Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: 3GeUBm3AgiijZldwg1xztIbrTNz1BdCYCh5GuheP+2w=
Subject key identifier: 8D:59:18:0F:68:5F:35:9A:A1:1A:39:94:31:CE:AE:43:6C:52:31:FD
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 0198556A3FC3F4CED1764A29BEA774C24A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 09:01:23 +0000
Manifest this update: Tue 29 Jul 2025 09:01:23 +0000
Manifest next update: Wed 30 Jul 2025 09:01:23 +0000
Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: 2b2mYwIZKhzVbcLc6yIOBK6eqj2yNRQkuW89ucrfM2E=)
2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=)
3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:6a:3f:c3:f4:ce:d1:76:4a:29:be:a7:74:c2:4a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Jul 29 09:01:23 2025 GMT
Not After : Jul 30 09:01:23 2025 GMT
Subject: CN=8d59180f685f359aa11a399431ceae436c5231fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:61:e6:6d:97:58:f8:7d:ee:19:54:38:fc:
ad:15:2e:50:09:a0:0c:b3:78:0f:7a:24:18:bb:ac:
3c:9c:fb:39:f0:a2:bc:7c:e7:f2:ee:82:f9:63:59:
b1:c7:69:bf:c7:34:3b:67:7b:82:87:79:a2:6c:46:
f0:2e:f8:ee:12:51:3d:93:93:36:e9:33:19:39:5e:
ba:d2:63:44:4f:81:91:bb:f3:80:f5:1d:77:8f:f3:
ec:a2:ce:af:36:57:a6:3a:19:2f:06:80:5f:b9:f7:
86:d7:f4:ae:1b:0f:48:19:40:fd:42:3b:d9:57:d4:
6d:e8:71:35:f4:e8:a1:20:6b:92:92:80:6b:6c:e1:
60:81:85:94:d2:0a:55:13:d7:91:3a:39:4e:38:3a:
9f:5c:64:ab:8e:21:40:b3:b6:dc:c7:f9:78:8d:76:
d1:41:7c:5f:d8:71:67:35:59:b4:2e:2c:ba:b9:e6:
57:81:5d:ee:0e:f4:ff:c1:8d:f3:fe:e4:47:ec:77:
76:eb:bf:d2:6e:9f:50:af:8d:7a:91:cc:73:18:55:
b3:41:bf:68:0d:e6:0d:47:64:34:22:f7:65:ba:f5:
24:09:fb:f0:37:18:4c:79:4f:18:97:53:bc:e1:f5:
0b:48:82:51:2a:3a:58:60:c0:fe:45:cc:fa:3c:2c:
b6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:59:18:0F:68:5F:35:9A:A1:1A:39:94:31:CE:AE:43:6C:52:31:FD
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8d:db:a2:23:ae:c2:03:85:6d:10:ec:5d:ec:54:0b:21:bd:
3b:68:20:23:11:31:e8:4f:22:90:7f:b0:da:00:56:81:5d:48:
26:be:96:0e:39:71:16:9f:1f:9c:c3:de:03:88:18:cb:9e:6e:
b4:26:38:e3:93:d8:cf:48:6b:a9:70:29:02:ff:ef:8e:fa:8f:
c3:35:c3:5c:af:d9:a4:55:39:ff:41:0f:f3:7a:3a:5d:03:88:
1a:de:f0:22:45:9a:f9:99:e6:57:5f:cd:f6:43:11:c1:7b:f0:
e6:a0:81:2b:31:71:38:b0:44:26:be:67:f4:37:45:0b:d1:d0:
8d:0a:8c:e4:e0:09:76:2e:04:fc:2b:1f:53:f4:77:1b:c1:9a:
5a:c3:fd:77:48:b7:78:c4:aa:81:c2:12:6b:54:6c:55:dc:9d:
ab:93:09:ea:1e:34:12:4c:c4:62:90:9c:7c:e3:33:7c:7e:09:
18:6b:a6:0b:7b:26:5b:cf:fa:3b:a7:6b:3a:84:4f:d4:78:b1:
f1:6c:0e:22:fb:ef:79:69:af:23:ae:5c:39:cb:62:ec:b8:5f:
0e:6f:ac:d8:d5:11:4b:35:ab:de:e0:bc:30:45:4f:c5:db:fe:
35:1e:4a:12:d5:0a:ae:47:ec:6e:ec:c4:74:fb:6c:9a:b7:b7:
98:67:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:04:22 2025 by rpki-client