Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json)
Hash identifier: DWc/XcbaChFOKxrtSvScODT5dKCHvcyrkLJ592Qayz0=
Subject key identifier: 92:4F:FA:35:0B:68:17:D5:C4:55:56:C6:7C:36:9E:9E:63:2B:A1:7F
Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Certificate serial: 01992F6C231141FC8A20E4FF0517319D8864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
Manifest number: 88
Signing time: Tue 09 Sep 2025 17:00:39 +0000
Manifest this update: Tue 09 Sep 2025 17:00:39 +0000
Manifest next update: Wed 10 Sep 2025 17:00:39 +0000
Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: iEfcPL/i4vDuIGHF9YHiMmFDhLaoxW1ewBhfkMy9dsU=)
2: o0U8osvjVfiUePXARN4QCTizNIY.roa (hash: ya55CYA+rU6mfw44B9MOjIiEFlx2IM7GsmvEpJ7vX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:23:11:41:fc:8a:20:e4:ff:05:17:31:9d:88:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928
Validity
Not Before: Sep 9 17:00:39 2025 GMT
Not After : Sep 10 17:00:39 2025 GMT
Subject: CN=924ffa350b6817d5c45556c67c369e9e632ba17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:14:2a:cf:d9:1b:eb:02:6a:c3:fe:3e:e4:
69:dc:99:7b:bb:b7:82:2d:a0:3e:b7:4e:ba:50:76:
39:c8:4b:68:58:cb:81:fe:93:46:54:b1:ed:a6:97:
a1:98:c9:c2:d5:e4:35:09:be:d6:5c:02:db:0d:20:
0e:42:f1:80:c3:0c:c0:d2:de:db:e3:a0:f6:bd:a0:
70:78:2c:89:ac:51:aa:f0:64:54:45:6b:27:2d:f8:
52:ac:1f:98:9d:ef:71:7e:34:11:67:80:97:79:a1:
11:4f:45:78:04:1c:fc:ac:61:e0:5a:1e:05:b3:f3:
30:41:8b:4a:ef:6c:de:26:46:f4:b7:51:3e:a2:b4:
46:08:8e:19:2a:8e:d7:2f:5d:db:59:dc:e4:ea:68:
59:00:ce:d9:8f:22:1e:f1:ba:35:9b:67:9c:d9:96:
5f:ee:d6:3d:09:bb:48:22:f8:2e:21:f0:d3:26:e1:
bc:0e:b7:71:cd:68:b2:b3:a7:8f:49:2a:5a:b8:86:
bf:0a:85:dd:00:0b:36:11:95:88:ea:25:da:9a:07:
01:31:c3:dd:34:27:29:8b:db:55:7a:cd:fa:5b:48:
b9:d8:84:0f:dd:f7:20:0f:10:43:98:d2:c5:c2:19:
bd:e9:01:1d:0e:a4:31:b7:12:3b:f7:4a:01:27:cc:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4F:FA:35:0B:68:17:D5:C4:55:56:C6:7C:36:9E:9E:63:2B:A1:7F
X509v3 Authority Key Identifier:
keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:69:90:ad:20:f3:3c:28:38:2d:e1:d2:e7:40:66:1b:ef:be:
72:d1:1e:29:11:7a:c6:17:7b:65:dc:80:6e:01:74:98:78:b0:
8e:f5:a6:44:fa:a6:98:24:ef:c1:7f:6d:7a:6f:24:7e:91:b9:
26:99:b9:26:d6:1b:a2:f5:50:e9:66:94:a2:26:27:c8:27:5c:
2c:9a:37:15:65:68:dd:ae:e2:58:f8:6e:ee:86:da:2c:97:57:
97:c7:06:90:25:35:cd:2f:45:36:6d:55:25:1d:39:e7:22:bf:
d6:9a:27:43:92:a0:8a:e7:db:b2:6a:4c:94:80:62:7d:c8:16:
d1:6b:bb:47:39:4b:24:90:08:48:34:ff:86:8d:07:62:3d:93:
d7:0e:51:1f:58:13:bb:45:93:9c:cb:8e:16:0d:9a:10:e1:1b:
9c:b4:13:fa:cd:6f:d0:4f:cf:33:7c:62:dd:05:2c:3b:09:93:
9a:44:3e:53:6a:de:91:20:62:55:97:27:3c:e1:1d:04:43:e2:
9f:a8:ae:39:d9:cc:a7:68:f0:ca:70:c5:7d:6b:d1:0e:cb:a5:
65:5e:41:27:1f:db:96:5b:95:97:c5:d8:93:13:68:2f:db:f7:
99:eb:4b:2b:65:2f:a4:2d:a7:c7:65:2f:83:4b:64:d7:0f:09:
03:f9:e4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:40:46 2025 by rpki-client