Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier: B/FkhdmH3I3GgD1WLzqyd+Q1oU/w1TXw8GP4lP7XdG4=
Subject key identifier: FF:32:C7:24:4D:92:35:23:16:0E:BE:94:3F:13:47:69:5E:86:2D:F5
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 019922C2FA92AA0BADA9739463CBC3B325ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number: 0D91
Signing time: Sun 07 Sep 2025 06:00:27 +0000
Manifest this update: Sun 07 Sep 2025 06:00:27 +0000
Manifest next update: Mon 08 Sep 2025 06:00:27 +0000
Files and hashes: 1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: nH9SbuYfpohv0Zzhk6wwMBi+ST1niyEPKQ9nRlS7aw8=)
2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:fa:92:aa:0b:ad:a9:73:94:63:cb:c3:b3:25:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Sep 7 06:00:27 2025 GMT
Not After : Sep 8 06:00:27 2025 GMT
Subject: CN=ff32c7244d923523160ebe943f1347695e862df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:b4:26:5a:07:d7:b7:46:55:f0:2a:25:23:
0f:27:c5:83:08:ad:b0:c6:dc:d7:68:b3:27:a6:85:
5f:5a:31:cf:74:84:7c:7a:50:d6:c6:f8:fd:87:b3:
8b:d9:bb:68:dd:5d:ef:a5:94:0c:ac:b4:f6:cf:3d:
d4:7c:45:85:9d:ec:37:cf:76:5c:f8:b8:92:f1:5f:
cf:b3:52:ca:43:6e:7d:0a:12:4e:e2:de:fc:0a:00:
8c:10:b4:db:3d:bd:d8:33:a9:bb:0a:64:17:34:e4:
da:4c:f8:d7:89:d1:30:59:3a:42:b9:aa:ac:98:c9:
87:4c:9c:70:8c:70:ef:4b:7e:56:11:d9:64:fe:2f:
a1:7c:7a:f1:ae:e6:3b:24:18:26:87:2f:4d:ba:f1:
75:23:68:01:51:ef:81:07:ad:a7:6c:7e:21:2f:dc:
f2:c1:0e:9d:2d:fa:31:27:6a:72:db:53:4e:6f:b0:
f2:59:f1:22:a7:d1:b5:a5:9e:f6:2a:09:9d:53:81:
11:e6:e7:5d:9f:27:fe:77:32:bf:9b:e3:4d:9b:f0:
de:68:37:29:3d:b6:0d:36:39:83:04:72:d3:9b:a5:
74:33:1c:45:41:4d:57:1a:c6:60:26:ff:85:2b:92:
f5:b3:2d:af:7e:a8:d5:6a:75:a7:97:48:cc:de:7e:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:32:C7:24:4D:92:35:23:16:0E:BE:94:3F:13:47:69:5E:86:2D:F5
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:20:3e:3c:f1:67:9a:74:bf:0b:cd:fc:05:5d:89:1c:52:a2:
dd:9a:b3:12:7f:9c:88:6d:3f:7e:b2:e1:98:19:4e:a7:29:6d:
da:66:e9:d5:03:dc:3b:64:a8:61:dc:6d:0d:14:be:9a:98:1f:
43:4a:eb:f8:07:6f:5e:1c:5a:4a:48:0a:84:8b:41:42:44:9d:
50:36:e0:75:dd:58:77:f3:76:c1:fb:5a:ee:75:ae:7d:c9:73:
52:df:9a:e7:6b:a5:a4:66:23:10:0f:dc:a1:bc:6d:0e:ff:c4:
14:97:df:e4:8c:19:34:77:41:74:15:45:80:87:dd:b6:ec:0d:
f6:c3:db:3a:8f:3d:b7:ad:1a:79:c4:bc:c3:e7:c2:ed:40:27:
14:ac:5a:1f:1b:24:d6:b8:a7:42:2f:65:08:cb:ad:a7:6c:87:
c5:78:47:df:dc:10:04:42:cf:de:ce:c6:51:31:ca:d4:81:0f:
e2:84:1e:3c:59:1e:1e:e7:11:6d:60:2d:f5:1a:4e:c1:75:65:
db:6a:c5:44:c5:71:b9:bb:72:f8:bd:a4:f4:86:c3:d6:5b:ec:
c3:6c:3b:cd:d2:76:c6:d9:0a:af:13:71:0f:b6:0a:aa:85:d9:
84:33:de:c1:90:97:ef:ed:41:0a:68:de:41:75:cf:cd:98:04:
19:55:cc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:58 2025 by rpki-client