Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json)
Hash identifier: zhg9EkBdSE+wSGicJjwoUPzRBx3x9RUhf+5/Nd98uuQ=
Subject key identifier: 2E:06:80:3D:D0:63:E8:20:CE:5C:9B:F9:7D:5E:47:48:0E:91:48:D5
Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428
Certificate serial: 0199239FACB97B09DDC989111DD86FC5F040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
Manifest number: 158B
Signing time: Sun 07 Sep 2025 10:01:30 +0000
Manifest this update: Sun 07 Sep 2025 10:01:30 +0000
Manifest next update: Mon 08 Sep 2025 10:01:30 +0000
Files and hashes: 1: LYb-x1oBjYV986-WVWGm87nYs0w.roa (hash: Hdp26qwcmy9Rb38THuQbvn6WpSeZJ3xKyk1AFGilm9k=)
2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: C19NtSw9aXlpnkR0LxP1XBSPOAz1YS7SmsoNLA7iVfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ac:b9:7b:09:dd:c9:89:11:1d:d8:6f:c5:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428
Validity
Not Before: Sep 7 10:01:30 2025 GMT
Not After : Sep 8 10:01:30 2025 GMT
Subject: CN=2e06803dd063e820ce5c9bf97d5e47480e9148d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:2b:89:d8:bc:79:f8:3f:98:4c:90:59:9f:
b5:f3:34:e8:bb:cb:97:74:ab:1b:1d:33:07:a9:e5:
43:26:97:86:4b:a5:a0:c6:12:f0:27:82:4a:42:2c:
9d:b4:66:21:45:c4:4a:4c:be:04:a0:8a:c5:8b:e4:
5d:59:52:f0:3c:2a:c1:b8:03:b4:b7:f7:e8:fd:d9:
ea:98:3b:19:8f:83:6f:1f:cd:76:b4:17:ad:99:db:
47:bb:2d:2d:4e:72:3e:09:36:22:57:53:b7:1b:a5:
6a:f0:f3:3f:73:b7:d4:84:53:4b:08:78:f1:d4:d0:
f7:98:d5:e7:1a:a5:32:b0:ee:0b:65:c3:81:22:11:
bb:70:eb:4d:6e:38:4b:31:34:68:83:a2:98:6e:cf:
48:13:5e:b9:5c:3b:cd:53:18:ed:18:44:7d:17:0a:
57:62:93:b4:9a:f2:18:2c:5d:fb:d5:dd:d6:69:e7:
88:c0:d3:78:8b:b1:92:85:4a:17:45:6c:10:53:78:
fa:74:04:d2:43:0e:e2:cf:e5:fa:b7:77:f9:62:ae:
19:72:ce:76:62:d5:fa:51:c8:c3:d9:73:44:9e:f1:
a5:ee:2d:82:19:91:6b:b7:5f:a2:35:58:d3:7b:db:
7e:04:a3:2c:77:0b:c0:6d:cb:35:a5:e6:4d:b3:af:
ed:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:06:80:3D:D0:63:E8:20:CE:5C:9B:F9:7D:5E:47:48:0E:91:48:D5
X509v3 Authority Key Identifier:
keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:7b:93:56:e3:c5:4b:58:22:22:df:47:5f:b3:23:a7:d0:8c:
2b:26:1c:40:ef:4e:0f:5e:7b:fc:5a:ef:49:cb:5e:40:8c:54:
18:30:d2:22:3e:eb:48:83:8a:eb:df:9c:77:99:71:4c:27:22:
06:8b:94:35:e7:c0:d8:61:b5:39:ef:b6:ab:c5:b0:8a:f7:95:
97:ab:a6:e4:53:3f:67:2f:83:6b:8c:c6:0d:df:34:6b:49:b8:
57:89:39:0b:03:ae:ec:46:83:02:af:86:6e:75:5e:40:f3:a5:
06:cc:e3:d8:14:50:40:7e:89:cd:bd:1b:76:fb:8c:e5:f8:25:
57:49:ca:06:e8:ad:48:43:ab:fe:ac:59:f9:69:9b:b8:7c:06:
63:81:10:1b:28:a4:17:82:94:40:91:5f:da:26:6a:2e:59:7f:
b3:d4:1b:d5:f4:16:65:bd:13:a1:ec:5c:8c:af:24:07:29:c9:
9b:f6:3e:fa:47:84:fa:fa:b1:3a:3d:bf:ee:c9:4b:3a:03:5b:
cd:b9:67:44:d2:97:52:08:8f:bb:51:58:7b:3e:41:3c:e0:9a:
22:78:f0:22:8e:2f:5a:57:05:57:a9:f0:d5:4a:f8:c2:cc:8c:
9f:46:c9:b5:af:9c:94:50:bc:66:16:1b:ed:db:1c:9c:ed:65:
a7:27:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:27 2025 by rpki-client