Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json)
Hash identifier: lE8uud0/UVo9LwvVasuhCerIVbDSnvtpFvAwQzqNzEA=
Subject key identifier: 77:0A:32:99:27:04:98:45:30:10:1D:F9:EF:16:DE:0C:3F:04:8C:2D
Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Certificate serial: 0199228CE837BFD9674D2CD655570B94255C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
Manifest number: 0F45
Signing time: Sun 07 Sep 2025 05:01:23 +0000
Manifest this update: Sun 07 Sep 2025 05:01:23 +0000
Manifest next update: Mon 08 Sep 2025 05:01:23 +0000
Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=)
2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: t8hu85dmehop4iopPR4Kfs9jlVYtfn8h0cLNPkzDVSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e8:37:bf:d9:67:4d:2c:d6:55:57:0b:94:25:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32
Validity
Not Before: Sep 7 05:01:23 2025 GMT
Not After : Sep 8 05:01:23 2025 GMT
Subject: CN=770a32992704984530101df9ef16de0c3f048c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e6:6e:21:75:95:f4:0c:f0:69:e1:d6:36:6e:
f7:62:94:51:19:61:87:45:3a:f4:98:31:99:c9:44:
83:07:1e:aa:fa:c0:77:01:d8:c0:f4:fe:1e:d9:d4:
8c:01:63:96:41:5b:da:0c:81:3d:89:b0:0e:6e:72:
6c:a9:93:36:63:b2:99:5c:29:6c:3e:df:8a:c3:6b:
f4:6d:b2:53:31:f4:b4:77:fd:2a:b6:2c:19:42:37:
6e:51:e4:a0:6d:1b:ac:de:47:d3:37:c7:7b:9b:b8:
f6:65:6d:bb:19:03:df:0a:7a:3b:70:20:fe:12:98:
4f:dd:ea:62:b9:a6:87:40:b4:57:b7:89:c1:87:fe:
fb:6d:47:b8:2f:ec:f1:04:07:1d:e5:7a:28:51:2c:
fe:84:ec:1e:53:03:cc:04:91:cd:1a:1b:91:b9:d6:
96:aa:87:03:ff:a0:fc:b8:0c:b2:e6:c0:08:47:04:
f8:ab:40:fc:47:ff:14:06:f6:c4:31:da:d4:8e:ec:
07:fe:b4:cc:54:bb:60:be:fd:b5:46:d9:8e:9d:fb:
22:5f:03:95:11:de:ef:fb:28:8b:99:02:02:68:48:
45:df:03:e8:95:a7:97:fd:4f:22:b6:c7:48:8b:a1:
78:16:7b:62:06:34:7b:93:12:d0:ea:89:31:4d:db:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0A:32:99:27:04:98:45:30:10:1D:F9:EF:16:DE:0C:3F:04:8C:2D
X509v3 Authority Key Identifier:
keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9c:1c:e5:e4:9e:47:2f:ac:9f:ff:c2:b9:ae:62:b8:ef:ab:
83:94:55:16:3d:bb:e0:24:9f:df:f6:67:c6:92:d3:b2:1a:23:
64:aa:76:29:07:c3:15:12:2b:9d:eb:27:ae:13:14:58:09:f0:
e3:01:91:4e:eb:07:34:fc:f6:7c:e6:6e:72:9f:a0:fa:eb:80:
c3:b8:c1:9c:1e:11:5f:f1:c3:94:35:a8:78:72:56:11:04:84:
26:3d:e8:ad:f0:0e:a9:ef:20:5a:ac:dc:d8:69:80:a8:33:ee:
cc:57:b6:f8:9b:5f:e4:0f:aa:5e:4d:7d:eb:09:6b:b8:c4:4b:
6d:a8:c7:73:21:ba:78:cd:06:6b:5c:07:dd:44:b9:bb:f5:12:
a0:df:89:b2:7d:d2:5b:12:8c:d5:3a:ef:fa:56:fa:15:61:37:
4a:92:c1:90:86:3d:6c:fc:b8:c1:a5:f9:82:4c:be:a7:b4:52:
34:c0:c5:30:78:6e:68:db:54:a9:a0:68:87:1e:99:78:6c:97:
6b:04:bf:64:0a:92:6a:7d:3f:57:22:74:53:2e:37:8c:dd:c9:
d7:4c:b0:50:b7:9d:b2:ac:77:83:b6:c8:e8:ea:9b:91:b8:1f:
1d:b2:30:d4:61:56:56:ee:e4:aa:2e:b3:29:7a:84:40:24:d8:
e1:a4:7f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:46 2025 by rpki-client