Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
File: WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json)
Hash identifier: ccfm5wB2P7MRPZKDWv1hCR4nQOBB8m9TXfrkJIrDYTs=
Subject key identifier: C3:E6:08:A3:BF:D0:95:6F:83:0A:8A:24:66:B3:21:30:AA:C0:15:C1
Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Certificate serial: 01984A09BE921A2CB7CFD193D0AF668C831F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 04:00:09 +0000
Manifest this update: Sun 27 Jul 2025 04:00:09 +0000
Manifest next update: Mon 28 Jul 2025 04:00:09 +0000
Files and hashes: 1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: HISuMx1I1ezsJij+fM647gztMrEAN8QXNy/IGQ4DooM=)
2: qnyT4xJfydWnP5jn7MY2v2jL3y4.roa (hash: OVzltJuTj7ZgLCXEnxygFrh+27k2M7PI7mlew2jPilY=)
3: rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa (hash: pob5Gk3ii6Z8pPugpFKGScd6y3cYxp1AE5yYcUpWbig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:be:92:1a:2c:b7:cf:d1:93:d0:af:66:8c:83:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4
Validity
Not Before: Jul 27 04:00:09 2025 GMT
Not After : Jul 28 04:00:09 2025 GMT
Subject: CN=c3e608a3bfd0956f830a8a2466b32130aac015c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:b5:81:d4:aa:43:bb:15:0c:9f:1b:2a:93:
80:be:50:b5:5c:63:4b:74:03:48:e4:5b:74:de:55:
e6:ab:db:a6:23:64:45:a8:c2:4c:06:ae:66:b1:19:
39:95:88:53:8f:0f:16:33:30:0b:05:1e:db:4e:bd:
3c:bd:7c:b3:01:0c:dc:10:b8:6b:67:1c:1f:7c:e6:
bb:6b:9f:d2:69:ec:42:6a:48:ff:55:d5:f7:7d:be:
d7:a2:f0:bf:21:41:f8:27:39:c2:4f:f1:56:25:9b:
6b:a7:70:13:eb:6c:4e:d9:6c:ab:70:0e:61:ee:41:
12:42:dc:99:88:1f:70:e2:63:d1:4e:74:d0:aa:5e:
ed:98:fc:d0:1c:87:f5:56:39:bb:6f:67:80:b2:88:
2f:85:82:c4:f3:bf:ba:fb:9c:dd:ae:b7:f1:57:da:
fe:09:e4:27:ce:d5:28:92:d1:ca:14:0b:07:c0:13:
63:ed:c4:be:08:8e:0e:82:fa:ca:68:d5:d2:92:62:
ff:1f:ed:93:af:dc:f8:96:61:60:35:cf:b9:03:12:
c5:74:bd:1f:99:83:b5:8d:e3:92:93:7e:d5:8c:ca:
4f:1c:f4:ce:48:ec:4c:eb:bf:7e:4e:a2:57:82:68:
e5:19:bf:77:5f:97:8c:67:7d:6a:05:9b:86:f0:6d:
d0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E6:08:A3:BF:D0:95:6F:83:0A:8A:24:66:B3:21:30:AA:C0:15:C1
X509v3 Authority Key Identifier:
keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fb:e3:f7:e3:84:6a:8f:59:05:94:c4:75:a6:57:2f:4e:62:
da:f2:47:0e:d1:0a:78:24:dc:c9:68:22:9f:d2:e9:f3:40:f6:
