Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: biYhNDBiwS68HTIlo9mpUtdRQPgCH7ZneAfMg3S17Ro=
Subject key identifier: 77:82:55:3D:96:10:A2:60:7A:3F:8E:72:C6:5A:A6:5F:6E:3A:1E:14
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 01985569CBFEE5B3F0D0022098C3BF0A9D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 1067
Signing time: Tue 29 Jul 2025 09:00:53 +0000
Manifest this update: Tue 29 Jul 2025 09:00:53 +0000
Manifest next update: Wed 30 Jul 2025 09:00:53 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: VzG+KdacA4wRXhk9CAV9YXBMEwPB8k7twNNZwgUGbqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:cb:fe:e5:b3:f0:d0:02:20:98:c3:bf:0a:9d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Jul 29 09:00:53 2025 GMT
Not After : Jul 30 09:00:53 2025 GMT
Subject: CN=7782553d9610a2607a3f8e72c65aa65f6e3a1e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:f9:ff:76:56:77:2b:b6:48:c3:e0:05:6e:00:
d2:b0:2d:b9:19:df:39:0d:d3:5d:b7:c5:ff:34:9c:
56:41:ee:23:80:55:65:95:06:c1:3f:b2:cb:47:fd:
f2:4f:d6:46:ef:f8:83:a4:32:0d:09:ee:14:36:81:
99:84:41:58:c4:17:dc:8c:bd:18:93:d2:90:de:62:
84:9a:b4:b3:4c:dd:76:a2:50:79:40:e6:a8:b4:73:
94:31:ef:a3:c6:08:de:c3:c1:dc:d6:79:ce:15:f4:
89:c2:c9:ab:c2:2e:e3:d6:8e:14:95:0a:9b:62:c6:
b9:15:98:fa:ca:cc:78:11:e2:4f:f2:b8:7d:6d:14:
38:0c:7e:26:35:69:a7:e2:f9:96:9e:0e:c0:3f:d3:
8f:ea:1b:cb:d6:f0:65:5e:58:98:f4:c3:f5:47:b6:
4b:9a:98:ea:10:4d:ea:50:53:a2:76:e2:c2:80:4a:
21:5b:9e:f1:ff:98:f2:bc:5f:d1:39:97:bd:4e:41:
96:94:9f:4b:f2:ab:6f:92:8f:36:01:08:ce:d8:e2:
63:ce:d7:cd:0e:d4:4c:c3:70:34:8e:52:f3:56:f4:
8f:ea:12:90:ec:35:9c:56:f6:ff:8e:82:1f:e0:f0:
70:49:1a:61:af:a9:f2:f7:34:1f:d1:23:7f:6c:12:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:55:3D:96:10:A2:60:7A:3F:8E:72:C6:5A:A6:5F:6E:3A:1E:14
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:63:0b:fe:f3:5d:10:36:e8:c3:da:a1:7d:63:30:aa:00:ae:
c9:3d:51:c5:fc:d0:32:20:8f:d1:e3:3f:0e:09:90:f2:80:ff:
35:60:51:f8:03:fb:df:fc:7b:6c:51:92:23:1c:7e:c5:b0:a9:
67:8a:d9:69:34:36:da:e9:6b:56:a2:c9:4b:d3:f8:33:70:e7:
65:5a:05:fa:1a:cd:6f:f4:bc:5c:0f:ad:ec:f9:13:e1:67:92:
7e:95:a6:20:22:fe:43:93:b1:1e:c0:de:d3:fe:c6:18:cc:62:
7d:c0:01:9d:37:96:f2:25:28:77:62:81:b6:14:26:98:ba:85:
86:da:db:8a:3d:a1:93:00:20:e3:d4:2c:02:29:5a:87:ac:3f:
d3:a2:e2:1d:d5:91:69:f3:6a:8c:8f:44:62:54:bd:95:4f:83:
5d:35:9f:20:f6:a3:4a:03:03:5a:d3:a5:3e:76:89:af:57:9a:
01:b1:53:2e:05:d8:5e:3b:c7:fa:a0:61:d5:37:a6:74:e1:de:
eb:08:bc:22:4c:07:e8:0a:1c:ac:8b:b2:1b:42:4f:59:af:63:
73:dc:f3:3c:b0:c3:ea:29:e4:69:fb:ad:1c:bf:d4:15:cd:90:
cb:a8:85:41:b2:c6:f2:c6:aa:92:4c:96:14:04:3d:90:af:a7:
23:6f:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:39 2025 by rpki-client