Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: jnZd1GPl0/Cp2JlgB0nnOo48UInI2jCsb55pqaH+aGc=
Subject key identifier: 86:F8:CC:87:D4:84:C9:53:C2:CA:A0:2D:8E:E4:FA:A8:E6:D7:10:9D
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 0198578FABD287D0823ECBEAB2C72F1F3AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 021A
Signing time: Tue 29 Jul 2025 19:01:30 +0000
Manifest this update: Tue 29 Jul 2025 19:01:30 +0000
Manifest next update: Wed 30 Jul 2025 19:01:30 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: Lyj4iDzpPvquTDL1SqQKbnjf25XER9lxChUUXzc3kNU=)
2: lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa (hash: 95YPoU3EnMBScsmNlHgLSHa16IwnjsnV9FN8H0xyPaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8f:ab:d2:87:d0:82:3e:cb:ea:b2:c7:2f:1f:3a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Jul 29 19:01:30 2025 GMT
Not After : Jul 30 19:01:30 2025 GMT
Subject: CN=86f8cc87d484c953c2caa02d8ee4faa8e6d7109d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1b:87:ef:4a:f0:ee:11:fa:44:16:8f:28:c3:
da:06:ee:78:33:8d:d5:75:22:69:d9:44:42:9e:63:
ff:86:a4:ba:9d:a2:90:2b:14:af:05:c0:b3:98:da:
8c:ed:09:fb:b0:42:d9:f4:5f:ff:e0:4f:2e:ca:62:
56:2c:d2:62:6d:4c:b5:ad:d6:26:c7:8a:06:6d:b2:
5c:ab:49:f8:68:86:f8:e9:66:1a:5f:81:dc:f4:08:
20:0b:df:a2:ae:36:51:88:4c:cb:26:32:83:9f:90:
62:6f:1d:01:d5:37:f2:96:c7:58:e8:62:3e:49:40:
9a:80:9f:04:c0:8c:da:68:23:26:5b:04:33:48:e3:
7c:b3:d8:ef:8c:be:f7:ad:23:97:bb:d0:45:81:c1:
06:ed:11:2f:2f:25:92:b1:d3:76:2d:54:5d:b9:7c:
6f:ec:58:e5:fd:c7:d8:8f:d2:24:10:8b:48:59:cf:
c0:e4:e6:47:fe:0c:56:88:4c:a6:7e:62:2c:ee:76:
b0:59:3f:31:c3:84:65:a2:45:86:45:1e:9e:3e:cb:
05:30:78:a9:7a:74:03:cc:ae:e5:e8:7e:1c:1a:4e:
84:ae:1c:92:cb:c4:25:b9:86:2a:6f:8f:16:a0:b7:
d9:0c:fc:41:4a:af:9c:e7:02:ac:1a:4c:76:54:62:
2b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F8:CC:87:D4:84:C9:53:C2:CA:A0:2D:8E:E4:FA:A8:E6:D7:10:9D
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:85:5e:21:14:e0:2a:c0:6e:ab:d0:34:bc:bf:61:ee:f8:22:
bc:73:2f:85:b3:97:aa:36:e0:aa:c4:99:b1:63:1a:a2:90:61:
e1:9b:38:73:c8:45:aa:0e:ba:17:91:f0:d6:d9:bb:99:af:81:
cf:b0:4d:97:51:91:28:c6:6a:43:7b:95:4e:c0:47:d8:1b:40:
04:e4:b7:82:0e:9f:66:cd:d1:91:39:ca:d3:ec:ef:54:53:c2:
54:54:39:06:71:f1:4e:66:fe:b1:b5:23:0f:38:0e:2c:64:76:
34:4a:d1:e8:93:45:5f:ce:7d:a4:35:34:6b:d6:36:c1:52:e3:
1e:13:31:eb:55:77:49:1e:e0:c5:76:29:fd:0d:92:8d:78:6a:
ee:2a:e5:72:68:90:97:b1:0d:21:27:72:5c:2c:14:9b:9c:11:
e7:6b:38:0b:7b:ea:bb:d3:5d:e2:6d:e5:3c:47:3b:55:a1:6d:
da:3d:c7:d8:0f:de:c7:b8:f1:bb:f4:47:13:cf:db:1b:5a:da:
f8:25:b0:02:10:b0:34:a0:55:b1:36:f9:f7:39:14:8e:10:ba:
7f:ad:c4:40:c1:8f:60:e4:ae:8a:b6:6c:b6:4d:af:02:b7:5c:
41:15:4d:ef:a1:be:4a:8b:56:a9:92:55:f3:4b:b9:54:e3:25:
64:42:c0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:45:23 2025 by rpki-client