Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: yNJEygntY30BRv7/Vv0FZdQUtHqccrmk+g2XD6KzFgk=
Subject key identifier: 91:88:52:03:1A:48:F0:AE:E1:A8:39:B5:22:0F:F0:16:C1:F9:6B:04
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 01992DEBF550CAB544A9214B2FFCCCC65C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 10F8
Signing time: Tue 09 Sep 2025 10:01:02 +0000
Manifest this update: Tue 09 Sep 2025 10:01:02 +0000
Manifest next update: Wed 10 Sep 2025 10:01:02 +0000
Files and hashes: 1: 4jM0JVjRqyqNZv5MXvbIPvqtPak.roa (hash: esLYhdOdh3leFG/PbeUzrVs3Llk7R0kG4kYUF7ITJVs=)
2: Fk-RTc_x_EZ5p-h1OUyJsVVtDV0.roa (hash: oolZPOnT9pMIdCNLzjvt7CZ7qXkkFGvNdRAoF9kj0Tw=)
3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: GQjhaa6H5mV7Aa5658uAU29x7Uoc4KfyMk6FZk+qwAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:eb:f5:50:ca:b5:44:a9:21:4b:2f:fc:cc:c6:5c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Sep 9 10:01:02 2025 GMT
Not After : Sep 10 10:01:02 2025 GMT
Subject: CN=918852031a48f0aee1a839b5220ff016c1f96b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:11:d6:5b:61:98:1d:86:ad:c0:c8:6c:70:
78:3d:12:db:5a:1a:52:37:f7:db:d4:b5:11:6d:66:
ed:20:fd:d7:27:1a:af:56:1b:6a:9f:bf:ed:18:1d:
aa:d7:c4:60:45:8c:c9:ba:b9:54:42:67:ac:2e:97:
8f:21:40:2b:f4:a6:46:ff:77:68:07:06:66:2a:7b:
86:c1:b2:58:e2:38:fa:53:64:32:2e:0c:44:72:df:
82:b5:22:00:a4:4c:f1:e0:e8:44:a2:16:70:a2:68:
4a:5a:56:6a:e6:60:30:cb:09:e9:ff:21:b9:e7:67:
6c:23:79:e3:92:07:b6:31:47:76:80:05:5d:98:70:
22:ea:e9:33:a6:3b:b9:04:c4:ef:0b:39:fe:86:fe:
a9:63:4d:5b:ed:89:d2:0e:c8:03:11:db:05:8f:0b:
15:97:56:92:ba:6d:fb:b8:29:7e:7c:c6:11:6e:4a:
f8:5b:7c:f0:34:c9:d7:34:b5:ca:13:52:7b:be:a0:
56:0a:32:96:26:4a:2a:3c:28:87:87:8d:b3:46:03:
3e:e7:f5:27:4f:2a:ee:60:65:d5:d0:57:8f:8e:b2:
03:e7:fc:a4:77:00:d2:4d:02:f2:a2:7c:bc:89:5b:
b5:dd:3e:00:44:37:39:03:8f:7f:19:8a:13:cd:b5:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:52:03:1A:48:F0:AE:E1:A8:39:B5:22:0F:F0:16:C1:F9:6B:04
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b6:90:9e:ae:01:ff:c8:6e:a6:e2:bf:8b:3d:bd:1d:df:69:
d6:ab:d0:15:f7:17:2c:0b:97:c5:be:17:a6:55:f3:9f:2e:24:
fc:b0:e9:81:6e:e8:75:ce:c0:74:0c:8a:75:71:47:ef:11:93:
27:69:b3:e7:5a:84:7d:ba:c9:4e:3c:75:81:96:a4:0a:0b:87:
2d:03:e3:88:ef:f0:c4:2d:26:6a:ac:95:75:04:b2:af:81:23:
53:88:5a:a7:88:a1:4e:d3:24:4c:82:1f:b8:01:92:7b:32:29:
40:29:97:4b:9d:79:2d:23:61:85:98:a3:26:b1:3a:c1:fe:1f:
8d:af:d6:6c:f2:db:4e:d6:7d:78:ec:c7:7d:91:37:32:f8:44:
4d:8a:d1:1a:85:7b:20:61:00:bd:df:b3:07:96:94:06:99:0a:
00:a9:90:b9:e2:79:1f:b5:80:bb:dd:f7:32:26:d4:76:29:e6:
e7:d6:95:81:9f:50:bd:0d:67:ca:99:2a:26:3a:0a:28:8e:98:
48:28:49:e0:80:73:e0:ed:87:d0:41:11:36:c4:3d:fd:bd:b4:
51:cf:02:91:59:d3:34:60:b8:d7:4c:4e:17:95:23:0c:1b:f1:
b5:9e:b5:f1:52:a0:dc:02:2c:41:09:b8:87:9d:13:88:31:e9:
75:38:fb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:40:36 2025 by rpki-client