
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
File: WvZis_PcgxKxtryRfwrwBiJ3U1U.mft (raw, json)
Hash identifier: 2J10ufbUEUaZmkETyVJgwxV12FD3hCTtQI9i+OOEZng=
Subject key identifier: 64:C2:13:A1:B4:5B:7D:0E:4C:56:3A:3A:74:BA:60:35:5B:09:AB:69
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Certificate issuer: /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial: 019849D34F0E32E6FD5F8F17522C86BAD788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 03:00:41 +0000
Manifest this update: Sun 27 Jul 2025 03:00:41 +0000
Manifest next update: Mon 28 Jul 2025 03:00:41 +0000
Files and hashes: 1: 7LnQSFfXaCdtSrN73Q04rTSUR1U.roa (hash: qe1kV18U1ftZ6/1GEB/ILiq/KKpDzYSHRLnRjgpziJY=)
2: WvZis_PcgxKxtryRfwrwBiJ3U1U.crl (hash: 8iqqf7Peiwo5O+sragjVrC+TmPCaJefZp5Ch8osJh0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:4f:0e:32:e6:fd:5f:8f:17:52:2c:86:ba:d7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Validity
Not Before: Jul 27 03:00:41 2025 GMT
Not After : Jul 28 03:00:41 2025 GMT
Subject: CN=64c213a1b45b7d0e4c563a3a74ba60355b09ab69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:24:ad:47:56:52:b9:31:fc:24:6d:13:5f:
61:d6:3c:98:43:8d:4d:36:ad:b0:ed:2e:9b:9c:99:
a6:54:86:a1:4d:93:32:fd:29:df:93:64:48:42:ef:
3b:a8:fe:e5:74:0f:8c:7a:16:2c:75:cb:10:ec:c1:
4f:f3:c0:ef:bd:96:d7:94:6d:b5:26:29:2d:43:bf:
52:37:3a:2a:25:10:d4:ed:9a:d2:76:6b:9b:0b:30:
e0:84:91:88:b4:64:72:82:25:dc:22:6c:87:10:c7:
0a:9b:61:e0:72:0c:79:85:cd:36:32:8d:84:93:1e:
be:53:a2:da:69:e3:f7:dc:35:7d:16:0d:05:9f:f2:
cf:03:82:6c:81:36:3b:08:64:5b:9c:9e:86:68:0e:
8f:14:7c:5f:77:ac:6a:18:95:ea:d3:69:d6:8e:26:
3f:56:10:9d:0d:21:30:b8:82:65:ac:ac:40:c0:54:
24:4f:cd:70:00:22:f9:36:b3:a4:02:69:32:aa:75:
aa:93:d2:61:db:9f:1c:a4:6d:65:ef:5d:03:e5:84:
95:d6:23:60:0f:1f:bc:a0:8d:c8:c7:0b:19:98:92:
d6:a1:60:d6:33:0b:c3:a4:5c:55:70:cb:2b:d9:7e:
b3:e4:c7:5b:97:6f:ce:75:cf:17:c8:65:a5:b9:f2:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C2:13:A1:B4:5B:7D:0E:4C:56:3A:3A:74:BA:60:35:5B:09:AB:69
X509v3 Authority Key Identifier:
keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:13:41:d7:72:88:1f:0a:06:b7:6b:09:d1:6a:5d:94:4d:f6:
da:59:fb:f3:88:93:d7:de:b1:1d:49:8a:bb:1e:07:08:16:31:
34:58:98:24:a2:7d:c2:36:3c:c1:56:34:24:31:21:e6:68:ee:
1c:93:d5:3e:63:bc:c9:4c:6f:0f:bc:3b:d6:5f:c0:bd:d9:4c:
b7:e0:f8:62:1b:b3:86:91:ac:51:4e:33:7d:5f:61:24:9d:4e:
25:66:1d:51:c0:27:57:fc:e0:5b:18:08:3b:b7:74:51:43:a2:
b4:a2:d2:d2:a6:33:06:3e:0e:0c:2d:3e:c8:38:d0:4e:59:83:
72:60:64:da:ce:c4:f8:ed:b0:9a:4d:1c:57:03:d7:ea:09:26:
18:14:2d:b9:7b:c1:33:0e:b7:08:ff:60:0d:36:54:2f:e1:51:
80:16:db:5d:71:22:ac:fd:66:63:e3:f6:84:6d:eb:ee:75:fe:
32:70:f7:0d:45:fb:6c:3c:13:ae:25:e6:90:99:2c:f9:2a:c7:
10:d1:ca:4b:da:6a:a3:e3:b7:aa:08:71:2f:df:32:c5:16:74:
f7:66:1e:ee:d5:ff:a9:45:b1:10:d7:b7:36:a5:37:ab:dc:d0:
a2:47:c8:75:93:8e:7f:a8:b1:5f:5f:e1:2b:42:ec:3d:07:ba:
30:4c:fa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:08 2025 by rpki-client