Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: 7U6w3ch5svyc7pzWIrMMT0uxrzQ3QKm2jlIFsd5WJyE=
Subject key identifier: 0B:66:A4:9E:46:6F:4E:B8:A4:B7:CF:3A:EB:7B:D3:98:12:8A:A1:8D
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 0198462D3D1F14C795419F377AC0608B01A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 080D
Signing time: Sat 26 Jul 2025 10:00:26 +0000
Manifest this update: Sat 26 Jul 2025 10:00:26 +0000
Manifest next update: Sun 27 Jul 2025 10:00:26 +0000
Files and hashes: 1: CrZg-KF8Q9A22OHJJHctF4UJ8vA.roa (hash: TgN9LzFg5B6mAl/H8RLYxQOgYmdpxQcOV4fT/DnUDn0=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: xpPQcq/hD/K2kkKaDBx3PMJ5TXswbygJsjGhKkGG7SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:3d:1f:14:c7:95:41:9f:37:7a:c0:60:8b:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Jul 26 10:00:26 2025 GMT
Not After : Jul 27 10:00:26 2025 GMT
Subject: CN=0b66a49e466f4eb8a4b7cf3aeb7bd398128aa18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c7:3b:08:7c:65:90:82:7b:41:dd:7b:24:c1:
bd:c1:9c:dd:89:7f:6a:d9:af:94:a3:c8:5c:c0:df:
80:84:c3:90:4c:28:ff:3f:b6:d3:3b:54:19:dc:ea:
dc:04:e2:a1:82:b6:54:65:e9:e7:16:d4:d7:1f:43:
f0:78:a5:c5:f8:69:d4:7c:01:97:eb:cf:d0:64:06:
b8:ad:a7:26:6e:42:83:64:50:df:7f:ef:52:69:ed:
ea:6d:b7:e7:6d:2a:77:93:55:e6:04:bb:c8:96:f9:
04:39:a0:97:44:ba:95:0b:1b:dd:8f:d5:7b:fc:d9:
56:3a:13:e9:ac:b4:34:65:93:cb:9c:60:eb:7e:98:
61:0a:1c:49:99:a7:53:81:18:e9:ae:2d:a2:b9:53:
52:4d:ae:aa:e6:ea:6d:cd:76:07:43:d4:65:3d:1d:
45:d0:2e:e1:5a:86:85:37:a1:44:03:dd:55:9d:0c:
b8:a8:7c:0e:42:24:14:20:1d:1e:4c:e3:ff:2c:bc:
26:bd:93:2e:12:0f:e8:7b:51:1f:f7:8a:bc:47:ed:
74:73:80:db:31:c0:70:a4:ab:51:cb:72:78:1b:33:
26:d6:b6:b8:72:0a:34:96:a2:f1:4c:2b:33:3e:60:
85:bd:d3:5a:f2:1c:ab:0a:82:26:bd:cf:7a:0f:71:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:66:A4:9E:46:6F:4E:B8:A4:B7:CF:3A:EB:7B:D3:98:12:8A:A1:8D
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6d:02:ed:00:69:5d:5d:06:5b:8e:24:eb:da:09:9e:f1:a6:
65:67:ea:8b:83:c3:f6:62:2f:df:cd:f4:8f:57:64:7c:4a:22:
61:e5:72:78:c3:fc:0d:ff:f9:83:ac:1e:ed:d7:8e:d9:79:2a:
c4:c5:51:4e:f2:a5:7f:81:fe:88:6d:c4:48:f4:ea:1d:9f:c0:
fc:24:44:6d:80:21:8e:8b:f2:0f:3a:f3:a9:04:37:09:6e:1d:
94:7c:25:7c:27:6c:be:f0:57:f0:be:21:57:ac:d2:15:51:c7:
35:ae:b3:09:2a:7c:98:01:b7:d6:fa:b7:5e:c3:f2:53:19:48:
96:82:2e:fd:be:e3:84:d4:72:ff:63:36:3d:8c:55:fc:d0:c2:
ab:e7:e5:38:d1:b0:cc:00:a6:d9:e9:4b:f8:4c:9f:b8:f2:79:
2c:6a:6b:c3:17:ba:a4:8c:ae:e2:f2:3f:7b:65:2b:2b:2a:9d:
b0:0d:55:cc:1c:9d:e2:65:8c:63:ce:5c:fd:c0:63:a1:1f:03:
cf:50:0f:e8:fd:c8:28:88:11:27:73:05:b6:f7:7a:c2:f9:b6:
bb:aa:95:20:a8:24:41:18:de:1a:84:ba:53:d7:98:9e:49:ae:
7a:ec:07:b7:90:1f:43:a7:0d:3d:27:f9:dd:e0:2d:f0:07:8f:
53:c4:50:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:26:09 2025 by rpki-client