Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: rg8h2d3vGMnG4NjgDCd8+kzg2t9q3jt9hJUXf5ASRCE=
Subject key identifier: A7:CB:8B:7A:CF:61:63:04:FD:A9:EA:29:47:34:52:FA:21:0D:01:FF
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 019931FF5276CAE90BD15B22A855ACF4A54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 160C
Signing time: Wed 10 Sep 2025 05:00:40 +0000
Manifest this update: Wed 10 Sep 2025 05:00:40 +0000
Manifest next update: Thu 11 Sep 2025 05:00:40 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: 6aHsJXIK3aA+7x+kFm02USvtxYaseFOWIh2n0ylscEM=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:52:76:ca:e9:0b:d1:5b:22:a8:55:ac:f4:a5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Sep 10 05:00:40 2025 GMT
Not After : Sep 11 05:00:40 2025 GMT
Subject: CN=a7cb8b7acf616304fda9ea29473452fa210d01ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:81:ba:29:ed:e9:ec:e2:8b:13:1c:9e:5b:fb:
86:66:c9:e4:51:6b:0b:82:9e:dc:8c:28:a1:dc:a8:
cf:52:3b:7c:06:ec:47:93:e9:eb:05:80:9f:f4:87:
0f:57:60:9c:ee:d1:9c:53:34:fb:56:cc:cb:fa:d7:
64:19:3d:83:79:bc:b4:c9:c6:a7:b9:a7:06:c9:98:
3e:27:9e:29:bb:2f:71:1d:cc:24:d7:ea:d0:ed:2d:
d6:6b:8c:63:f1:0f:6a:4f:d2:38:13:3d:0a:21:93:
4e:b4:3f:b6:2b:f4:5d:d9:c0:a8:cf:4b:26:c9:dd:
81:fb:14:50:65:7e:f2:f9:69:ce:ba:f9:79:9f:ef:
20:dc:70:01:24:8f:93:76:f6:94:f0:02:6d:40:f3:
c1:51:a9:e2:76:b8:c8:0d:f5:3b:85:5a:e4:d3:02:
b9:1e:fd:9b:e7:ef:21:74:8d:95:79:fa:db:99:fd:
bb:77:8e:ce:1c:fc:3b:65:4b:b2:20:0a:21:7c:cc:
69:ff:b0:c8:2c:97:d1:91:4a:1e:ad:c2:d8:0f:e7:
10:06:10:db:f4:11:53:7a:47:5d:28:61:b2:02:ce:
57:0a:0d:78:d0:f5:6f:bd:73:49:8f:3f:15:07:6f:
e2:03:1c:6a:22:db:a5:1c:5e:af:12:a8:ad:b0:b6:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:8B:7A:CF:61:63:04:FD:A9:EA:29:47:34:52:FA:21:0D:01:FF
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:75:a4:c5:96:30:12:b6:20:a8:82:0c:04:63:a1:de:b5:bb:
e7:e5:dd:e3:6e:fd:03:1c:54:39:db:18:3f:1c:ae:75:6a:5a:
66:8a:82:a6:a9:ea:c5:8a:0b:3b:d1:8d:7b:1e:58:01:2e:da:
f2:76:85:da:30:44:b2:56:f8:47:09:c7:b8:f2:ea:5d:a7:de:
6b:29:8f:5a:1c:4c:64:4b:46:9c:aa:7f:a5:d6:b2:38:fd:3e:
53:67:31:43:d7:7a:07:24:19:01:60:f5:40:ad:65:e4:2c:80:
99:f7:84:2f:ba:65:da:75:e5:16:b0:55:43:c6:c0:e7:28:3f:
87:64:db:41:79:2b:34:ad:f0:5d:8c:b6:11:a4:8d:59:87:0a:
61:bf:ec:bb:bd:e5:c3:bb:f4:9a:c4:2c:62:df:aa:81:c0:c7:
dd:04:c7:4a:af:d1:65:cd:74:38:ee:0a:78:ad:94:60:9e:2f:
35:77:3c:e2:8c:6d:38:10:fb:aa:17:9f:7f:36:63:db:a4:54:
5d:40:0b:78:90:e8:7e:10:88:e9:6d:38:1b:3a:c9:6f:df:9e:
74:4b:9b:28:21:ec:cd:09:28:f9:1f:9d:49:de:78:31:22:8f:
ab:16:a5:44:5f:a5:89:e8:7c:a9:80:4d:4c:ee:e0:e4:c5:64:
87:32:c8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:35:58 2025 by rpki-client