Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: V2hmO58Qx7Mg2geNzVTgVEf2eIgV4k1Gbq0YcW4kDFk=
Subject key identifier: 26:39:3E:0B:F9:C3:04:E1:E8:33:78:58:B9:00:BB:A5:35:00:80:74
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 019849655348422B714C4B3DCDF15C7E8317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 0842
Signing time: Sun 27 Jul 2025 01:00:33 +0000
Manifest this update: Sun 27 Jul 2025 01:00:33 +0000
Manifest next update: Mon 28 Jul 2025 01:00:33 +0000
Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: AQAe9l7Hodb81VJG5MaapucDoHQX4beFJTctCVI6tUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:53:48:42:2b:71:4c:4b:3d:cd:f1:5c:7e:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Jul 27 01:00:33 2025 GMT
Not After : Jul 28 01:00:33 2025 GMT
Subject: CN=26393e0bf9c304e1e8337858b900bba535008074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:f8:66:67:90:d1:dc:08:4e:a4:53:a5:93:
2f:a1:ad:7e:77:6b:58:4b:f2:21:42:d2:ce:2b:47:
e4:67:36:0e:5a:f7:f5:bb:90:07:8f:64:f9:6d:2a:
73:36:31:1e:af:88:e7:03:9a:7a:7c:03:aa:83:6e:
eb:57:1b:7c:5e:88:62:2b:03:60:a2:7e:7a:ce:6b:
f8:b4:e4:d3:2a:10:da:4a:6d:ef:79:1b:e4:28:7e:
33:53:68:ed:fd:be:95:d3:55:8e:10:08:cc:38:aa:
12:ee:2b:11:a0:38:bf:08:33:45:28:07:08:c5:e4:
91:d5:a0:6b:cc:2a:66:83:39:78:c4:ef:62:47:f3:
a4:fc:82:15:f0:cf:a3:b9:a2:a1:df:41:1a:de:6a:
d9:9f:b0:8b:de:ee:96:04:fd:c3:24:27:24:53:9a:
41:cd:ba:43:8e:8d:df:83:8a:4f:7e:2a:2a:ed:72:
be:50:8f:82:c7:9c:4e:fc:3e:0d:9a:db:cf:19:20:
38:83:a8:8f:e2:10:17:73:a8:9e:ec:bb:3e:06:ef:
47:2e:97:2b:33:8b:eb:5c:f2:73:73:35:47:f5:e4:
f8:5e:48:28:37:9a:7f:80:c7:61:ba:53:6d:8b:f5:
3a:a9:5f:ae:9f:d9:92:8c:4c:4d:70:b2:c6:0d:f5:
3d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:39:3E:0B:F9:C3:04:E1:E8:33:78:58:B9:00:BB:A5:35:00:80:74
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cc:4c:e6:6b:2b:4b:23:fb:2f:1f:d2:71:db:d1:4c:b5:12:
87:a5:f3:e5:43:c4:e6:2e:e9:15:ca:ad:c7:a9:0c:0e:b9:3c:
17:6b:9a:f8:83:89:6b:93:3c:bd:f4:50:b1:57:24:c4:29:bb:
91:0c:4d:85:cf:ca:06:99:5d:71:64:11:49:fd:e9:0c:9b:56:
e6:0b:32:4b:91:aa:f0:1e:cc:f6:0d:22:a2:96:b8:c5:6d:78:
97:89:cf:e6:27:27:c9:ad:53:55:77:49:1c:be:85:28:db:78:
23:be:98:48:e7:f3:64:ab:8b:84:1c:76:9f:00:2d:a9:2c:1d:
f3:13:33:90:1c:c6:e6:75:9f:e2:d9:1f:45:3d:92:b3:56:d8:
b6:9c:88:e1:ea:62:ec:8d:00:1f:fa:f8:a2:73:bd:64:25:d0:
36:b7:5f:bf:16:5a:d2:0f:35:1b:14:07:c7:6e:bd:8a:ad:d8:
27:9f:ee:f9:73:f3:44:d0:8c:da:32:1d:64:48:82:94:2b:8e:
24:37:4e:f4:2e:6a:a4:eb:fd:dc:a5:e0:8c:dd:ed:2f:6f:fd:
6c:47:b8:2d:1b:1a:6f:f2:2d:c5:a1:25:3e:c0:06:6e:a5:ac:
d4:df:d8:09:8a:f3:2f:08:6b:3c:b3:aa:f9:45:73:b4:4d:ac:
54:ec:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:59 2025 by rpki-client