:09:70:db:48:66:69:dd:
78:74:76:08:94:0b:00:a5:14:41:94:d9:79:93:71:c5:c9:bd:
e2:57:6b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 22:37:57 2025 by rpki-client