Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: L/lvhXqroasdG/v1fWi9bPAA7DELSLvHS/oJYCHlK5A=
Subject key identifier: E7:82:A5:62:A1:AD:D5:FF:A8:9E:D0:D3:E2:DB:4F:A7:60:DA:66:17
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 01993500989C7667B029D6B10F4DFF4B1130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 15D1
Signing time: Wed 10 Sep 2025 19:00:55 +0000
Manifest this update: Wed 10 Sep 2025 19:00:55 +0000
Manifest next update: Thu 11 Sep 2025 19:00:55 +0000
Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: ywGWsnTSEnJYb3bkVfm+2k094I3mizpcI92Zqtqqx6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:98:9c:76:67:b0:29:d6:b1:0f:4d:ff:4b:11:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Sep 10 19:00:55 2025 GMT
Not After : Sep 11 19:00:55 2025 GMT
Subject: CN=e782a562a1add5ffa89ed0d3e2db4fa760da6617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:4c:84:7a:f7:15:ac:59:a8:54:8c:3a:83:
0e:b6:2e:68:d1:2f:92:3f:7c:7b:b8:9a:e9:20:30:
60:f4:45:ee:cd:5e:88:f2:b5:d0:a7:c9:e8:52:7e:
23:11:be:e1:4c:0b:ad:0e:36:49:28:69:4c:eb:15:
5a:f2:96:0c:f7:0d:e9:c6:18:29:df:91:93:cd:18:
06:a1:1d:68:6d:2b:47:d7:db:f4:45:3d:98:4f:a6:
60:34:11:16:77:2b:ea:4a:ab:32:55:db:ab:9b:99:
9f:88:29:21:a6:3d:a5:12:3c:be:36:11:9b:80:62:
e2:7f:bf:9c:b0:0a:3d:c6:92:8c:e7:a6:4b:b4:05:
78:4c:df:56:d7:e6:39:6b:0a:37:24:15:0f:99:70:
e6:af:ad:12:e7:e5:8a:ab:fa:69:84:e9:cc:aa:03:
33:b2:25:79:16:1c:db:e9:63:f3:90:4c:1b:34:b4:
cb:b0:d9:40:0e:b7:61:c3:07:ee:85:a0:64:75:a4:
c2:32:a9:4e:12:04:5c:9f:af:d0:8a:ff:38:fc:f1:
1b:07:c4:1b:c5:88:c7:e7:05:2a:54:2e:3a:85:72:
98:b5:38:55:e9:0f:fe:09:39:97:af:26:0f:41:8a:
c2:7f:41:46:aa:76:9f:54:56:c8:ae:d6:42:1f:1d:
97:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:82:A5:62:A1:AD:D5:FF:A8:9E:D0:D3:E2:DB:4F:A7:60:DA:66:17
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fc:b2:dc:30:53:72:7a:a6:c2:3e:fd:61:d5:a4:d7:44:8a:
8b:3f:87:98:c9:15:c8:b9:18:47:23:be:61:9c:0a:7e:03:08:
4b:3c:01:47:ee:c0:b0:4b:b9:ad:dd:63:76:5d:9b:9e:a2:85:
53:65:6d:4b:8f:84:3a:58:9e:3b:fd:e1:71:88:92:7f:17:91:
d5:39:cf:0c:1f:6d:3a:48:3b:33:cb:ef:a1:d5:e7:49:c7:ad:
8a:0e:8f:1f:36:71:d0:6d:e1:ff:4a:43:30:0f:72:ca:48:c0:
99:67:16:f6:e3:19:9d:b1:59:dd:57:ee:d1:df:11:ee:0a:57:
3e:0f:32:33:82:46:b2:b6:18:b5:e1:a2:7d:de:2b:ea:60:df:
56:13:cb:4e:8c:4c:c3:72:7f:c8:d2:20:ba:43:17:86:e8:16:
da:00:f7:66:22:84:ff:96:82:cd:a7:c1:68:39:48:f3:5e:d1:
01:28:f0:de:00:8b:6f:4c:16:cf:d0:6c:0b:8a:8e:72:1d:cb:
96:1b:04:a2:f3:bd:e7:82:0a:1d:10:08:c0:42:5e:4b:e8:1a:
a0:b5:20:3b:3d:70:a4:05:69:6e:91:f1:e0:cf:3b:31:40:f9:
fd:a0:7a:70:1f:e0:68:58:2b:e6:3c:44:d2:b0:cf:22:82:7c:
24:69:9c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:54:38 2025 by rpki-client