Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File: WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier: JMVIXMvaaNjjvtdImxj7Ka3Dg/Y/05Kim0aLgeUyWJI=
Subject key identifier: 4E:91:2E:E6:4E:7B:8F:F4:16:D5:36:11:F1:EC:72:A4:B9:65:33:81
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial: 0198485336B7D5A67BFA541FF9EA5F065D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 20:01:09 +0000
Manifest this update: Sat 26 Jul 2025 20:01:09 +0000
Manifest next update: Sun 27 Jul 2025 20:01:09 +0000
Files and hashes: 1: 5-_m5sx2pOrKBnn6vsQwme9LIWs.roa (hash: h/D8Ki0B/ZgXWanH4BZ9jNHNZb1ZLuVPvKx+u3l030A=)
2: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: 3MDI8jil8rHKYN7nzgFprDKVcNwyGiojuIGOydL2T1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:36:b7:d5:a6:7b:fa:54:1f:f9:ea:5f:06:5d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
Validity
Not Before: Jul 26 20:01:09 2025 GMT
Not After : Jul 27 20:01:09 2025 GMT
Subject: CN=4e912ee64e7b8ff416d53611f1ec72a4b9653381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:7f:be:a7:01:c9:65:a0:26:53:57:22:70:
a1:fb:37:00:8e:5c:e7:62:d4:54:e7:df:9f:31:1e:
db:ba:d5:0a:d6:d6:c8:a0:da:54:73:fc:c6:4e:bc:
66:5f:d7:d5:1d:22:2d:e8:0d:5d:4c:d3:1d:e6:f2:
6f:8d:d9:59:10:41:2a:aa:9b:34:3d:19:22:f0:37:
fc:80:49:27:74:c3:91:bf:f3:55:cd:ee:c3:5c:03:
9b:45:87:23:ee:bf:2d:34:4f:db:3f:0d:fd:a3:41:
8a:c6:61:23:91:00:e6:0a:37:50:12:70:ed:2b:ac:
6a:44:fd:d1:63:dd:60:c3:bc:47:47:83:b7:b2:67:
6b:d0:a4:72:70:7a:9e:d4:f0:6a:e0:b9:f0:5b:9a:
0e:44:38:5a:83:e4:87:e5:36:fb:67:14:4f:6f:7f:
5a:ca:c9:bb:72:e7:f9:30:31:3d:7f:9d:59:07:78:
a7:a7:df:85:89:5b:20:ad:ed:ce:c7:9f:ef:3a:b8:
af:19:b9:c5:cd:fa:a7:3d:4d:0d:fe:0b:84:29:1e:
1a:ad:dd:32:25:d0:98:85:e2:d3:05:43:df:74:b9:
45:f7:60:c4:db:2a:92:b4:ca:87:6a:27:61:87:e1:
6f:76:ba:7c:8e:e0:aa:c0:c3:dc:cf:61:5d:17:19:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:91:2E:E6:4E:7B:8F:F4:16:D5:36:11:F1:EC:72:A4:B9:65:33:81
X509v3 Authority Key Identifier:
keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:36:5a:a3:12:87:8b:d0:1e:43:d3:56:8a:56:12:a2:96:0e:
70:7e:f4:08:4b:01:a3:82:98:e3:6d:6e:66:8b:55:ca:26:54:
3e:98:ec:8f:81:3b:56:6b:27:96:f4:39:6d:2a:6d:79:33:50:
18:19:11:0b:21:79:7a:20:bb:34:bd:33:65:8e:9f:cf:06:66:
d8:ba:42:66:b7:02:13:af:63:7b:23:4d:77:48:e9:48:2d:1e:
15:95:31:78:6a:5e:79:8a:90:a1:fd:95:22:ba:c4:15:33:e1:
88:db:cc:04:28:77:d7:18:34:e7:ab:e6:61:a9:38:cf:b4:c0:
b3:a9:9e:2a:77:c6:68:e8:6c:6a:7c:e7:75:43:11:22:d7:f5:
3b:04:be:96:85:79:70:ca:f2:a3:fe:e8:b8:42:22:2d:b5:45:
a7:99:06:8d:17:cd:15:8f:ba:14:27:f4:6d:f2:98:c7:5a:b1:
84:bb:fe:31:d0:f7:32:04:d1:3e:fe:d5:6d:f8:3b:32:0a:ef:
dc:43:a9:bf:33:ee:c5:d1:28:89:ec:d4:0e:20:80:1a:21:b7:
57:af:0d:60:b1:d7:ff:2d:bb:be:c3:de:92:b3:04:49:35:31:
5b:82:da:a2:df:79:26:60:65:1c:a5:41:15:eb:aa:fd:78:e0:
83:e9:09:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:41:18 2025 by rpki-client