Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: 9zu5/Xx3G6Re80SNiwp8Qs2QRbNrwSGDEwtjUK+Y+DQ=
Subject key identifier: D1:A2:F8:79:59:B2:22:A0:29:00:0C:09:14:22:10:43:B4:28:CF:33
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 019849D33FD9293C7D48D328C5678A5BCC8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 0E21
Signing time: Sun 27 Jul 2025 03:00:37 +0000
Manifest this update: Sun 27 Jul 2025 03:00:37 +0000
Manifest next update: Mon 28 Jul 2025 03:00:37 +0000
Files and hashes: 1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=)
2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: QY8liQtkKAyJuX8l0ZpTiM83OcGcu+u99n7L9wrfZxE=)
3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:3f:d9:29:3c:7d:48:d3:28:c5:67:8a:5b:cc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Jul 27 03:00:37 2025 GMT
Not After : Jul 28 03:00:37 2025 GMT
Subject: CN=d1a2f87959b222a029000c0914221043b428cf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:bd:43:7d:22:69:8e:e3:e3:12:6e:ca:90:
35:c6:05:cd:c2:0f:b0:a8:1e:28:69:72:e0:a7:1d:
f3:89:e3:d7:f0:19:db:3c:82:8e:83:e3:f8:48:d9:
c7:e6:bf:80:81:70:41:01:57:af:1e:46:f2:d8:39:
f2:96:ee:e0:d0:f9:bc:8f:53:4c:af:4e:a9:0d:95:
d7:5c:93:ed:0c:89:03:21:a8:59:70:0d:c5:93:92:
01:f0:f8:d2:3e:df:d8:59:62:31:dc:b7:3b:b5:f3:
3b:cd:e9:7e:1f:3e:d7:c1:c2:bb:d5:b0:ef:83:a0:
73:fc:07:af:b1:1a:07:cb:a8:a8:c6:91:c8:ae:0f:
0e:b9:3a:2b:9e:0b:a9:62:1b:eb:a6:e6:1b:4b:71:
12:17:20:10:cc:a0:68:8a:59:cc:63:a8:ba:70:29:
f2:e5:17:79:94:67:e7:54:57:c2:2f:ec:7c:1f:66:
d9:67:b0:9f:bb:f5:a1:7c:f4:bb:50:d7:15:f4:e3:
62:10:8e:c4:d4:4a:75:80:d0:db:70:8f:fa:93:6d:
93:9e:dc:55:59:b0:fd:f5:73:40:28:aa:60:9e:f2:
95:73:5f:f5:7d:4b:8b:2f:12:6b:43:2f:55:73:0d:
ca:5e:12:15:a2:29:19:be:97:e2:d1:c0:4e:8b:43:
f4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A2:F8:79:59:B2:22:A0:29:00:0C:09:14:22:10:43:B4:28:CF:33
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1b:31:b4:f7:8c:f3:76:9d:66:82:e5:be:8d:89:b6:37:15:
8f:84:af:05:6f:d7:63:d5:dc:61:8c:ea:ff:56:57:73:f9:5d:
8e:00:dc:6b:fe:40:b6:1a:e2:00:46:04:e2:95:ba:57:d4:ed:
8f:24:ca:a6:d8:38:62:03:ef:34:cf:35:28:3d:1c:f9:c6:51:
16:a7:bb:83:a4:28:55:5b:89:a2:93:d5:38:d5:6f:db:10:2f:
d5:dc:06:a3:7c:a8:0a:ec:a0:08:53:34:78:2a:16:34:bb:ed:
bd:5c:1a:2a:de:94:3b:99:d5:7b:8e:39:c7:da:4b:6a:6c:68:
81:40:10:60:47:79:fd:ac:a9:99:4a:17:11:7d:30:dc:4f:73:
3d:35:4e:8d:a8:73:d2:d3:b1:5b:2b:6f:5c:a2:72:1e:c0:5c:
c6:60:e1:d1:8b:06:ee:ca:b8:ed:45:53:e0:c2:96:0c:77:76:
e8:32:b3:0e:7d:c6:06:ff:f4:37:6f:5b:26:44:85:25:9e:9d:
45:c8:eb:c5:83:9d:59:a0:df:5c:d6:c3:89:64:03:c2:a2:70:
7c:ed:e4:20:b6:6c:90:89:22:0f:19:9b:ce:eb:12:42:ac:e0:
41:4a:00:e1:d8:6c:a8:fc:90:ee:08:97:6c:7e:fa:92:c8:7d:
6a:14:51:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:52 2025 by rpki-client