5e:ac:eb:a7:3b:82:c0:e2:93:2a:15:a7:db:12:84:64:3d:f4:
3e:c7:e6:d1:bd:18:e2:f9:bb:f7:9a:73:b6:34:72:b2:3f:2c:
6d:cf:fa:09:ab:eb:d3:d9:47:93:b9:c7:47:01:27:aa:11:d1:
5b:dd:b4:a6:8d:99:cf:79:99:31:45:40:50:db:14:13:aa:e8:
e3:7b:b6:e3:13:c9:e6:23:a1:f8:85:65:de:f6:4f:60:7e:ca:
83:2c:2c:03:b3:bb:18:a3:24:a5:7b:45:4f:b8:35:a4:6d:4d:
6f:c1:8e:8d:0a:d9:d4:89:11:22:06:30:d8:04:33:dd:4c:40:
78:d9:46:74:85:6f:ab:d6:59:16:8b:2d:ff:94:5d:a5:85:34:
38:8c:41:10:5b:b7:65:ee:08:5d:ee:d8:5a:c1:5e:b3:d8:45:
f2:74:83:2e:fc:d3:89:7f:6d:5b:37:7b:df:e9:48:0b:fd:e6:
d4:01:19:9c:53:04:8d:18:80:a9:9f:a4:33:0f:c6:1a:bc:3f:
50:3b:0f:19:2b:bf:cb:bf:f4:09:41:0f:12:31:96:f5:ed:3c:
18:de:b7:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCb6SGiy3z9GT0K9mjIMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZDBhM2Y5YzM0MzA3YjBhNWIzNmQyZTZkMTg5OWFlZmU3
YmJlYjQwHhcNMjUwNzI3MDQwMDA5WhcNMjUwNzI4MDQwMDA5WjAzMTEwLwYDVQQD
EyhjM2U2MDhhM2JmZDA5NTZmODMwYThhMjQ2NmIzMjEzMGFhYzAxNWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTO1gdSqQ7sVDJ8bKpOAvlC1XGNL
dANI5Ft03lXmq9umI2RFqMJMBq5msRk5lYhTjw8WMzALBR7bTr08vXyzAQzcELhr
ZxwffOa7a5/SaexCakj/VdX3fb7XovC/IUH4JznCT/FWJZtrp3AT62xO2WyrcA5h
7kESQtyZiB9w4mPRTnTQql7tmPzQHIf1Vjm7b2eAsogvhYLE87+6+5zdrrfxV9r+
CeQnztUoktHKFAsHwBNj7cS+CI4OgvrKaNXSkmL/H+2Tr9z4lmFgNc+5AxLFdL0f
mYO1jeOSk37VjMpPHPTOSOxM679+TqJXgmjlGb93X5eMZ31qBZuG8G3QFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPmCKO/0JVvgwqKJGazITCqwBXBMB8GA1UdIwQY
MBaAFFnQo/nDQwewpbNtLm0Yma7+e760MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2RDai1jTkRCN0NsczIwdWJSaVpydjU3dnJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OTFjMzMtYTEwZS00M2E5LWFjMjkt
ZTBkMTMyMzBiOWQ1LzEvV2RDai1jTkRCN0NsczIwdWJSaVpydjU3dnJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83OTFjMzMtYTEwZS00M2E5LWFjMjktZTBkMTMyMzBiOWQ1
LzEvV2RDai1jTkRCN0NsczIwdWJSaVpydjU3dnJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgPvj9+OE
ao9ZBZTEdaZXL05i2vJHDtEKeCTcyWgin9Lp80D2XqzrpzuCwOKTKhWn2xKEZD30
Psfm0b0Y4vm795pztjRysj8sbc/6Cavr09lHk7nHRwEnqhHRW920po2Zz3mZMUVA
UNsUE6ro43u24xPJ5iOh+IVl3vZPYH7KgywsA7O7GKMkpXtFT7g1pG1Nb8GOjQrZ
1IkRIgYw2AQz3UxAeNlGdIVvq9ZZFost/5RdpYU0OIxBEFu3Ze4IXe7YWsFes9hF
8nSDLvzTiX9tWzd73+lIC/3m1AEZnFMEjRiAqZ+kMw/GGrw/UDsPGSu/y7/0CUEP
EjGW9e08GN63NQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:14 2025 by rpki-client