Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier: DaWgJTB3RyEygF+par3ZeABTK5ij7Q9uEVE639fz0So=
Subject key identifier: F2:D9:F9:63:A7:0D:73:15:8A:0F:1A:60:A6:8B:52:FA:0E:8C:B5:67
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer: /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial: 0198409987B3CE095E9F031EF1AA9653EB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number: 021F
Signing time: Fri 25 Jul 2025 08:01:00 +0000
Manifest this update: Fri 25 Jul 2025 08:01:00 +0000
Manifest next update: Sat 26 Jul 2025 08:01:00 +0000
Files and hashes: 1: NlmDLH5wWMGr_vzUkJAwntWEnjQ.roa (hash: 1/yiZpsUjLuoNGo0Ku/rpHLpaDxTkI6zMzawihAJCgI=)
2: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: PRYfeE3OxIxkMOIIw1iP7c/hE0cJH1gPYO/MpZdi+Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:40:99:87:b3:ce:09:5e:9f:03:1e:f1:aa:96:53:eb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
Validity
Not Before: Jul 25 08:01:00 2025 GMT
Not After : Jul 26 08:01:00 2025 GMT
Subject: CN=f2d9f963a70d73158a0f1a60a68b52fa0e8cb567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:c0:dd:b5:22:f8:98:f7:4e:c9:a4:33:ee:
f6:8f:f6:46:0f:7a:85:49:31:f8:79:9c:f6:3f:4c:
66:12:6c:59:4b:e5:59:3a:20:27:00:ea:1e:ca:e8:
ff:b1:3f:36:58:09:a7:fa:88:04:07:28:18:7e:9f:
b7:b9:b8:d2:96:a6:c5:10:33:f1:c8:a9:4f:ba:36:
3d:23:5a:a4:c9:5f:0d:dd:77:e0:00:8e:83:1c:14:
39:32:86:05:b2:7d:32:9a:ad:cf:12:32:56:cb:db:
65:ef:a6:a9:ec:90:56:61:cd:26:11:83:be:74:44:
b6:9c:88:b2:51:54:c6:bb:8c:f9:6b:22:76:8d:1b:
a9:95:e0:69:f5:5e:05:e7:c1:8b:3b:8a:1f:f6:21:
b0:d2:f4:6e:12:87:91:0c:25:78:b8:af:63:1c:83:
25:df:02:d7:a6:3d:fb:53:45:6e:14:37:2c:5c:59:
da:ba:1e:63:51:43:85:3c:ac:db:be:34:7f:7d:f2:
a7:c4:a0:61:26:18:3f:76:5c:35:5e:8a:90:e0:af:
eb:ee:7f:a7:f8:96:b8:a7:8e:8a:6a:73:9d:c1:9b:
2d:95:cd:e7:a1:29:08:1e:df:3e:6e:12:2f:19:39:
ae:9a:4c:22:c2:e0:0a:21:56:1c:a8:9c:21:e1:48:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:F9:63:A7:0D:73:15:8A:0F:1A:60:A6:8B:52:FA:0E:8C:B5:67
X509v3 Authority Key Identifier:
keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:75:6f:21:76:cd:69:fa:bd:94:93:67:57:80:32:75:d8:
09:1c:3b:c0:25:8a:dc:50:10:3d:09:24:ed:8c:60:f2:a4:f7:
48:73:ca:2c:7d:d3:63:e5:1b:5b:9e:e9:1b:a2:cf:3c:a4:79:
ea:41:b2:a6:a2:ac:cb:b6:75:9a:ec:a1:9b:20:a8:a1:33:e8:
5f:1f:ce:74:bd:98:d0:b8:f1:ba:c8:25:bf:81:fe:78:17:db:
f3:8a:a9:2f:73:d2:43:84:f8:8b:9d:95:76:d4:ee:96:f2:a0:
f5:1e:04:1b:a7:b8:e4:d3:33:95:03:c8:1f:c2:e8:e1:a5:b4:
fe:99:cd:d7:d1:2b:17:18:6b:43:6e:0c:e0:a1:cf:c5:0e:e8:
a0:be:97:19:e9:09:15:b3:c5:ac:52:ef:48:0d:5e:ec:26:81:
09:73:3b:43:b8:99:77:05:0c:ab:d9:7c:61:8f:83:e2:88:0e:
a2:9c:7c:11:98:b1:c5:2d:d1:a2:81:78:92:e4:eb:11:3f:24:
c3:c9:a6:5d:0e:67:29:67:ab:d8:a8:49:00:45:74:bc:16:8e:
05:c5:d1:04:b0:75:5d:52:7d:04:a4:14:ee:b0:24:1a:f0:30:
7a:ba:b0:c7:54:f2:e9:d1:b8:12:07:60:88:2f:27:b5:c1:00:
4c:f8:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:53:28 2025 by rpki-client