Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json)
Hash identifier: uz9mq8HoTPemQAb19rIsxz2/qwtbFGYmHsps79tkVWc=
Subject key identifier: 58:52:45:4E:99:88:95:56:57:47:3F:85:19:11:4E:3B:B0:1D:0B:96
Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
Certificate issuer: /CN=584d44ad55c262d84efd442dc8767b0413e1b162
Certificate serial: 01992C343D321EFC65FC065CEEDA1C3FA4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
Manifest number: 0299
Signing time: Tue 09 Sep 2025 02:00:44 +0000
Manifest this update: Tue 09 Sep 2025 02:00:44 +0000
Manifest next update: Wed 10 Sep 2025 02:00:44 +0000
Files and hashes: 1: NlmDLH5wWMGr_vzUkJAwntWEnjQ.roa (hash: 1/yiZpsUjLuoNGo0Ku/rpHLpaDxTkI6zMzawihAJCgI=)
2: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: nglM4Ub3bz5zmc/1KgVxTAK0sLLAV+uAjyDrALs6ueQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:3d:32:1e:fc:65:fc:06:5c:ee:da:1c:3f:a4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162
Validity
Not Before: Sep 9 02:00:44 2025 GMT
Not After : Sep 10 02:00:44 2025 GMT
Subject: CN=5852454e9988955657473f8519114e3bb01d0b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:e0:f6:15:cd:61:81:3f:25:c4:63:c2:8d:
1e:e9:d3:23:0a:e9:16:4f:fd:4f:fa:02:50:9c:95:
d4:fe:89:1d:c3:c8:58:f8:0c:13:d4:90:c8:e6:a4:
dd:a8:9f:cd:d3:4f:3c:c1:87:a6:79:78:e1:1c:fd:
b1:48:fa:0d:7a:cb:b9:6e:ed:2a:71:6c:56:85:6b:
fe:bd:c9:6d:a3:b3:6c:d0:9d:c1:8c:13:f2:1d:d9:
ea:f1:34:77:ed:53:eb:f4:61:43:a4:30:af:4e:df:
cd:92:2c:2c:9b:eb:46:5d:49:de:e8:ef:c3:33:25:
69:02:c6:77:1e:0a:d4:51:c4:31:61:0c:0c:d1:d6:
3c:aa:59:10:88:6e:43:38:e9:b3:0e:3f:ea:0c:5e:
43:82:2a:90:0f:63:18:88:ee:b8:3a:ed:f1:02:4b:
54:48:9c:d6:13:97:c9:f6:97:d9:c1:cd:3c:37:6c:
f3:df:89:d2:89:64:31:e3:40:da:b8:a6:4a:e1:0c:
22:8d:8a:58:63:d1:8b:e9:67:4f:ff:f3:ae:08:5f:
89:8c:1c:6a:48:62:68:f7:67:05:38:3b:08:cc:86:
7b:ae:95:4f:51:4e:4f:15:34:01:59:ea:84:06:3c:
95:47:3f:44:d9:8d:60:47:91:a8:b5:db:ac:c4:b3:
cc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:45:4E:99:88:95:56:57:47:3F:85:19:11:4E:3B:B0:1D:0B:96
X509v3 Authority Key Identifier:
keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:16:23:fd:0f:d1:0d:a8:a6:1c:62:db:83:92:9e:21:0f:cc:
9a:ee:d9:61:58:4b:d7:f8:18:3a:9c:cc:6f:b8:37:bb:c5:26:
3f:b9:b4:67:72:65:0d:74:8a:4d:ec:e6:1c:4c:1d:c1:62:ce:
f6:b0:49:31:0c:ea:2a:f9:af:78:b6:2e:ee:c0:60:ad:63:6c:
de:42:ff:4f:8a:aa:ce:73:78:25:b6:a1:25:94:59:29:41:67:
33:63:fb:e6:4e:57:d5:d7:14:00:a4:39:70:07:82:7a:59:97:
24:99:c3:8d:78:4d:0b:bb:0c:c2:08:b1:07:92:4d:f7:e9:df:
4c:5f:d1:cf:3c:f7:72:41:d6:7d:c6:49:91:be:32:ae:a4:3e:
fc:70:ad:92:7a:06:77:0b:ac:3e:9a:32:25:2c:71:d5:4d:87:
55:ed:17:09:cf:ba:6b:bd:cd:91:13:b5:c2:ac:a8:8e:28:16:
7d:a9:b6:22:30:a8:21:42:25:38:84:e2:2f:9a:80:ef:58:32:
7d:82:6b:e2:3b:6d:f8:0e:1f:9e:b6:e9:88:11:22:30:62:0c:
fa:34:0e:aa:ff:61:ed:62:c3:3c:a8:0f:d5:3f:70:b6:f9:8c:
c3:ed:64:c2:f0:29:17:87:50:b2:80:47:6c:52:66:4f:7c:24:
67:8e:dd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:47:58 2025 by rpki-client