Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
File: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft (raw, json)
Hash identifier: 0whwVvuNNUtmPYX4ck66YbqtxfwLnpS+4A/945vl3Qk=
Subject key identifier: 2A:98:8D:E3:A0:F2:DB:34:07:08:69:39:51:52:DA:FD:42:B6:1F:0A
Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
Certificate issuer: /CN=c115f1341a87140a122dc8f96502b72449057e60
Certificate serial: 01992443EE738882704C3D3DEA900B96B716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
Manifest number: 1490
Signing time: Sun 07 Sep 2025 13:00:55 +0000
Manifest this update: Sun 07 Sep 2025 13:00:55 +0000
Manifest next update: Mon 08 Sep 2025 13:00:55 +0000
Files and hashes: 1: OZdY9tsN8gFkESVtIbXza917_a0.roa (hash: izbPKaAtrUogn7SQSKm/hKiliCifOlraqF2HZIB4lps=)
2: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl (hash: J5LqC9MNfP+33ELHMGkHEeLbmGgd0zIfUnugyegEWSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:43:ee:73:88:82:70:4c:3d:3d:ea:90:0b:96:b7:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60
Validity
Not Before: Sep 7 13:00:55 2025 GMT
Not After : Sep 8 13:00:55 2025 GMT
Subject: CN=2a988de3a0f2db34070869395152dafd42b61f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:e1:40:8f:a0:e5:49:5e:4c:ef:0a:a2:a3:
b3:20:5f:b2:2f:03:a4:7e:f8:13:23:1c:4c:a9:37:
c6:9d:81:dd:86:f6:24:ca:7f:27:ad:36:19:25:fb:
03:53:a2:bb:f3:fb:15:03:2b:60:0f:25:40:cf:b2:
fd:85:36:60:aa:33:06:fe:ce:72:fa:04:e7:fa:0e:
2c:e8:71:94:49:5c:95:ef:76:ca:c8:2e:8a:15:0e:
64:f7:7d:bb:12:4a:91:95:62:68:b7:03:25:96:a8:
77:f0:f4:6d:c9:90:7d:f7:65:0f:8e:fc:ea:dd:05:
9d:78:f6:f1:54:db:4a:74:cd:56:57:39:5d:e5:73:
ef:68:a8:7e:64:3c:44:19:2e:ef:54:d2:e9:0c:4f:
3b:3c:c3:1f:a1:ef:53:8e:e4:a1:3c:12:c2:6b:69:
72:8b:e9:f9:1a:22:4d:24:87:3f:a4:2d:df:95:75:
21:7f:6b:5a:77:b5:b6:2b:ba:d7:62:f0:ec:1a:a1:
6f:0a:c4:c3:27:64:a8:d8:53:f9:c1:b8:b2:09:b9:
f7:6d:bf:f1:54:fb:66:f9:ca:35:a2:2e:ff:32:a8:
1b:ac:50:5f:f2:06:e5:a9:64:64:3b:c3:47:07:02:
0d:e1:c8:9a:07:8f:55:66:7e:d3:96:95:db:cc:13:
e3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:98:8D:E3:A0:F2:DB:34:07:08:69:39:51:52:DA:FD:42:B6:1F:0A
X509v3 Authority Key Identifier:
keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:6c:e0:b0:b0:a5:c5:16:5f:36:4d:4a:71:b4:d4:70:38:09:
98:8e:6e:5a:5f:c2:a7:fa:33:66:bc:e3:05:71:01:01:3d:96:
d9:c9:cb:0e:3a:a2:4d:d9:1a:69:94:d1:6e:f9:79:39:0f:08:
62:35:02:24:95:4a:2f:fd:fa:e2:8d:0d:4b:f2:8e:2a:2c:d8:
b6:53:ca:8f:76:77:d7:1f:89:60:cc:98:c4:a0:43:91:23:2a:
4f:55:22:ce:8a:a3:c7:ba:6c:6b:77:74:7c:b3:12:b4:2a:28:
09:21:51:ef:82:41:dd:58:1b:a7:4f:cd:8a:f7:52:70:82:30:
ab:05:88:68:36:c0:60:17:85:0b:5d:d2:74:e5:f4:69:12:62:
6d:0c:9d:f0:62:15:b9:56:c3:8c:0a:04:c1:f0:f1:15:f7:92:
a5:9d:36:9d:9a:cf:d2:31:50:65:94:3f:53:10:c5:86:a4:e9:
b1:c1:a6:08:34:2c:1d:de:b0:d0:0b:ef:d7:36:f0:02:e3:4e:
93:f2:cf:3a:a2:da:ee:fa:0f:75:9a:94:ce:f4:82:e7:00:0f:
17:4f:5f:31:76:27:4e:ce:43:a5:dc:f2:93:e1:e3:eb:e0:a9:
7b:f0:39:d8:08:10:a5:1d:f2:d1:14:d8:79:53:67:bc:35:12:
a6:cc:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:14:43 2025 by rpki-client