Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
File: wnaouodMP73a00TQMliz4sBNe8s.mft (raw, json)
Hash identifier: OYevpz+9hT0cDyoVKAO+1uY4hZFTex/yKJLugCsvqCk=
Subject key identifier: 44:F3:5F:82:2D:64:6E:59:F3:C3:50:47:F4:BD:9B:44:05:9B:1C:FE
Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Certificate serial: 019922C31D7D35241DFCF0173D0870E06FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
Manifest number: 0FA0
Signing time: Sun 07 Sep 2025 06:00:36 +0000
Manifest this update: Sun 07 Sep 2025 06:00:36 +0000
Manifest next update: Mon 08 Sep 2025 06:00:36 +0000
Files and hashes: 1: Pki6gb_S1520VEM07UejShPDZGk.roa (hash: 7A7gzwXJGbe4mkaDrxLi5aJVByeCNXa6iSELALDb/bg=)
2: aKvuzNFCkIxJKCLvoFj6rLtgwgw.roa (hash: 88fD/JQbk+3ChR0NLskEVdwX38ofK7rX9dpoZ3GLYOg=)
3: wnaouodMP73a00TQMliz4sBNe8s.crl (hash: R4Gc02gY5pmNqUkA9VdyQuz64Nw91WemMp29h05SZw8=)
4: yBBzstTaOk57G_P5zLCVHKExcZ8.roa (hash: mLlsvymN4uLLcemV8g47YSkzHhZQynCIXD4Wv9H9sKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:1d:7d:35:24:1d:fc:f0:17:3d:08:70:e0:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb
Validity
Not Before: Sep 7 06:00:36 2025 GMT
Not After : Sep 8 06:00:36 2025 GMT
Subject: CN=44f35f822d646e59f3c35047f4bd9b44059b1cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:74:e4:1f:a1:e3:26:89:a9:22:ae:1e:f5:
e0:aa:db:03:41:e2:c9:d7:38:6c:69:02:e3:3c:fd:
4c:72:8c:7b:bd:75:64:1b:7a:97:b3:04:ea:61:07:
66:90:43:40:f4:f0:6b:14:6d:87:e5:97:03:ad:27:
6a:53:7f:2a:87:45:71:0c:22:9b:36:a9:82:55:2c:
4f:31:1a:03:e9:84:fd:5c:0d:0d:6b:c1:3c:5e:8a:
b6:65:56:54:f6:a7:91:26:b7:6a:16:0e:2a:dc:ca:
81:ff:ad:db:60:1f:d0:44:eb:6d:3a:9c:74:8c:af:
7b:05:7a:49:e8:3c:4e:80:f7:1e:5c:22:fc:eb:04:
fe:b5:08:6e:36:ff:bb:7e:eb:df:1f:b6:d2:32:8e:
f2:04:e7:6c:c9:2d:00:aa:5d:2f:2a:88:34:e5:08:
22:ee:d9:77:12:a9:6b:e2:09:62:e8:53:78:ff:57:
05:f5:5d:49:fb:0e:07:e7:18:73:e4:bc:45:a9:31:
9b:33:af:d6:e0:cf:f1:7b:15:0e:73:a8:1f:03:3f:
9f:5a:f4:e9:28:65:cf:ae:e8:82:11:91:b0:63:c2:
27:40:37:54:ca:7b:4d:8e:ca:7d:9c:13:50:3b:c1:
43:e2:fe:79:05:45:76:dc:f1:f0:0f:69:e8:8d:19:
46:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:5F:82:2D:64:6E:59:F3:C3:50:47:F4:BD:9B:44:05:9B:1C:FE
X509v3 Authority Key Identifier:
keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:68:1e:12:a9:b5:ea:0f:8e:3c:96:25:c0:a3:bd:68:33:a1:
9d:e6:62:5f:0e:6b:fe:67:51:df:a6:05:3a:3f:2c:37:01:e6:
a9:28:ba:55:40:3a:71:7e:2f:65:83:c3:54:7a:58:8b:a9:96:
9b:d2:d1:c5:72:b5:d0:ac:42:49:a9:13:8f:45:5a:05:90:72:
21:f3:98:8b:e7:e1:6e:fb:49:a2:7a:13:27:74:15:ca:79:3e:
da:92:be:53:a4:de:b2:fb:34:ba:3b:10:9e:86:aa:9a:68:3a:
35:13:45:21:aa:68:bc:19:4e:e3:44:44:b0:e4:50:9d:29:b8:
ae:81:eb:a6:50:49:a3:44:1c:26:3d:92:45:d4:3d:e3:d4:f4:
3f:70:ad:19:5c:a4:2c:ec:bb:c5:bd:13:34:7e:9a:46:cd:9c:
94:ed:37:bf:e7:78:bc:30:f8:8c:9e:67:e0:51:88:b7:79:4e:
3d:1b:95:42:db:d1:d2:8a:34:07:db:09:1a:08:e0:f9:23:f1:
23:4c:1a:34:2a:f2:55:86:b4:00:26:12:15:83:f3:a0:81:c4:
b9:12:3f:3a:12:2c:13:d7:81:1d:61:fe:a1:71:84:18:27:cf:
3c:d6:3d:a0:a3:93:f0:60:30:15:34:51:40:bb:b8:73:7b:2d:
cd:70:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:45 2025 by rpki-client