Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: nuX8/7qgElBU0TRVG/vI0x7mtULBFn/5oo6rsHYeHH8=
Subject key identifier: FA:39:21:8D:8F:99:11:C9:F3:6E:4D:1C:6A:6F:9F:87:EA:11:67:D7
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0199356E7232A2ACD4629B5933861D28660D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 168B
Signing time: Wed 10 Sep 2025 21:00:54 +0000
Manifest this update: Wed 10 Sep 2025 21:00:54 +0000
Manifest next update: Thu 11 Sep 2025 21:00:54 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: sLWHEGbvtUIWWbKQqLXTjuuI/ZpLyL5P0yXI7EZxQSc=)
3: m3VZjdzwzA2piVdwr0jRtcRx0nU.roa (hash: P1WYR9PHlhqL+0w0ThuMbIIaq+c1NvgD6JAgzrBxv9k=)
4: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:72:32:a2:ac:d4:62:9b:59:33:86:1d:28:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Sep 10 21:00:54 2025 GMT
Not After : Sep 11 21:00:54 2025 GMT
Subject: CN=fa39218d8f9911c9f36e4d1c6a6f9f87ea1167d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2e:6f:b6:8c:a5:18:80:c6:5d:f6:08:20:f8:
38:58:2e:a8:6b:59:f4:d6:dc:94:33:cf:de:1b:ed:
30:09:f0:73:7f:3c:ad:48:9b:02:a5:db:e6:7e:ab:
db:32:e8:f6:11:5c:e9:5b:f3:45:09:0c:96:db:5b:
7c:0d:4c:0b:98:24:31:ba:23:36:4b:f1:03:5a:2f:
c4:0e:df:4f:f9:bb:21:fa:9a:8e:bf:5f:33:c0:11:
1b:38:e0:e2:6b:80:6b:a6:38:7a:cc:e2:2a:af:8c:
52:ed:d1:4d:41:07:d2:7f:55:41:0d:09:84:fa:cd:
0d:5f:dd:9b:18:a9:a7:15:1b:53:b7:76:28:d7:0d:
2b:1c:b2:68:78:80:dd:bb:d4:56:47:2e:7d:2f:97:
e1:e0:ac:4f:d2:c3:8a:00:5d:49:79:82:c7:01:e0:
38:f4:e4:de:0f:3d:df:0b:c0:3a:2b:0c:78:ae:75:
65:5a:73:72:95:b5:dd:f0:e6:02:03:1d:7b:3e:c3:
a9:c8:fa:e9:e6:6c:e0:14:08:c7:ca:66:6a:22:2b:
4f:c6:ae:37:18:1e:35:49:1b:18:3f:5f:f5:56:a9:
f1:a9:be:b3:a2:b8:9d:1d:24:ec:d1:a1:06:4b:58:
40:cb:49:ed:82:39:f2:fa:33:35:96:6c:b1:87:7a:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:39:21:8D:8F:99:11:C9:F3:6E:4D:1C:6A:6F:9F:87:EA:11:67:D7
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f3:5d:48:bc:71:9b:c3:17:b1:50:df:d8:19:10:03:0a:0b:
5c:be:cd:6f:b5:04:76:e1:1e:dd:74:88:1d:9f:35:c0:a4:05:
ff:62:6f:bf:61:71:f0:85:2f:27:96:67:1b:c1:7e:5f:5c:8d:
fc:4d:2a:78:5a:33:cf:bd:ab:86:d0:0b:7c:f2:70:73:9f:50:
f3:07:b9:78:fa:d9:c6:33:fb:9f:7c:72:0b:9d:e3:d4:70:71:
d9:66:74:d0:5c:3b:88:44:33:da:d9:7f:e5:68:8c:99:85:97:
aa:b3:54:ab:3d:85:c1:83:ee:4a:a0:62:5d:57:e6:1f:0d:e5:
fe:90:ec:c1:db:3d:ba:6a:e0:2e:fa:37:2c:87:15:ea:39:31:
f8:45:d8:c2:44:f1:a0:56:bf:cf:1f:20:cc:04:d0:b8:6e:2b:
77:59:de:16:d0:e7:38:5c:ca:3f:49:fb:a8:68:9a:cc:77:fb:
9d:e3:b8:f0:05:a7:52:18:76:ec:78:49:97:05:13:6b:11:fa:
38:c0:2f:4a:7c:07:20:54:c3:a5:fb:13:77:37:fe:ec:10:bb:
98:87:4b:ba:69:db:38:c2:cb:32:16:8f:92:49:bb:31:73:3f:
b9:af:c8:bb:5d:c5:9c:54:e1:3e:b1:16:1f:29:ec:3a:e2:88:
e0:d8:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:53:35 2025 by rpki-client