Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json)
Hash identifier: a2bVtMxCJDsYPg8LUQqZIElAxBwke07K4zfPD2SrFag=
Subject key identifier: 7C:E5:3D:A4:EB:58:A4:D3:10:DB:4D:F4:EF:1C:5B:B6:74:5D:48:22
Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229
Certificate serial: 01992FA2F370613392FE4ADFB28FE1CF4666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
Manifest number: 167D
Signing time: Tue 09 Sep 2025 18:00:32 +0000
Manifest this update: Tue 09 Sep 2025 18:00:32 +0000
Manifest next update: Wed 10 Sep 2025 18:00:32 +0000
Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=)
2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: mefnWFYAUUalSnmpPmSugK97wtOgRwudVH7NMr/Fx3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a2:f3:70:61:33:92:fe:4a:df:b2:8f:e1:cf:46:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229
Validity
Not Before: Sep 9 18:00:32 2025 GMT
Not After : Sep 10 18:00:32 2025 GMT
Subject: CN=7ce53da4eb58a4d310db4df4ef1c5bb6745d4822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:db:9f:2f:f1:f8:3d:ef:2e:68:37:cb:1c:
92:8f:ba:ce:ab:88:6f:65:56:74:5d:d5:81:77:b8:
68:89:e7:78:bd:87:ef:a8:d8:0e:1d:2c:f6:67:b4:
de:39:8c:b4:34:9f:07:b5:11:1e:a8:3d:6a:ce:d4:
1c:a3:b6:3a:3e:f7:27:20:39:e8:48:cf:21:02:74:
fd:e2:96:91:45:1b:1e:75:04:31:69:95:f1:3d:08:
04:17:b3:0d:3c:28:a4:29:20:5c:34:b1:9a:5a:1a:
3f:77:d0:f4:8e:7f:14:27:ad:b5:41:9e:8d:a3:af:
43:9d:df:28:94:34:63:09:b8:fc:79:dc:79:e8:7b:
e7:79:0c:7d:ee:78:68:b6:0d:5c:a6:3f:42:63:0f:
c8:4b:ec:ad:13:b7:1b:86:5a:f6:e3:bb:84:4f:67:
04:0e:67:ba:8e:fd:34:b0:44:20:33:b0:c4:23:a3:
87:df:93:35:a2:ce:7c:1d:a2:c6:10:5b:ca:74:a9:
68:c0:38:94:c0:c8:95:72:fa:3d:f3:2c:48:c2:02:
8e:2a:08:9c:c8:d1:58:78:ab:97:f1:69:df:ff:80:
7c:9a:3c:20:6a:29:da:b0:05:8d:0a:c1:80:61:bf:
58:cc:78:19:36:b0:32:c1:79:f5:4b:4f:a2:fc:b6:
30:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E5:3D:A4:EB:58:A4:D3:10:DB:4D:F4:EF:1C:5B:B6:74:5D:48:22
X509v3 Authority Key Identifier:
keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:33:d4:86:f0:0f:3b:a3:26:45:f2:02:33:29:35:a4:4c:34:
b3:ef:f4:d2:c2:65:f7:55:fe:e0:66:68:dc:cd:20:07:69:36:
7e:36:b1:f4:59:5a:c5:ef:24:03:2c:3f:f9:61:9b:d6:ff:13:
97:1a:bf:8e:a5:7a:a7:44:8e:85:2e:71:6e:89:de:ec:02:b0:
d3:aa:a3:63:a3:31:66:59:8e:d2:aa:8c:7d:d1:16:ab:71:5b:
5b:a5:30:ab:3e:45:db:72:1e:6b:85:f5:a6:03:9b:40:06:87:
15:bd:79:d0:ca:ba:28:bd:00:65:58:b0:2e:7d:d4:53:b8:3e:
cb:9e:c3:cb:8a:a3:4e:ca:f6:04:67:b5:83:74:ba:ad:d2:3e:
01:7f:00:45:e2:e6:5e:4f:0d:30:66:0d:38:51:3d:01:94:47:
d9:96:e9:41:00:54:83:ec:33:c2:32:72:c9:46:dd:1e:af:0b:
fc:7e:42:fd:6c:43:56:04:8a:ac:94:f3:0e:03:e3:a6:bd:c2:
d0:5e:75:62:63:b4:4b:51:1d:1f:8b:0c:4f:47:6b:e3:57:77:
56:c7:f1:d8:1a:fc:62:62:5a:0e:7c:bc:ee:d8:de:d3:89:7c:
17:20:61:11:87:d9:02:5e:3a:6b:8f:5f:49:1e:f9:f0:e2:0a:
d4:db:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:31:50 2025 by rpki-client