Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
File: WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json)
Hash identifier: WHT2f5pqtZaeqekWELsvv6jRgzjDVT0HZyQvW2T7q0A=
Subject key identifier: 3A:C6:A6:9E:A9:7F:DC:65:B4:B4:77:62:EF:C9:66:C5:40:B9:91:E2
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial: 0198499C4810CA008897F37ED9975F688C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
Manifest number: 0CA4
Signing time: Sun 27 Jul 2025 02:00:35 +0000
Manifest this update: Sun 27 Jul 2025 02:00:35 +0000
Manifest next update: Mon 28 Jul 2025 02:00:35 +0000
Files and hashes: 1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: uz0XZ84+F4lPGPE0H08p+KPtcTs7VFfMCNTvF1LHDCY=)
2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:48:10:ca:00:88:97:f3:7e:d9:97:5f:68:8c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Validity
Not Before: Jul 27 02:00:35 2025 GMT
Not After : Jul 28 02:00:35 2025 GMT
Subject: CN=3ac6a69ea97fdc65b4b47762efc966c540b991e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:d5:28:a4:78:6c:d5:4c:43:0a:70:34:69:
16:93:83:33:58:ab:97:18:bd:05:6c:32:14:0f:69:
55:3f:72:77:63:ca:f7:e7:b3:fd:73:b5:9f:da:37:
24:34:cf:ed:8d:7b:9f:60:e0:14:c8:bc:77:59:87:
b9:10:db:24:cd:b7:0b:7f:d1:ae:f9:eb:28:88:80:
a3:de:aa:74:2c:32:98:0d:df:24:5b:c2:9a:76:e1:
2d:60:d2:34:d3:dd:d7:5f:6a:a9:cb:72:d0:55:2e:
b0:2f:ae:a5:14:95:80:1c:ab:58:fd:76:2c:f1:b9:
1b:c9:13:b2:77:aa:fb:f7:90:04:7f:05:bf:1e:a6:
dd:74:de:29:a1:81:7b:63:51:3b:e3:da:95:08:ed:
80:d3:46:9c:ca:1f:2f:90:a5:85:43:3c:7b:6b:db:
53:30:92:61:3d:70:91:92:3b:94:d7:45:ba:eb:83:
8b:d0:2c:42:fe:5f:81:ce:7b:00:92:8a:bb:7f:b5:
09:b2:d5:33:1c:2b:50:a4:2c:41:b2:4f:3c:3b:a3:
45:28:af:fa:1e:5c:26:c5:a9:9b:d0:fc:07:8a:f7:
af:85:be:07:b0:b6:20:6c:68:c1:ab:63:f6:80:ef:
2e:df:3c:2a:70:e6:f6:b2:5d:91:b8:88:02:72:f2:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:A6:9E:A9:7F:DC:65:B4:B4:77:62:EF:C9:66:C5:40:B9:91:E2
X509v3 Authority Key Identifier:
keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:76:49:35:d6:73:a0:0a:89:36:6b:37:8a:71:85:18:57:bb:
cc:ff:63:99:9a:5b:8f:1d:45:8f:b3:c5:7a:83:6b:cd:70:b6:
36:15:ef:e3:eb:cb:be:81:99:1b:ec:63:7d:ae:2e:1f:84:3d:
6b:36:3d:b7:f8:95:f5:09:8e:1f:29:ba:49:56:76:05:36:16:
18:40:7e:57:f7:61:68:2b:67:bc:db:28:ce:6d:ec:0a:6c:82:
85:70:87:bd:86:af:ef:3f:ef:42:c1:e8:06:80:54:6e:0f:92:
7a:08:2b:ae:51:40:d4:93:22:46:26:7d:0b:0d:1e:d6:7a:bd:
6b:27:72:8d:73:dc:8c:e0:57:b3:31:7f:cf:14:92:26:c9:65:
b4:b5:7b:8a:75:cb:90:0a:af:82:e9:8e:9c:ba:ca:fa:5b:43:
d2:a6:67:24:74:54:31:03:b3:b8:fe:6f:30:f1:7d:2a:51:f1:
44:83:6d:d6:c4:a5:1a:e8:f2:b7:04:c5:4d:a5:06:e9:83:0e:
2e:f3:44:8b:c5:eb:e4:d6:f6:df:e1:48:bd:7d:c5:20:0a:e0:
17:b6:1e:04:08:26:1d:0f:43:35:12:ab:af:e4:d0:d8:7a:cb:
0d:b1:19:01:d9:8d:51:c5:79:d4:53:f2:9d:e3:a5:c3:be:fa:
21:f9:d7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:35:41 2025 by rpki-client