Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
File: wtKiNOIkv4eZby8N9Vnq2IL55lE.mft (raw, json)
Hash identifier: iK3y+MzGRKkigaw4Oy83UrcTSHVJ3FGsb+XCpq9M8Bk=
Subject key identifier: 1B:E4:12:7F:F2:99:33:8C:46:EC:FF:A9:92:F8:84:12:E8:C2:8E:DD
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 01992F35A53C16EB4E8DEE3F63763D99BC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
Manifest number: 1687
Signing time: Tue 09 Sep 2025 16:01:08 +0000
Manifest this update: Tue 09 Sep 2025 16:01:08 +0000
Manifest next update: Wed 10 Sep 2025 16:01:08 +0000
Files and hashes: 1: 2oAVyU2seJGTQFfvnoLEW0LxBMw.roa (hash: ZURqts9j5VKp8XJN1Pz3dvi3R29PhjPq43deEFPHUGM=)
2: AT0dJX8We-n1OQnzvfJggA9FrB4.roa (hash: 9UAeHkptLtx/0ySMZUXtLEVDmGoLUOk5U9+no/9RFDk=)
3: wtKiNOIkv4eZby8N9Vnq2IL55lE.crl (hash: 1+bzgZFS/wdnvJKAOlSVBi8xV84QvnqEXlm19aICDI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:a5:3c:16:eb:4e:8d:ee:3f:63:76:3d:99:bc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Sep 9 16:01:08 2025 GMT
Not After : Sep 10 16:01:08 2025 GMT
Subject: CN=1be4127ff299338c46ecffa992f88412e8c28edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:20:cb:c5:30:50:4c:d6:70:6c:44:79:8d:f4:
11:7c:88:03:49:63:20:9d:a9:72:24:82:f9:0e:4d:
27:ba:c4:a1:dd:51:d4:6a:7e:02:16:5a:45:6a:8c:
8a:a4:fe:c7:2a:56:b2:be:ae:a2:6a:7e:67:4a:e3:
58:36:c0:e8:fd:20:45:c4:67:d9:77:01:7c:79:05:
90:f5:a6:d4:4f:d8:16:ef:63:57:92:6c:46:5f:48:
e6:16:d1:bd:e8:3b:10:f3:61:0a:2a:11:ef:0c:20:
c3:77:67:64:c2:b7:a8:58:f6:7b:4a:70:aa:ec:b8:
d9:57:02:89:36:f2:5b:46:fa:a9:96:4b:f3:02:6e:
c1:39:c0:dd:77:97:60:1f:d4:0a:0a:71:c5:c5:8e:
34:76:77:47:c9:9f:70:12:4c:66:bb:75:80:95:64:
70:b9:20:fc:7b:06:d1:23:37:04:9e:ae:58:ec:e6:
c2:6c:76:0f:5a:0a:b0:f2:5c:92:9e:06:fa:31:de:
ee:e6:c0:97:55:74:12:1a:68:fc:98:3e:04:c8:62:
8a:d2:2a:24:ff:3f:ac:19:6b:44:29:03:4a:39:db:
a7:8e:ad:2b:85:7c:2d:a8:95:2e:c2:6a:b0:bd:23:
80:ee:65:51:d9:b7:27:84:b2:da:92:e0:45:24:7e:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:12:7F:F2:99:33:8C:46:EC:FF:A9:92:F8:84:12:E8:C2:8E:DD
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:2e:80:d0:d4:9e:5e:ca:65:e9:3a:16:d9:48:c7:6b:03:ef:
9d:c3:c7:3c:32:18:b5:f7:19:bf:fa:13:cc:fd:d0:b9:76:f1:
d5:cc:ef:b4:3d:ab:e7:0d:13:1e:a0:02:a6:f6:37:bc:fa:1f:
a7:a0:f6:46:4b:19:7b:dc:a2:3a:59:ef:22:a0:b1:e9:0d:97:
47:71:1c:7f:15:14:f2:39:9e:6b:01:8f:6a:d3:d2:8a:d9:0e:
dd:0b:65:a7:c1:d9:9e:d8:55:13:b0:e6:4b:e0:02:58:7d:aa:
cb:62:4a:21:6e:3f:c6:22:2f:74:47:a5:a2:b5:64:ec:18:c6:
c9:b6:40:d5:2e:bf:c1:86:a6:f6:65:e4:b0:6a:21:dd:99:05:
f7:f0:7c:97:d0:61:ad:21:1c:52:9e:e9:0c:54:5b:98:3b:c9:
c4:91:33:ac:23:cf:3d:ce:e7:c3:0c:6a:2a:3a:93:81:e4:e5:
20:ff:09:6a:dd:63:9d:80:aa:d3:b1:c9:22:e9:e0:27:8c:80:
02:37:ef:a9:05:40:30:f7:8a:a7:ac:3f:bc:47:c9:e7:1f:c4:
0d:25:e7:7c:85:d0:ee:f2:ce:18:bc:37:a9:10:04:64:f2:b4:
73:f3:bd:2b:04:be:68:54:43:56:2d:ca:52:25:31:3b:63:a8:
a2:b3:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:06:36 2025 by rpki-client