Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: kcPKIT+M/eewm+RBKJukljcyRJJn9ENNtk4n48Kv7rM=
Subject key identifier: C8:E4:1D:B8:FD:1B:21:4A:84:E9:5A:7B:05:7C:FF:99:07:3A:E0:66
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 0199221EE52263A2450FDA5EB6A43FE915BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0AF1
Signing time: Sun 07 Sep 2025 03:01:13 +0000
Manifest this update: Sun 07 Sep 2025 03:01:13 +0000
Manifest next update: Mon 08 Sep 2025 03:01:13 +0000
Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: i5uqmJe4fGHa17abJ8AZzfgM00+jp+Xy7RrOYRgnYa4=)
2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e5:22:63:a2:45:0f:da:5e:b6:a4:3f:e9:15:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Sep 7 03:01:13 2025 GMT
Not After : Sep 8 03:01:13 2025 GMT
Subject: CN=c8e41db8fd1b214a84e95a7b057cff99073ae066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:c1:e2:ec:1e:c3:ea:24:39:1e:03:09:9b:
94:ed:fa:96:63:a2:49:00:18:2d:6b:45:a2:28:ba:
20:37:d6:2d:e8:bd:25:ab:38:ca:b9:10:10:a8:0b:
81:dd:30:d9:4b:fb:c7:19:b8:c2:98:f2:c8:28:81:
e6:7a:d5:2b:85:59:aa:93:74:78:cc:c1:7f:ba:62:
88:bf:6a:04:09:81:08:03:39:49:08:b1:57:0d:e8:
ca:0d:34:d5:cf:c6:f1:bb:45:6d:a0:f3:b0:c2:ca:
40:fe:38:c9:aa:5c:e2:68:bc:4c:a0:f9:d9:d4:cc:
fe:3c:c0:6c:63:5d:f6:87:b4:1b:c4:fc:61:82:3a:
16:f0:c4:68:7c:f3:73:02:f6:09:76:8f:a5:09:5f:
9f:8c:d5:96:d6:0c:0c:18:60:9f:23:6a:e5:5b:f5:
6f:17:7c:85:f4:55:d2:16:c7:d7:42:ed:5f:74:2e:
0b:7c:c2:c4:e0:ef:7a:f2:e4:6f:ce:56:c4:ff:f3:
11:7d:07:f5:f3:81:97:41:e0:de:71:ab:d0:07:c1:
e4:d6:0a:a0:87:44:ad:68:99:13:16:e9:69:6b:7b:
8f:41:49:7e:07:6b:8f:6d:c9:b7:0d:79:21:08:5c:
45:18:f8:46:cf:13:4c:65:84:c6:f2:29:b3:15:44:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E4:1D:B8:FD:1B:21:4A:84:E9:5A:7B:05:7C:FF:99:07:3A:E0:66
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:77:2d:d9:e2:cf:9f:6e:16:cf:8e:61:f7:3e:3a:bb:c8:52:
a4:09:ad:3e:3c:6d:cb:e0:86:98:fe:09:69:98:f2:9b:2a:af:
9b:26:20:a6:5c:71:4c:29:ca:b2:51:15:76:1a:de:f7:30:0f:
8f:04:0c:ff:03:85:ac:8f:93:39:38:ba:70:cd:8a:36:20:e5:
f0:c7:37:ce:7b:ce:74:e6:61:92:9a:64:9b:50:1d:1f:fc:4f:
cd:0e:dc:40:3b:dd:d9:fd:02:1d:87:37:a5:08:3e:4a:ef:c0:
b1:b3:ae:81:fb:e2:be:54:64:0f:15:e8:bf:33:63:87:ff:bb:
87:4a:d1:ff:13:b4:d5:60:55:b5:6f:59:81:7d:8d:6a:71:2f:
2c:c7:a3:15:a7:bf:68:dc:31:8f:dc:9a:1b:85:33:50:e6:f9:
ad:b2:eb:a0:1e:46:09:0f:c2:c0:5f:7b:ac:8d:c7:4a:ee:53:
3a:e0:f6:c4:df:d8:c2:2b:4a:87:1b:db:80:41:13:38:8c:90:
31:54:12:0f:23:b3:e0:47:ca:52:5b:38:ca:1f:6b:74:27:0e:
c3:9b:3f:ae:bd:ba:fd:ba:1d:04:61:37:94:b0:8a:2b:17:94:
b5:ee:04:42:85:9a:39:5c:8c:3f:fd:5b:d7:0e:87:33:71:8e:
b0:34:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:29 2025 by rpki-client