Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
File: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft (raw, json)
Hash identifier: ywhGkC6lqSIuq0VsYfGMutxi1fr4vCQPqkC+DPUnr3Y=
Subject key identifier: E4:ED:4E:BE:A7:BE:D3:57:76:1A:02:C4:AD:7A:0F:BD:D2:62:E1:EB
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 019922FABEA1CAC99B36AE2A1EF5745105E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
Manifest number: 147E
Signing time: Sun 07 Sep 2025 07:01:22 +0000
Manifest this update: Sun 07 Sep 2025 07:01:22 +0000
Manifest next update: Mon 08 Sep 2025 07:01:22 +0000
Files and hashes: 1: 3vk_cNMUWC-JUrbyIXBN2gny1YM.roa (hash: 5UI1dk/WNT1Jzxh8ssSrm2cZ8VMJvaL80lHMAJV1sdM=)
2: hm311e8NJq4CeLUwG2WwDwuRkEo.roa (hash: q59x20MyNrLs1Zhrc2YWC53c5eh99JxfPMp5OIsclNU=)
3: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl (hash: x5GLuHOhiuv3aQpw/A4v5dbiKBsKItYZqT+BAYkNE4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:be:a1:ca:c9:9b:36:ae:2a:1e:f5:74:51:05:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Sep 7 07:01:22 2025 GMT
Not After : Sep 8 07:01:22 2025 GMT
Subject: CN=e4ed4ebea7bed357761a02c4ad7a0fbdd262e1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:b6:2d:a3:cd:28:26:c2:34:b4:80:51:85:
ea:0f:4a:31:17:5a:ff:d8:41:48:33:72:2f:b5:0f:
2b:79:82:a9:5f:e2:72:4b:8d:41:b0:09:c2:40:f8:
35:7f:d4:e9:c5:5b:9b:ea:59:c9:f7:cc:67:94:d3:
c0:6b:a4:0c:39:86:87:5e:87:4c:91:79:c7:e2:64:
c2:a7:9b:67:0f:de:8e:3e:e0:aa:4e:f9:1c:56:a4:
d7:2c:c5:bc:9b:44:be:fa:db:45:dc:f5:57:97:4f:
37:7d:7e:71:57:97:2a:b8:61:40:70:89:ed:92:7d:
5c:df:6f:6d:fd:f2:05:9a:cf:dc:4e:c4:6a:24:c4:
3b:1f:a3:08:c8:92:cd:ce:f8:ad:9f:b6:c2:25:24:
d4:61:50:69:74:e0:f8:92:fb:5e:19:53:d6:c5:b4:
6c:28:5a:76:85:92:0f:5b:e1:9e:f0:4a:47:26:b7:
11:76:af:fd:da:4b:4a:a9:86:14:8d:26:74:c1:cc:
f2:ef:6f:b2:4d:2c:94:b8:a1:18:a4:cc:b1:dd:40:
4d:c1:16:bd:1b:73:8c:63:fd:b6:72:2d:e2:02:93:
46:3a:a8:50:09:4e:67:57:45:02:ec:75:f7:c0:df:
b2:dc:1b:8c:47:3f:ed:f6:8f:cf:ce:1a:db:2c:0a:
9b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:ED:4E:BE:A7:BE:D3:57:76:1A:02:C4:AD:7A:0F:BD:D2:62:E1:EB
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:22:91:b0:89:3c:f0:77:ca:18:92:23:be:b9:57:3d:92:d3:
f9:39:f1:b7:6b:2e:cf:b8:f5:9c:2f:ec:88:90:47:a3:6e:dd:
39:1f:e9:8b:ef:74:fb:a3:b6:7c:72:52:9a:7a:62:36:c2:fc:
f2:74:0e:1c:7c:8e:1b:19:c7:2e:da:c8:90:a2:fb:41:bd:2d:
85:b7:d0:27:95:a4:ea:19:ef:0d:11:a6:8e:52:47:e0:12:40:
02:ce:93:0d:a7:46:95:9d:63:86:2c:f4:5e:d0:aa:bc:9d:82:
2e:54:e2:89:b8:cb:ac:df:d9:fe:6f:81:5b:23:2a:e9:0f:65:
12:62:5f:e3:19:7a:ab:be:d7:4d:e9:f7:cf:03:59:45:9f:26:
73:c6:36:cf:66:95:75:78:fb:07:c8:18:5b:a6:0b:29:d3:f1:
ed:b9:e8:df:4d:f4:4e:85:a1:01:0c:e2:1e:52:2f:25:f8:b5:
45:62:16:62:8a:f9:db:8a:09:bf:0e:67:d8:e7:2b:a3:9b:7b:
8c:b0:70:c1:91:b0:7d:05:ef:77:d6:ab:b8:79:6f:a3:58:ea:
6a:58:89:56:92:f9:3e:4e:59:d2:6d:1e:dd:66:4e:52:09:c3:
28:0c:d8:c9:ba:ec:bf:33:cf:22:f3:06:92:6e:e4:3a:ac:e9:
e8:af:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:48 2025 by rpki-client