Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: pNBwMdndT2dZeGed9GqB4cNd8fswLmtWdPVzG5c65Y4=
Subject key identifier: 2B:C8:D8:D9:2E:ED:82:FF:B0:98:85:6F:80:4B:12:BF:D0:6F:AC:C9
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 01984776F17C5D115DF6F49771A04282EA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 160F
Signing time: Sat 26 Jul 2025 16:00:34 +0000
Manifest this update: Sat 26 Jul 2025 16:00:34 +0000
Manifest next update: Sun 27 Jul 2025 16:00:34 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: zZ2WuybzTFlxKHQ/qrXf3C/S2ARikjhpy/i+mkbGWG0=)
3: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:f1:7c:5d:11:5d:f6:f4:97:71:a0:42:82:ea:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jul 26 16:00:34 2025 GMT
Not After : Jul 27 16:00:34 2025 GMT
Subject: CN=2bc8d8d92eed82ffb098856f804b12bfd06facc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:af:37:a1:d4:a6:30:62:a2:ef:78:54:43:
94:1a:04:d9:d5:0c:7a:cd:5c:ab:a3:dd:1d:7d:1a:
07:08:48:f3:af:17:18:9e:17:ae:c0:16:fe:b3:39:
64:b6:82:a9:a4:9f:58:2e:4f:b5:06:d5:c4:f5:c2:
24:29:b2:52:25:3a:23:63:e5:f0:59:04:a4:dd:b8:
38:f4:c9:92:c0:34:38:16:e0:e3:f6:37:1b:4a:c0:
bf:34:c1:e9:a3:7a:65:8a:53:17:8f:ba:23:ac:29:
2a:08:aa:4a:ee:ae:99:78:d2:dd:07:74:13:44:4a:
ce:33:5b:9b:e0:be:87:38:26:28:51:35:30:cf:2d:
7c:5d:6d:43:fe:8e:43:45:00:a3:a5:43:32:a7:fe:
51:fc:d4:ed:46:37:dd:5c:70:81:19:46:69:30:8f:
1c:4a:22:72:b7:2d:1f:8d:6f:d8:5f:7a:1e:96:b3:
74:c2:48:33:f9:2c:ae:30:5f:5e:b6:72:94:13:8b:
6b:e2:eb:cb:93:0d:43:cc:ee:f1:9b:fd:f8:b8:6b:
16:aa:3a:3f:b9:ee:9b:85:a9:f2:92:4e:8f:7e:b9:
b5:ea:75:a7:23:a0:be:4a:a1:10:3d:74:0a:16:43:
43:3e:1f:8b:30:3b:81:eb:1d:34:d0:21:4f:5a:1a:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C8:D8:D9:2E:ED:82:FF:B0:98:85:6F:80:4B:12:BF:D0:6F:AC:C9
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:70:94:f5:65:f7:fb:da:3b:87:61:c8:09:61:1f:33:97:a6:
7e:29:0b:9c:85:dd:0b:90:e5:de:12:d7:70:4e:33:b6:f2:ee:
ed:4f:38:1a:1c:6c:ed:3b:06:0f:5b:94:f6:56:b0:c1:26:6a:
04:54:70:f4:c9:56:6a:8b:cd:d5:00:7b:d1:a1:45:49:9d:74:
c5:d5:ba:ff:b2:a0:21:44:1b:65:4c:ab:a1:7b:97:e9:da:b0:
e4:63:fe:1b:a1:81:b7:d4:bd:56:3a:4e:13:a1:5a:b4:dd:85:
be:de:1b:4b:0e:85:54:8e:17:e3:b9:f5:13:6b:be:ec:c4:3d:
fe:f7:6c:fd:f2:79:9e:7e:c3:a4:47:e4:4b:e1:ea:b9:8b:41:
93:53:82:13:db:87:eb:33:99:63:0c:93:22:9a:c1:8a:10:da:
1c:1f:b8:41:1a:77:ca:dc:df:9c:65:70:88:5b:5f:3b:58:b6:
29:62:1c:15:77:b3:61:b0:76:74:8c:2d:52:24:b8:ff:3d:bc:
52:21:0e:9f:94:ea:f7:d3:f5:b5:67:08:80:46:2b:15:0c:02:
0e:29:49:76:8a:72:ca:63:60:5e:db:82:83:89:ac:47:bf:19:
80:c2:69:e4:fb:8b:b9:bd:a3:38:f4:5e:a7:c8:0c:c7:26:e0:
a8:d0:4e:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdvF8XRFd9vSXcaBCgupyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm
ZDUzYWUwHhcNMjUwNzI2MTYwMDM0WhcNMjUwNzI3MTYwMDM0WjAzMTEwLwYDVQQD
EygyYmM4ZDhkOTJlZWQ4MmZmYjA5ODg1NmY4MDRiMTJiZmQwNmZhY2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TyvN6HUpjBiou94VEOUGgTZ1Qx6
zVyro90dfRoHCEjzrxcYnheuwBb+szlktoKppJ9YLk+1BtXE9cIkKbJSJTojY+Xw
WQSk3bg49MmSwDQ4FuDj9jcbSsC/NMHpo3plilMXj7ojrCkqCKpK7q6ZeNLdB3QT
RErOM1ub4L6HOCYoUTUwzy18XW1D/o5DRQCjpUMyp/5R/NTtRjfdXHCBGUZpMI8c
SiJyty0fjW/YX3oelrN0wkgz+SyuMF9etnKUE4tr4uvLkw1DzO7xm/34uGsWqjo/
ue6bhanykk6Pfrm16nWnI6C+SqEQPXQKFkNDPh+LMDuB6x000CFPWhpXsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvI2Nku7YL/sJiFb4BLEr/Qb6zJMB8GA1UdIwQY
MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt
OGVlMjFiNzRkZDU2LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2
LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHCU9WX3
+9o7h2HICWEfM5emfikLnIXdC5Dl3hLXcE4ztvLu7U84Ghxs7TsGD1uU9lawwSZq
BFRw9MlWaovN1QB70aFFSZ10xdW6/7KgIUQbZUyroXuX6dqw5GP+G6GBt9S9VjpO
E6FatN2Fvt4bSw6FVI4X47n1E2u+7MQ9/vds/fJ5nn7DpEfkS+HquYtBk1OCE9uH
6zOZYwyTIprBihDaHB+4QRp3ytzfnGVwiFtfO1i2KWIcFXezYbB2dIwtUiS4/z28
UiEOn5Tq99P1tWcIgEYrFQwCDilJdopyymNgXtuCg4msR78ZgMJp5PuLub2jOPRe
p8gMxybgqNBOmA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:38:04 2025 by rpki-client