Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier: 73wN1FTxMvoIhxERdbPpDLKzFmpPMThVOj67j6D7bkk=
Subject key identifier: B0:0A:C7:C2:C2:68:0B:15:8B:07:40:E7:BD:C2:E0:B4:E0:CB:3A:4B
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial: 01984664E963ACD54E202B58A0044615A044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number: 135F
Signing time: Sat 26 Jul 2025 11:01:15 +0000
Manifest this update: Sat 26 Jul 2025 11:01:15 +0000
Manifest next update: Sun 27 Jul 2025 11:01:15 +0000
Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: O9z+dzJjTan6YdndUgSHK+kwuCTP+Fp6mp8y/Vf1MJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:e9:63:ac:d5:4e:20:2b:58:a0:04:46:15:a0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
Validity
Not Before: Jul 26 11:01:15 2025 GMT
Not After : Jul 27 11:01:15 2025 GMT
Subject: CN=b00ac7c2c2680b158b0740e7bdc2e0b4e0cb3a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:60:c5:d7:fd:7d:65:3e:0b:9c:63:29:10:
59:4e:3e:9e:d6:af:33:52:75:84:15:69:1c:2c:3a:
60:48:95:89:22:7f:ab:71:20:b9:7e:fd:90:4e:17:
74:e7:8c:4f:74:89:e3:fc:d7:64:37:63:27:62:86:
96:1e:26:27:23:c4:8c:47:ad:1c:2d:08:7c:84:31:
45:c5:92:bc:a1:a8:bd:49:6f:ea:8f:82:a8:9e:41:
e2:f7:3f:c5:f5:d9:4d:98:5d:75:5a:3d:6a:c5:6d:
60:3b:60:d6:e7:a3:af:25:fd:99:b4:8a:65:8b:47:
01:f9:3a:28:fc:e9:ae:48:04:0a:eb:bc:22:c8:35:
70:86:22:a3:95:a3:39:fd:3d:2d:9f:9e:8d:2b:ec:
4e:51:dc:be:4e:cc:44:57:f8:88:23:a7:a6:d3:2d:
8a:1c:77:9b:23:f8:4b:77:01:ce:2c:4b:31:5b:06:
98:ba:63:1f:c3:f3:0c:8d:f7:be:53:ee:f3:39:95:
3f:f3:dd:3a:f9:0b:1f:a1:45:ff:85:2c:9f:af:f6:
b0:13:9f:96:a3:ef:6e:34:62:70:c9:b7:24:32:eb:
0f:03:f6:cc:59:47:a3:54:c6:e9:55:69:a8:6d:24:
42:4a:d6:ee:d2:b1:78:f5:e6:4b:28:7d:2d:12:14:
47:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:C7:C2:C2:68:0B:15:8B:07:40:E7:BD:C2:E0:B4:E0:CB:3A:4B
X509v3 Authority Key Identifier:
keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:42:45:17:10:16:5b:8d:11:73:cd:7d:54:09:77:b2:8e:7d:
60:bf:de:c6:3f:af:95:8d:f2:6c:cd:76:6c:a1:50:b9:30:80:
c6:fb:88:5e:dd:68:99:78:dd:70:b9:9e:76:36:68:96:ec:81:
dd:8b:2f:f9:89:59:ff:28:de:0e:43:61:bb:10:5d:47:01:5d:
a0:f3:99:ce:f0:ee:c2:c2:2f:a4:cc:3f:ce:8f:0b:ff:9c:d6:
a9:c5:db:45:9a:f7:73:e5:c2:0a:8d:b0:c2:48:45:bf:e9:d6:
c2:e2:58:c0:c8:fd:2f:40:b5:5e:43:c6:4d:61:51:be:f4:ee:
27:3c:df:a1:5f:95:80:25:c3:ba:3b:47:c5:2b:99:25:dd:fa:
ff:cd:cd:5f:7a:3a:ed:be:d6:87:af:ca:58:af:46:0b:41:fc:
e9:fb:74:be:66:a7:e8:85:07:9b:2a:d2:cd:eb:e8:5b:f3:92:
40:f3:c0:28:cc:93:06:ce:7f:97:5c:0e:68:f5:89:5e:59:db:
da:d1:56:61:a9:b4:72:76:4c:e6:41:ec:f5:dd:0e:f2:59:bc:
62:3e:4e:07:3c:87:19:7c:05:5d:93:a5:e2:eb:6d:0a:c2:31:
1d:c6:f7:98:a4:5d:a1:cb:7d:f9:e8:3d:e7:81:2b:64:6b:5b:
1c:bd:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:28:30 2025 by rpki-client