Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier: GktCkhTmQX8KS7YD0qOhaqkTHVo+TNqEoy6daacREBs=
Subject key identifier: B1:1E:E3:74:0F:09:68:1A:64:A6:98:E9:CF:57:43:39:C9:AA:B2:1D
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial: 01993191EAC15EF5BC82B95CB26D8D0421AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number: 03DC
Signing time: Wed 10 Sep 2025 03:01:10 +0000
Manifest this update: Wed 10 Sep 2025 03:01:10 +0000
Manifest next update: Thu 11 Sep 2025 03:01:10 +0000
Files and hashes: 1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=)
2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: DL/GvPJNN8405BfcKJh8Qf/24zwZjgMO3kz27fR2Z70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:ea:c1:5e:f5:bc:82:b9:5c:b2:6d:8d:04:21:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
Validity
Not Before: Sep 10 03:01:10 2025 GMT
Not After : Sep 11 03:01:10 2025 GMT
Subject: CN=b11ee3740f09681a64a698e9cf574339c9aab21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:a4:68:25:3a:93:86:af:d1:06:e8:21:8c:
76:b0:93:33:07:91:14:0b:03:e1:89:8e:94:5e:6d:
51:23:38:50:42:b6:e9:c9:5f:9b:8c:39:91:e9:38:
f0:39:17:06:e7:03:58:dd:88:d9:c7:53:a5:d4:de:
30:cc:e7:f4:48:28:9f:1a:54:f1:46:5f:c5:bd:51:
59:64:df:01:76:c0:6c:ec:ea:dd:60:4b:4a:79:db:
ac:bd:43:c4:5a:86:9f:89:69:60:c7:1e:05:84:19:
98:cd:2a:5c:9d:91:69:c9:b3:24:7a:4a:c9:ca:09:
b0:c7:0e:de:ef:4a:48:eb:c2:41:27:66:21:57:51:
da:ad:ee:04:ae:36:eb:2f:59:2f:a3:e8:97:87:e7:
a4:dd:7f:92:97:01:0a:75:54:a4:88:67:28:56:3a:
9c:30:e3:fa:d3:6f:b9:f6:13:40:68:ce:92:48:2b:
4c:ad:d5:74:9b:14:5c:4d:20:a1:9e:49:bf:8a:ca:
51:34:9a:2c:dd:4a:23:16:0f:66:0c:87:83:a1:40:
5e:ac:9d:50:56:fe:68:6d:e1:d2:af:3b:6b:b5:a9:
ab:28:03:2a:b8:cf:10:79:3b:c0:d0:f6:f0:66:c8:
37:fa:f0:aa:c4:ca:ac:af:17:16:f7:78:cb:bb:e5:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1E:E3:74:0F:09:68:1A:64:A6:98:E9:CF:57:43:39:C9:AA:B2:1D
X509v3 Authority Key Identifier:
keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:34:11:38:f2:37:63:33:c4:9d:d6:5b:f5:61:39:b8:6a:a6:
4b:cf:f0:62:36:fe:00:64:22:69:f1:a4:ff:a0:c9:23:c1:9d:
a4:8a:7b:11:a2:2c:73:84:91:13:9f:3a:9e:3a:7f:fa:43:6e:
6b:ed:28:bd:6a:55:92:fe:6a:bd:69:8a:09:42:cc:2e:0f:5c:
2e:c5:99:7f:5a:20:e2:f2:30:7b:42:cc:15:56:e5:36:da:73:
49:9c:65:ff:c6:13:9e:1c:dd:2f:6b:3c:99:cf:8e:12:36:2b:
59:86:6e:01:fc:87:79:2c:34:6a:86:45:1b:5d:3c:f8:a0:46:
af:3f:97:dd:a0:e6:d4:5d:d3:a0:41:44:37:13:93:76:a6:d3:
c1:7b:b7:ea:b8:7a:00:49:04:3a:8e:97:dd:c5:6e:1e:07:a0:
d1:f7:61:e7:d9:74:4d:25:b1:e1:61:32:2d:41:ef:24:ba:be:
b9:a9:4f:a8:d2:a1:a8:15:d5:29:a6:90:a4:9b:53:4e:7e:fc:
18:2c:6f:d4:6d:71:57:e0:d4:01:7d:70:2a:df:b2:67:a8:20:
ef:e4:aa:41:0a:c4:ca:1f:bc:d9:f9:86:14:18:65:92:8f:1c:
c1:25:ff:48:65:5f:46:fb:19:19:f9:9d:24:35:75:f7:33:6b:
ac:6e:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:10:21 2025 by rpki-client