Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File: Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier: JAibwiILB3kQE7IA2Il9YhXj8XZHSQPUejEtfLn2Pls=
Subject key identifier: 2C:CA:02:68:70:85:04:E5:3E:80:FC:D6:36:8B:97:1F:D6:09:0C:6D
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer: /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial: 01984777F40A8F1B56DCB9F0F1C1212CD3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number: 0375
Signing time: Sat 26 Jul 2025 16:01:40 +0000
Manifest this update: Sat 26 Jul 2025 16:01:40 +0000
Manifest next update: Sun 27 Jul 2025 16:01:40 +0000
Files and hashes: 1: OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa (hash: +2C6c4zXqA1Vi974tbwpI0Ciww2lyqoubywKBoSNij8=)
2: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: uNmzLMoFYTWe0IouPtv2i51nPt7rTkMdgHHFrFIuA8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:f4:0a:8f:1b:56:dc:b9:f0:f1:c1:21:2c:d3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Validity
Not Before: Jul 26 16:01:40 2025 GMT
Not After : Jul 27 16:01:40 2025 GMT
Subject: CN=2cca0268708504e53e80fcd6368b971fd6090c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:da:03:c8:ff:46:7b:b5:ae:c2:21:6f:23:
43:21:a1:86:e4:3b:4e:66:fb:fd:a2:b2:8b:d1:d7:
6e:ce:ce:00:c8:bd:c6:ef:7b:62:15:30:a1:f1:69:
dd:1f:64:2b:b4:b9:68:8c:49:ba:19:8b:d0:cf:35:
cc:5c:39:05:3c:24:0d:b6:16:50:55:64:19:4d:4a:
ff:92:6d:41:2b:c4:54:f1:a0:80:eb:e9:c0:cc:22:
d5:69:4f:e9:fe:95:83:25:a3:bb:19:f0:7a:ed:2a:
32:24:1a:fb:db:88:12:af:3e:e0:b5:a1:93:1c:6e:
ca:8f:2e:29:c8:cc:c5:78:2e:ff:4f:9a:a1:28:1c:
46:d6:91:92:13:c5:ea:4c:6b:45:da:c8:ec:3d:24:
ea:2a:96:09:54:e0:bd:d2:57:97:60:21:a7:ad:ab:
fd:e0:c8:b3:e0:c7:72:e7:2f:26:72:04:47:25:6c:
ec:fb:d9:eb:df:9c:f4:89:d1:b8:e0:de:fe:e9:9b:
35:56:9e:10:1d:fb:49:09:d2:11:d3:e4:53:cf:ec:
10:d4:8c:e5:55:92:00:79:4a:07:b3:3d:d4:fa:35:
4e:db:91:70:d7:45:51:26:8e:5f:da:da:e4:a1:d7:
b5:a6:73:7f:dc:db:f1:20:ae:3e:54:72:0e:30:42:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CA:02:68:70:85:04:E5:3E:80:FC:D6:36:8B:97:1F:D6:09:0C:6D
X509v3 Authority Key Identifier:
keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:db:23:c2:48:7b:f9:b1:5f:17:41:67:e1:4c:9a:a4:2e:57:
19:5b:72:d4:d4:2c:4e:45:33:c9:95:0a:51:52:70:24:ae:d0:
0c:f0:98:2b:0e:27:66:0a:5b:95:c4:82:08:bf:41:fd:7a:1c:
49:b0:a2:d6:d9:3e:89:ac:cc:48:f2:94:1f:da:00:94:da:67:
97:99:c4:54:d4:39:79:29:f6:07:3e:07:f2:d0:8b:e0:91:81:
ca:63:de:b8:68:3d:58:d9:59:2e:68:a8:60:58:5b:ca:66:86:
96:f0:78:01:78:60:27:e1:62:45:27:1a:2e:b6:6b:07:ec:fa:
f1:b1:9e:b3:d5:6f:5e:dc:a7:b2:ea:1b:04:a5:7f:ca:2c:67:
03:87:53:37:52:07:d8:16:bf:d7:ae:97:04:da:6c:72:c7:dd:
00:1a:36:e6:82:bd:6f:36:82:14:94:ba:f8:60:09:2d:4b:90:
97:4d:c9:a3:17:7d:3a:ad:62:8d:ee:36:dc:ef:c2:e4:a1:68:
5b:80:97:61:ab:b0:f3:ce:33:79:17:9c:b3:72:42:5f:cc:09:
03:6c:a7:4d:97:2b:54:49:8b:95:6c:96:76:72:b7:0f:f4:69:
10:51:ea:73:ab:32:96:9d:b0:a1:a7:f5:a9:c8:4e:90:d4:71:
ce:de:6f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:32:38 2025 by rpki-client