Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File: WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier: yNBieNn4M43HZ6rAgKL1Fy9HRHGso3qpch6/rNMGsik=
Subject key identifier: 93:BC:0C:48:01:BD:3E:BE:E7:7F:A9:6D:5C:C4:7A:4B:2D:4A:4C:01
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial: 0198CB3729EA8F54BCCED02C02761C363D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number: 15AB
Signing time: Thu 21 Aug 2025 06:00:46 +0000
Manifest this update: Thu 21 Aug 2025 06:00:46 +0000
Manifest next update: Fri 22 Aug 2025 06:00:46 +0000
Files and hashes: 1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=)
2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: UnEorXTudC3B4royMRxFGvJ+YyIattyCRrLiXMDpI2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:37:29:ea:8f:54:bc:ce:d0:2c:02:76:1c:36:3d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Validity
Not Before: Aug 21 06:00:46 2025 GMT
Not After : Aug 22 06:00:46 2025 GMT
Subject: CN=93bc0c4801bd3ebee77fa96d5cc47a4b2d4a4c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:4e:98:fb:d0:78:dd:f2:c0:c8:90:99:d0:
16:43:a3:98:a3:3f:11:60:d6:07:bd:7b:20:72:5f:
28:e0:a6:1f:6a:85:64:e2:06:a7:15:6c:86:0e:3d:
56:67:79:7b:86:49:94:10:b2:d7:03:67:eb:15:2f:
65:70:95:95:b6:6d:71:b0:d2:3f:77:7f:14:77:65:
5b:70:b4:4e:5d:d1:37:06:36:08:e2:97:35:23:30:
40:ff:dc:be:38:93:cf:6a:e7:cc:35:7d:e2:e5:b0:
ef:36:46:04:59:4f:2e:02:27:83:8a:30:84:47:ba:
b0:99:59:d9:37:1f:ab:da:85:6f:a7:c9:77:c1:5a:
81:f7:47:84:9d:34:87:1f:b5:bf:a3:1d:b0:60:1b:
36:d3:d2:db:a8:59:cb:73:e8:b9:f7:c7:d0:bb:28:
e9:33:97:eb:55:c7:7b:b5:e6:f2:77:ea:9d:09:17:
d5:de:70:5c:fe:11:ad:5f:d3:e8:3e:fd:05:ee:3e:
24:3f:df:c0:9c:60:43:b7:4c:6e:99:bb:f9:be:19:
e1:00:1e:2b:c8:70:f5:cb:34:c9:f5:2b:ba:1c:c3:
41:5c:7f:55:45:5e:23:bd:42:11:8b:b8:de:4d:c2:
fb:00:75:a0:e2:5e:9d:56:6b:97:29:97:33:11:91:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BC:0C:48:01:BD:3E:BE:E7:7F:A9:6D:5C:C4:7A:4B:2D:4A:4C:01
X509v3 Authority Key Identifier:
keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:22:f3:98:b6:ea:1e:3f:e6:60:60:6d:66:00:93:b8:ea:49:
a3:6c:2f:81:59:88:fd:3c:dd:25:0b:82:83:5a:9b:16:d1:e0:
ed:18:59:f7:4b:f0:60:5c:93:06:a8:2c:46:c9:7e:bb:cb:6b:
df:85:47:cb:0d:7a:76:b8:45:9d:a3:ec:f2:1b:fe:a2:bf:2f:
74:12:ef:ad:b4:58:9e:37:27:5f:16:ae:34:f8:8d:67:bf:80:
fe:f6:11:fc:fa:cc:3e:32:49:49:8f:7c:bd:05:79:06:90:f0:
b3:37:d5:bd:7d:58:99:d0:6d:3e:3f:73:2b:32:f3:e0:76:6e:
7a:c2:9c:c6:90:23:ec:a9:85:59:ac:9e:7c:fa:2a:43:da:6a:
ab:7b:5c:06:94:d6:d5:cc:58:c0:96:c4:f7:04:0c:af:38:2a:
ce:38:bb:0d:b4:7b:ce:33:da:69:fa:bd:c4:06:b2:cf:b2:c1:
63:e0:ec:b8:ed:df:83:47:b0:d9:ee:bf:1f:24:46:49:83:66:
13:b8:4e:45:ba:a5:e2:85:12:84:d3:5c:b8:de:81:cd:ae:e5:
6d:a7:70:45:e7:0e:a6:19:da:f2:34:68:bb:6c:0f:43:b1:bc:
0c:55:50:7a:fb:b6:8b:f0:5b:d0:73:a7:af:ff:92:e7:e3:15:
ee:6e:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:25:11 2025 by rpki-client