
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: dSPkFDl+xcrAoVzjXqQCHj1sDzlrp6Jdcjb9ivIEL3k=
Subject key identifier: 8F:80:E3:D4:7E:53:11:01:F2:B2:26:58:DF:86:A8:93:7C:0E:FB:3A
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 01984B54936E4221DD0B740497DCEBCBE799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 0368
Signing time: Sun 27 Jul 2025 10:01:30 +0000
Manifest this update: Sun 27 Jul 2025 10:01:30 +0000
Manifest next update: Mon 28 Jul 2025 10:01:30 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: x3JbX+egxRjuXQ9QbFZhPNpWb7rrEfokeZqPqlKtX3g=)
2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:93:6e:42:21:dd:0b:74:04:97:dc:eb:cb:e7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Jul 27 10:01:30 2025 GMT
Not After : Jul 28 10:01:30 2025 GMT
Subject: CN=8f80e3d47e531101f2b22658df86a8937c0efb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:54:0a:d2:fa:b0:47:9f:6a:8c:18:0c:89:
46:94:06:a8:bd:82:35:73:16:95:91:79:d0:b8:f6:
77:c8:c2:58:72:92:4f:ce:b6:84:e6:a7:35:99:91:
f8:b0:16:47:83:21:15:1c:d3:ee:dc:ef:f8:56:62:
9f:f4:05:04:42:ac:44:78:e1:e3:a9:d1:2b:c5:f1:
4c:04:94:7b:c3:61:f0:f6:be:3a:8a:b1:6a:15:a5:
d3:1e:ab:a1:b0:79:8e:c1:97:95:1d:04:b1:2f:62:
ee:39:8b:15:97:19:4d:c4:70:fd:89:30:75:05:3a:
a3:6c:e5:ea:7a:26:3f:07:ef:47:8a:1f:96:86:4f:
2c:80:5f:b2:16:c5:28:83:b2:a2:8c:ac:a3:c1:1a:
23:0d:5e:6d:78:81:e2:a0:d6:bd:e9:70:24:52:c3:
85:55:58:fd:fd:d4:7a:91:04:3c:09:26:a8:a4:d0:
af:53:b9:af:88:cb:68:0f:8b:29:88:84:df:2d:d9:
2d:13:17:aa:8b:d0:48:9d:f6:32:4d:fd:6c:30:62:
3e:d5:d4:a8:b6:be:e8:ec:3f:f3:ae:01:c6:4c:ad:
a6:b7:60:49:30:a3:bb:fb:91:8a:13:9c:bf:1a:c3:
ea:11:e9:3e:f5:09:45:b1:8f:b5:44:a6:ba:e9:ff:
c3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:80:E3:D4:7E:53:11:01:F2:B2:26:58:DF:86:A8:93:7C:0E:FB:3A
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5c:36:01:17:4f:fe:ef:21:c3:90:3e:a5:da:e0:95:0a:59:
e8:95:38:f6:8e:aa:0e:7c:12:7b:bf:c7:f1:e4:dd:82:56:bd:
4a:6d:8d:73:f0:bf:4b:74:f9:e4:2d:cb:b7:4d:b6:84:a0:44:
22:ba:92:f6:fc:d8:99:b5:79:b5:77:21:f5:5d:61:39:37:5b:
c5:01:9d:71:1f:14:2d:39:71:b9:b6:5a:cf:5e:a6:ed:fe:90:
09:25:b9:0f:72:f8:ee:8a:46:0b:fc:66:4d:65:09:ac:f6:25:
15:67:6b:14:cf:4c:c8:35:e8:d3:9d:ed:38:04:90:11:27:e0:
e1:e8:5d:e1:de:4a:17:75:70:eb:a7:cb:d4:98:1b:04:b1:01:
3a:9f:6c:d6:40:45:97:8e:ac:25:9c:32:4c:83:96:22:eb:07:
f2:62:79:5a:7f:27:93:2c:4d:15:0f:31:dd:2e:ef:b8:49:6e:
5e:6a:d1:f1:50:11:06:6f:21:ab:88:6f:11:aa:9f:e1:f6:9f:
76:03:1d:ac:21:80:8f:38:de:5a:56:3e:f5:95:f2:b4:61:e8:
73:81:fd:c1:6b:c5:79:b0:02:6a:d5:1b:85:65:b8:76:fa:26:
5a:7f:e0:36:24:b1:f9:c8:d0:89:93:75:a7:8c:7e:ed:a1:20:
4e:aa:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:30:28 2025 by rpki-client