Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: j2PjQAd5u4x6JYgtWb++zqVKOXGiBgH340ZxwYRYDZA=
Subject key identifier: EA:1E:78:FD:4C:52:A7:1C:F3:2B:3F:63:F7:5D:C6:65:A6:8A:C4:A0
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019848F744103E52F37E223A9EE9983C75AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 03E4
Signing time: Sat 26 Jul 2025 23:00:20 +0000
Manifest this update: Sat 26 Jul 2025 23:00:20 +0000
Manifest next update: Sun 27 Jul 2025 23:00:20 +0000
Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: u9VBoi8SuN6+N6EWA7kDnNkNsz4RknoX+bWdkeE0OzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:44:10:3e:52:f3:7e:22:3a:9e:e9:98:3c:75:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Jul 26 23:00:20 2025 GMT
Not After : Jul 27 23:00:20 2025 GMT
Subject: CN=ea1e78fd4c52a71cf32b3f63f75dc665a68ac4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:16:8d:46:d5:24:ca:47:64:1a:49:65:d1:
6a:6f:6b:5d:a4:4d:80:46:75:01:1e:a1:78:ed:49:
47:b7:41:81:e9:d7:9e:84:23:f4:bc:c4:32:aa:5f:
d8:be:17:62:88:62:dd:8b:09:c3:9f:1b:88:17:6f:
ac:97:72:be:d7:4d:96:3b:8d:1e:fa:b8:15:fd:21:
f3:26:a3:6f:6b:80:0d:a7:56:1c:df:e9:b9:22:1a:
36:32:13:9d:da:50:52:f8:2c:dd:73:a9:69:50:c3:
c7:cc:2b:a4:7b:9e:b4:b2:79:56:c2:11:b8:3a:cd:
1c:35:69:0b:22:73:1d:2d:9e:af:e1:e6:cb:22:77:
08:1e:77:9f:d2:05:ce:90:c7:01:d6:26:c5:16:80:
83:bf:9f:56:3e:b3:c3:d3:8b:73:e0:54:0c:f3:b2:
19:a3:45:a4:e5:b9:d2:ee:3c:e8:74:ec:85:df:a4:
d6:ac:b3:6c:a3:e1:a8:c6:c2:a8:02:3f:5c:24:e0:
ce:ee:ff:20:57:71:f8:51:24:82:87:bf:da:e2:78:
9e:40:7f:94:5b:0b:c4:89:24:b5:90:6f:39:7b:0f:
e3:d4:44:14:7a:1e:1f:8c:32:4a:fd:be:d6:47:b7:
b4:45:3d:e3:eb:02:a8:19:f3:1c:d6:b4:46:5d:65:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:78:FD:4C:52:A7:1C:F3:2B:3F:63:F7:5D:C6:65:A6:8A:C4:A0
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9f:82:03:9f:b5:92:b2:f0:5c:23:64:32:79:7c:fc:53:a9:
10:64:e9:51:dd:86:a2:5c:2b:8b:04:e6:98:7c:77:f5:02:71:
1e:15:62:48:de:14:4c:9d:b7:9d:a1:85:fa:ad:21:3f:df:c9:
5c:89:43:c8:1f:3c:30:1c:8e:ff:7e:6b:5a:b7:d7:87:af:0f:
bb:04:69:f0:35:f5:79:97:6b:63:a9:3f:85:f6:b2:a5:97:4f:
8e:c6:04:be:8c:9a:04:d6:76:fc:d2:b9:b5:9f:a1:f1:0b:de:
5a:0f:1d:3d:34:cc:83:db:0d:c9:6a:72:9f:f7:25:c4:bc:65:
38:d9:d2:c2:2e:22:c1:b2:c7:a2:4a:cd:15:83:dc:3d:33:07:
2f:d1:b1:9f:20:de:e0:5f:b5:69:3e:ab:08:cf:e6:3e:00:45:
22:26:1d:53:9e:fe:bc:8f:38:8e:13:98:74:29:3e:c8:5c:ce:
c5:e0:09:56:15:d2:3b:93:5a:b0:01:51:f1:b4:76:ab:3d:fd:
fa:1f:fd:0b:f1:ea:8f:2d:c9:c4:f2:22:78:29:07:4e:8d:12:
a4:6d:d2:73:1d:d3:be:81:69:88:4b:a3:46:af:05:e9:2c:90:
74:06:83:a2:d4:bc:87:f4:ac:58:1f:b4:75:26:db:5f:9d:29:
d0:4d:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:25 2025 by rpki-client