Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File: wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier: tZuKtz9K8t4pCpjUs/6ilnXEmpeYvF0HL5uzGe5VAnk=
Subject key identifier: 81:B7:2C:88:5B:AF:2C:41:29:62:44:49:31:2A:03:59:6E:51:DD:85
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer: /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial: 01992255CF935B0D596219A466719F8A5D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number: 04FC
Signing time: Sun 07 Sep 2025 04:01:12 +0000
Manifest this update: Sun 07 Sep 2025 04:01:12 +0000
Manifest next update: Mon 08 Sep 2025 04:01:12 +0000
Files and hashes: 1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: 1RzqR6J0FsO5xDugnNXVvqPs3qqGZzpy0dpcFxYMUk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:cf:93:5b:0d:59:62:19:a4:66:71:9f:8a:5d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
Validity
Not Before: Sep 7 04:01:12 2025 GMT
Not After : Sep 8 04:01:12 2025 GMT
Subject: CN=81b72c885baf2c4129624449312a03596e51dd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:75:4c:07:9e:52:5b:52:61:d0:d7:1a:e1:
fe:e4:c1:d6:39:e4:58:05:84:f2:9b:fd:b5:ef:1d:
a3:2b:4a:4d:a5:2e:34:71:b0:99:5c:f6:31:3b:61:
41:74:b8:a5:2f:f3:88:10:32:22:91:06:f0:65:cd:
b2:51:9c:57:a1:0d:13:55:7b:03:fd:d7:5f:ae:ec:
e2:c7:1b:aa:f9:8b:dd:02:0b:f3:e4:90:a3:0a:51:
0f:43:ea:a8:73:b8:06:a9:54:04:6c:ae:2c:ee:63:
77:8a:99:b8:f5:7f:7d:f9:32:72:1a:85:70:91:f8:
42:1b:1e:ed:9a:ba:c3:a7:32:05:cf:61:3a:7b:16:
5e:de:71:c8:50:81:80:08:3d:d1:94:6d:b9:39:4f:
4f:42:5b:3e:6d:e8:fd:ec:f1:0f:27:26:83:22:ce:
18:92:9a:76:2f:27:f4:9c:76:55:f3:75:a5:db:ec:
0e:b3:a2:bd:c0:04:17:9b:b5:16:66:24:cc:72:0f:
1b:92:ae:10:11:12:5e:ca:37:d0:25:a1:34:be:80:
10:cc:42:2a:4e:cc:b0:1c:66:41:49:90:a4:a3:15:
e2:23:c8:4e:0e:3b:3a:6a:53:3e:76:7b:1d:05:02:
f0:df:2a:e0:34:16:40:e9:43:8e:44:fb:3f:05:12:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:2C:88:5B:AF:2C:41:29:62:44:49:31:2A:03:59:6E:51:DD:85
X509v3 Authority Key Identifier:
keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:a3:95:48:06:c0:cf:34:80:ce:a1:06:cf:0e:75:90:53:99:
a9:72:5a:65:3c:2f:17:ca:50:b2:1e:d5:71:4c:ee:46:65:d5:
92:b7:90:52:5d:d9:5f:b7:7f:11:3f:96:8c:aa:cd:b2:3c:e1:
8f:5d:44:61:19:ec:fe:52:25:85:27:d7:8d:65:69:2c:c4:df:
bb:41:61:a5:10:2b:17:4a:4e:b0:80:25:01:9d:49:53:8c:38:
69:b4:7a:1f:25:0c:5c:7f:21:63:7a:b6:b6:59:82:9f:dc:b3:
04:1c:6c:ab:84:22:22:6d:01:52:14:c5:bc:90:6d:b2:08:b9:
e5:49:83:ab:93:b9:1e:8e:15:4f:77:73:51:18:b3:57:4b:78:
ec:ec:ea:bc:3c:81:58:19:31:e0:87:b3:bb:ec:46:55:ac:21:
a4:23:e5:f9:fe:22:50:4b:2c:33:12:73:60:85:d4:f3:47:c1:
0a:9c:e5:77:f9:fc:dd:68:87:cd:ca:91:72:55:03:f4:73:33:
88:f0:9e:c6:eb:b9:04:be:6f:a9:7d:19:a9:53:5f:ed:20:33:
04:f5:47:02:a6:8d:7d:9f:bd:bd:9a:e7:8d:e6:ab:98:b1:32:
2d:d5:22:65:35:e0:ea:56:4a:c1:e1:24:02:79:4b:55:b9:4c:
ce:07:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:35 2025 by rpki-client