Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier: z3/UhLoiACa08IoYfjmyIllZecbcUv6y6asAviukmA4=
Subject key identifier: 3C:86:08:A0:21:C2:A4:D0:67:22:39:63:78:7D:59:73:FA:93:D6:05
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial: 019937CAC51509FECE3E378395B0B8BAC57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number: 0D4B
Signing time: Thu 11 Sep 2025 08:00:59 +0000
Manifest this update: Thu 11 Sep 2025 08:00:59 +0000
Manifest next update: Fri 12 Sep 2025 08:00:59 +0000
Files and hashes: 1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=)
2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: xIRWE1NXueWQgzPHxWHND+YDFcw+FdzWtHseNUIdRY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:c5:15:09:fe:ce:3e:37:83:95:b0:b8:ba:c5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
Validity
Not Before: Sep 11 08:00:59 2025 GMT
Not After : Sep 12 08:00:59 2025 GMT
Subject: CN=3c8608a021c2a4d067223963787d5973fa93d605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:2d:59:2d:85:c0:08:aa:ca:c3:38:dd:86:
c9:cd:9b:8b:4e:b6:9f:41:f7:44:50:94:e5:12:1a:
6b:48:6d:d2:ad:6b:b0:3b:61:5b:d8:6b:46:2a:38:
96:e2:cf:94:68:64:d2:d7:cd:25:ad:10:0d:ff:a2:
28:43:9f:fd:4c:79:48:ac:b7:ed:3f:28:98:11:c6:
e9:2a:87:bb:9d:0d:1c:8f:8a:53:79:5e:ac:a5:64:
bb:f7:77:f5:a7:82:10:e5:3c:1a:12:77:7d:39:d8:
01:62:59:45:02:79:00:3d:df:bc:27:82:4f:a2:87:
4c:68:55:6c:a4:dd:2a:12:10:63:84:30:18:ea:41:
8c:af:28:dc:3b:33:6e:aa:91:18:9c:76:e3:b5:90:
8f:ce:22:08:9a:15:51:4d:a0:9d:b5:3c:96:88:7e:
58:49:ed:1a:51:72:bd:74:e4:df:6f:02:13:02:0e:
96:4e:af:30:a3:1d:d2:55:85:09:f7:68:da:96:ca:
d7:83:04:d8:8a:f9:28:2d:40:46:1f:e8:97:54:d2:
c8:28:80:35:52:77:75:fe:5d:80:bf:96:e3:3e:1d:
df:c2:04:56:36:8b:65:1b:13:02:61:32:11:e8:93:
10:b2:70:79:c6:bd:79:b8:b7:82:e3:0a:0c:16:17:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:08:A0:21:C2:A4:D0:67:22:39:63:78:7D:59:73:FA:93:D6:05
X509v3 Authority Key Identifier:
keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:33:df:33:b1:f4:3e:6c:00:e8:b4:ca:90:a1:88:5f:40:dd:
11:42:93:09:28:fa:e0:3b:6d:26:60:95:5b:fb:a9:03:be:6e:
ea:b5:3c:74:d0:d9:64:05:2f:fe:11:b0:05:c4:c6:a6:a1:27:
38:30:6e:8b:a8:27:d7:d5:7d:41:0e:44:b5:d6:5c:04:93:d3:
1f:93:66:a7:c0:1c:f0:db:bb:72:8a:4f:62:72:7e:3d:90:a7:
00:2f:d9:a6:45:ee:50:c3:c2:05:aa:0b:31:9b:0a:37:99:21:
dd:22:77:f7:18:32:39:31:c3:2d:e4:d7:4e:f4:ad:50:b4:b0:
7e:31:ba:65:55:3a:19:a9:70:1c:5d:cb:1c:bd:63:85:a0:4a:
11:8c:aa:d9:39:13:eb:e5:50:29:51:d4:c9:d4:cf:60:06:71:
78:1f:17:b3:37:c2:2d:35:5f:26:57:f3:02:07:6e:69:c7:85:
24:bf:22:40:2c:31:14:ba:39:9c:4b:a6:d7:56:d0:fa:45:fe:
2a:31:00:43:aa:fc:44:91:ef:e8:46:1a:43:56:ef:e1:31:f3:
13:60:82:72:e7:e4:28:4d:0f:55:c8:55:39:7a:3a:5c:72:42:
75:e2:75:c5:4d:da:53:e6:e4:60:d2:d1:a3:7d:bb:55:47:09:
a8:13:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:01:01 2025 by rpki-client