Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
File: WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json)
Hash identifier: olA/uvu5goVQEr5yhiZHe2cI7SE1c50EWqeMCfb82IA=
Subject key identifier: BD:7A:11:B4:DE:0D:6F:8D:EC:7E:19:ED:7D:B5:3D:40:12:C6:DD:8C
Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
Certificate issuer: /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Certificate serial: 019848527ACF3158B763D96421202F3A6463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
Manifest number: 053A
Signing time: Sat 26 Jul 2025 20:00:21 +0000
Manifest this update: Sat 26 Jul 2025 20:00:21 +0000
Manifest next update: Sun 27 Jul 2025 20:00:21 +0000
Files and hashes: 1: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (hash: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=)
2: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: QqSGxTnxswa2ViqdajgTnaBkdeD0tfkQTGcTVo/QIr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:7a:cf:31:58:b7:63:d9:64:21:20:2f:3a:64:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Validity
Not Before: Jul 26 20:00:21 2025 GMT
Not After : Jul 27 20:00:21 2025 GMT
Subject: CN=bd7a11b4de0d6f8dec7e19ed7db53d4012c6dd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:48:a7:9c:d6:f2:ad:e7:6b:e8:8a:30:93:
46:3c:2b:14:b5:56:67:41:21:9c:20:b7:e0:e1:06:
1c:6e:2f:e2:c3:0f:19:0f:78:89:f3:40:c8:94:80:
f1:14:fb:0a:e5:a2:a1:fa:f0:54:52:ae:75:38:0b:
82:5b:76:62:6f:39:ff:6e:ea:d1:e1:db:e4:ec:ab:
b6:ef:69:eb:57:4b:6f:43:83:75:e2:88:67:32:7f:
ef:4e:76:ec:af:c0:d2:c0:22:00:b9:b9:c7:ca:7a:
d6:22:99:65:e0:c8:3f:3f:53:c6:c2:18:ad:2c:5a:
7c:c0:77:58:22:d7:5b:47:14:d8:cb:96:5e:46:d4:
9f:97:11:dd:f0:b1:03:f9:ee:97:19:e3:17:42:1d:
81:65:89:4d:d8:fd:4c:09:46:96:95:bb:5f:6e:c8:
3e:47:35:25:dd:c9:e6:5e:1d:c5:6d:6d:52:e6:28:
6c:7b:14:4a:a6:4e:4c:05:a8:11:64:5a:65:05:84:
7e:88:82:d6:c7:48:32:5b:56:3c:ae:77:d7:82:b3:
86:5e:3b:3c:78:2d:bc:30:5d:fe:c3:c7:dd:fb:05:
71:9b:4f:34:b4:9e:1d:1a:5b:99:df:e1:21:65:1d:
14:9e:43:3a:39:34:f5:02:f5:60:a0:ea:52:aa:f7:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7A:11:B4:DE:0D:6F:8D:EC:7E:19:ED:7D:B5:3D:40:12:C6:DD:8C
X509v3 Authority Key Identifier:
keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8d:fc:6a:7f:50:c6:38:f3:fc:d5:bd:95:48:15:45:f2:62:
94:d3:de:73:f9:2c:90:5c:8e:a2:04:b3:12:5d:db:f8:26:9c:
8a:a2:05:04:b7:eb:7e:2c:32:8e:90:e9:db:04:78:a3:66:90:
65:a8:6d:5d:a8:7b:7b:35:c0:9a:90:65:2f:11:42:34:74:ce:
e5:05:09:36:c8:95:30:87:c9:43:d6:dd:4f:37:9f:8b:ba:7d:
a6:74:a0:b9:42:38:2c:b3:d4:c1:f6:4d:33:3c:43:f6:5c:fa:
8f:50:b0:35:0f:e5:a7:95:35:89:18:db:7e:b1:47:02:51:c4:
bd:1c:0a:73:dc:cf:4e:ec:89:87:9c:43:70:a7:86:83:9c:31:
64:93:04:ad:90:d3:8b:c7:fa:db:8d:6f:a8:25:14:42:a7:9e:
a4:da:2b:ab:98:7e:48:2b:2e:33:87:6e:3e:4a:b8:65:fb:39:
52:09:f4:13:de:94:a7:e1:70:e2:87:78:66:36:c8:a0:0a:13:
52:a8:af:4d:b1:3b:54:aa:85:f5:53:7e:5f:60:16:d4:bb:82:
47:36:cb:a7:b8:ac:20:bb:9d:a3:b8:d1:6d:25:41:33:36:87:
84:dc:81:2b:2e:9f:b9:99:99:1b:61:15:a5:84:75:a2:75:27:
34:63:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:49:08 2025 by rpki-client