Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File: WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier: dhwOoB4AZIIeRDNUnFj042P5UEwwI0HgZUkhHI3OA1w=
Subject key identifier: 69:AB:88:01:55:CA:9F:A4:55:15:C5:29:AF:2B:E9:75:09:22:DB:AD
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer: /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial: 0198499C425D0043921A18F32DA942DCA5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number: 085F
Signing time: Sun 27 Jul 2025 02:00:34 +0000
Manifest this update: Sun 27 Jul 2025 02:00:34 +0000
Manifest next update: Mon 28 Jul 2025 02:00:34 +0000
Files and hashes: 1: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: HiD8OTf4yV44BZtWKnhf3ySFx7XU+ii4NAdUp6nSAbo=)
2: lgaTADVYOse5jNoGc-hlR1iyQcM.roa (hash: whet4s5rWCX20O/tP+eDuVvdhz/p6dV5HSU07qsog2g=)
3: sauoJPH8ZCzsvjvGozwJzjKKcxA.roa (hash: B9f46JTfl/pBuc2yfO6KIqonaBN9SLGFTMzKnpf4wu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:42:5d:00:43:92:1a:18:f3:2d:a9:42:dc:a5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Validity
Not Before: Jul 27 02:00:34 2025 GMT
Not After : Jul 28 02:00:34 2025 GMT
Subject: CN=69ab880155ca9fa45515c529af2be9750922dbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:61:f9:ea:1c:b2:78:53:f8:f2:92:e5:f8:
6f:24:10:03:f0:93:0e:99:d7:47:89:06:13:71:24:
1f:80:83:d6:9b:80:13:76:14:99:ca:5e:cc:73:cd:
43:0f:dd:0f:d3:81:44:c1:88:2a:3f:41:be:a5:0e:
02:f0:4b:e1:3d:93:de:a0:6a:03:eb:d2:0a:68:97:
cd:37:d4:4f:f1:3d:f7:db:2a:27:9c:44:12:b0:ca:
a1:28:31:7e:6f:44:97:fd:bd:fe:bd:1d:d3:5a:4a:
c5:be:be:ab:bc:19:52:fa:a2:00:f7:68:14:fd:48:
39:e9:73:10:6b:cb:8f:79:26:77:43:45:9e:65:a4:
af:40:f9:f8:2c:d9:32:5d:b2:64:fc:8f:74:31:71:
4f:bd:43:13:aa:b9:c0:11:c8:1c:ad:76:f7:aa:dd:
11:4f:bb:b4:cf:47:c1:e4:83:b9:f4:93:a2:25:ee:
ae:f1:4e:1a:fa:6e:c0:bc:5c:a7:af:9f:6e:12:22:
c5:2d:7e:19:0b:83:3b:23:83:ed:38:61:65:dd:aa:
2f:26:90:44:8a:fa:5e:e1:36:34:27:d2:ba:23:ac:
1f:6c:ec:f7:20:8d:ad:87:7f:73:36:e5:f6:36:e7:
0d:57:83:a9:39:92:65:13:49:b0:61:0e:c2:d8:dc:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AB:88:01:55:CA:9F:A4:55:15:C5:29:AF:2B:E9:75:09:22:DB:AD
X509v3 Authority Key Identifier:
keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:02:b9:34:9c:f4:bd:32:4f:98:e0:82:a1:e5:91:ca:1d:aa:
cd:0a:1a:e8:74:84:8f:48:8c:4e:e9:f5:dc:18:39:bf:b7:bd:
f2:45:28:2c:9b:b5:ae:b5:c7:1e:6e:7a:e1:89:4e:a9:3c:c3:
dc:85:00:72:40:91:09:57:68:38:d1:8d:81:9b:9a:35:ee:81:
68:09:91:77:74:35:b0:ac:b2:7d:75:42:76:e6:51:37:98:3d:
fb:1e:49:dd:e8:0a:53:d3:19:8f:ed:b7:01:98:2b:46:d4:de:
13:9f:9d:ea:9d:c7:ab:74:21:6e:d8:b9:fd:a1:20:79:30:6d:
4c:e3:b4:81:bb:15:8d:3b:28:e5:15:36:a9:57:77:72:bf:e7:
fe:66:b7:5a:ee:68:04:df:ef:cd:4b:72:ed:c8:e0:a9:5f:7f:
14:3a:4d:1a:a5:cc:fe:3c:d8:b5:ef:72:45:70:5d:ee:e7:49:
8d:31:b6:73:c4:02:1d:0a:15:49:c4:82:53:d4:45:4a:00:d7:
05:ee:23:93:a6:2f:50:cc:dc:bf:14:e6:10:41:78:4f:80:d8:
1f:59:5f:60:a9:b1:f3:7a:76:b5:d1:1e:cd:c6:4d:e8:8d:3c:
62:08:a2:02:08:d8:82:f2:c2:54:78:db:aa:78:45:ce:5f:66:
4e:3a:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:44:07 2025 by rpki-client