Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: NN61kDkwsm+R/s9QjhWo7Amnv48HT1RuTQgSGz0y6Mc=
Subject key identifier: 52:CE:D0:D3:99:28:8E:86:41:D9:AD:5F:32:F8:74:E3:A0:F6:BB:38
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 0198529F0EBBA77CF9EEEA777E9EB18648EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 1182
Signing time: Mon 28 Jul 2025 20:00:12 +0000
Manifest this update: Mon 28 Jul 2025 20:00:12 +0000
Manifest next update: Tue 29 Jul 2025 20:00:12 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: cblQAX24Mfuk+ojBKgY3bqh5hIh8tSFHTiZWUMkh144=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:0e:bb:a7:7c:f9:ee:ea:77:7e:9e:b1:86:48:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Jul 28 20:00:12 2025 GMT
Not After : Jul 29 20:00:12 2025 GMT
Subject: CN=52ced0d399288e8641d9ad5f32f874e3a0f6bb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:7e:fc:3d:93:a0:f7:9b:6c:80:1f:44:8d:
03:81:d0:85:47:0a:2e:b8:f1:23:c4:56:f9:9a:b5:
11:3f:e6:ef:51:41:26:cb:ea:cb:d4:93:49:0c:3d:
99:2f:05:1d:85:1b:16:0e:88:db:c1:78:d8:37:f3:
8a:7f:c0:ff:33:3a:dc:2a:4b:90:79:db:b6:95:96:
12:15:43:f1:aa:9a:88:9e:ae:10:d0:81:af:2f:62:
25:3e:60:68:cb:41:a1:be:90:97:75:89:61:37:ca:
f7:f1:71:43:5d:32:68:d1:d7:88:c5:3f:96:1d:ed:
68:cb:76:96:c2:ee:7f:f3:22:c6:f7:82:38:43:12:
52:1b:07:3b:07:d5:ac:b0:09:07:32:70:fa:71:0a:
fb:33:6d:a0:cd:ca:70:53:ae:11:c5:d2:17:e7:67:
f3:23:cc:4f:a6:14:a1:42:c9:9a:b1:35:2e:bf:17:
af:f0:b1:f1:71:34:8a:8a:d1:48:ce:9e:f4:82:e1:
a9:30:7e:ad:35:30:2f:5d:a7:48:6e:d3:86:9f:83:
ca:ad:13:be:0b:22:c7:53:c9:0c:7a:fb:ae:69:65:
b3:9b:c8:66:07:ec:19:61:ef:8b:ff:47:67:5e:a8:
be:a0:89:8f:7e:25:5d:c1:b2:76:81:cc:00:d3:eb:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CE:D0:D3:99:28:8E:86:41:D9:AD:5F:32:F8:74:E3:A0:F6:BB:38
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a9:2c:c8:75:7f:12:30:a5:31:62:2d:44:15:d2:bd:5e:9d:
33:25:ac:00:b9:9f:9f:5d:67:46:b3:1c:0b:41:02:3d:70:b1:
4c:47:e8:37:c5:73:1c:f8:52:9a:4a:19:e6:b6:0a:a5:03:05:
df:ed:83:ae:52:36:f2:81:fd:d4:c0:c2:c6:72:8e:06:1a:39:
1e:2b:00:45:fd:ee:94:d0:d2:44:d6:88:84:5a:c4:fc:47:bc:
47:f6:8f:fc:d8:56:72:02:91:d9:46:9c:4f:26:dc:fe:be:6b:
78:30:ea:70:52:9a:5f:d9:3b:11:80:9e:36:79:cf:09:67:88:
19:2a:a0:cf:e6:9b:8b:c0:ac:df:80:bd:6d:a6:be:d1:52:93:
f1:57:93:05:b8:25:ff:e2:93:4c:00:ad:45:6d:50:76:d9:1c:
98:f9:57:c5:d5:f9:70:0d:7b:61:c9:05:a0:77:df:ab:4d:73:
5f:f8:b4:c4:60:87:75:b2:d9:57:66:1e:ae:07:80:d0:a6:98:
45:66:83:5c:1f:08:7c:4b:d9:cb:34:eb:c1:bd:d8:21:09:d2:
78:6b:2b:59:77:e3:b9:b2:73:ba:05:e8:77:80:a1:f0:26:87:
18:df:17:f9:f2:5d:ac:17:45:73:47:9f:e1:15:08:c8:99:23:
f9:f6:b3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:21:31 2025 by rpki-client