Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: oTicP0gmxfWlwN/Oem3TUeBFwyaFGWcdgQ3Xu2cVrzA=
Subject key identifier: 08:9D:35:56:DA:1F:54:67:46:AB:32:4D:71:53:93:B3:33:32:26:58
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019849D3B6F53600F9B2DDA45092380A01AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0B5A
Signing time: Sun 27 Jul 2025 03:01:08 +0000
Manifest this update: Sun 27 Jul 2025 03:01:08 +0000
Manifest next update: Mon 28 Jul 2025 03:01:08 +0000
Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: sDtLFwGCFAXtem3XhhLYj6BpAca/w4ESi94/N3jDsks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:b6:f5:36:00:f9:b2:dd:a4:50:92:38:0a:01:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Jul 27 03:01:08 2025 GMT
Not After : Jul 28 03:01:08 2025 GMT
Subject: CN=089d3556da1f546746ab324d715393b333322658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:33:17:b2:9f:42:bb:1a:c7:a3:60:0e:e3:
eb:4a:62:4b:fa:d2:99:6b:6b:dc:ea:bf:dd:b1:e6:
fc:22:f9:62:03:b2:8a:b5:14:fc:e2:3c:28:63:60:
fc:31:7a:74:cd:ad:8b:d6:d5:e0:8f:a2:e5:c5:c3:
09:0e:b2:8a:36:31:a2:2c:dc:fa:26:3d:3b:68:f6:
0a:9c:4e:b2:b7:c7:8e:a2:e1:74:f7:ec:11:ba:a6:
26:0f:37:9e:67:ed:35:c8:b1:8f:e8:2a:c3:53:8d:
5a:b5:73:d3:b9:80:e8:dc:45:ce:ec:9c:dc:08:3a:
ad:b6:ae:89:08:1a:89:a1:f1:55:ad:ec:9f:07:61:
7a:f0:a2:49:cb:4e:18:b8:41:89:74:3f:d4:99:61:
c0:94:c1:17:4b:c9:19:8b:10:36:4f:e5:e2:6f:32:
fb:e3:d9:b5:59:fa:1c:13:0a:c6:6e:29:54:2e:68:
1a:b9:81:af:7b:f7:5b:41:9c:a6:52:4f:8f:68:82:
41:66:14:e3:0c:12:89:23:0f:4c:3c:21:c8:02:ac:
06:b5:6d:85:79:a7:1e:bf:00:d5:30:da:9e:97:8f:
8b:ef:f2:70:37:a7:b1:60:f1:16:89:ef:7d:c9:b8:
3c:c9:2a:0d:f7:69:0f:c7:59:da:a5:c6:b8:30:5c:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9D:35:56:DA:1F:54:67:46:AB:32:4D:71:53:93:B3:33:32:26:58
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:57:99:04:7b:a1:91:89:90:0e:e2:47:15:fc:4f:54:c6:3c:
bf:30:41:f7:be:34:19:a6:e9:ce:7e:20:a6:23:18:51:1e:05:
90:e8:f1:ae:9d:f5:83:ec:01:bc:bf:16:d1:6b:05:26:d8:68:
08:da:9f:ed:d0:f3:4e:5a:ff:99:31:fd:2d:0c:e8:84:c2:2e:
91:b0:1d:a3:ed:8b:da:a4:22:43:01:02:db:9a:ae:78:49:d8:
b7:26:94:e2:23:2e:60:7f:c8:5c:0a:7a:35:8d:fc:e5:0c:75:
61:cc:bb:b4:71:59:f6:7e:0f:f2:0a:6a:58:5b:d9:b8:f2:61:
65:d0:7b:69:4b:32:a5:a1:86:1e:59:d7:51:ad:7f:58:9f:bf:
67:20:4a:4b:85:71:39:45:2f:c6:03:b5:7a:13:2b:ce:8b:ac:
74:f9:73:6a:d1:8a:3b:f5:5a:06:3a:01:d1:4c:5e:83:89:3a:
c7:6a:ac:3c:13:40:56:5f:ff:2f:d8:14:a0:ad:20:3f:99:c6:
2b:40:63:73:37:39:5d:ec:dd:ef:ed:3e:31:d0:38:42:1c:b9:
04:58:ec:87:39:e2:68:b2:f7:31:57:fb:09:f8:c0:a6:55:6d:
d2:16:c0:bb:16:28:e6:a7:1d:ac:79:83:60:f6:76:ef:b8:1e:
27:03:20:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:48 2025 by rpki-client