Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: Z2Wxhnt6a6LJrtrPFuyibAbD3VERKEtn7EITVSfRwL4=
Subject key identifier: A4:A0:AB:E9:C0:95:1F:BB:5F:C4:6C:30:31:47:52:FD:ED:20:E2:53
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 019A24E5ACCAF859963B0D3FAE8C0BB353CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 1707
Signing time: Mon 27 Oct 2025 09:00:23 +0000
Manifest this update: Mon 27 Oct 2025 09:00:23 +0000
Manifest next update: Tue 28 Oct 2025 09:00:23 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: KgKJxIPf/wBMVqMj/3HfjC3IjwoGnSfqTNLYBmTDjRk=)
3: m3VZjdzwzA2piVdwr0jRtcRx0nU.roa (hash: P1WYR9PHlhqL+0w0ThuMbIIaq+c1NvgD6JAgzrBxv9k=)
4: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:ac:ca:f8:59:96:3b:0d:3f:ae:8c:0b:b3:53:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Oct 27 09:00:23 2025 GMT
Not After : Oct 28 09:00:23 2025 GMT
Subject: CN=a4a0abe9c0951fbb5fc46c30314752fded20e253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:d4:6f:56:5d:4f:0d:30:30:5f:f3:37:c3:
b6:d8:12:13:b5:bc:9e:2f:60:b6:19:19:1d:ee:9d:
81:0f:f2:81:ef:ca:2b:40:7a:b3:8e:c9:17:db:eb:
5b:eb:18:93:26:9c:d3:9c:37:77:db:1e:18:01:76:
4e:ac:81:8a:2a:3e:ba:2c:38:df:23:cb:33:4c:01:
c8:5e:d9:ff:c4:bc:bd:c7:ab:41:ba:b5:28:c1:16:
b0:9c:80:a3:1b:08:ce:4f:53:05:d6:1c:4f:9b:bc:
b0:8e:54:ee:c3:82:32:49:40:4c:d0:39:8f:39:3e:
bc:a0:f2:67:ee:0d:fb:4b:54:0a:6e:d2:54:74:6a:
50:f8:4e:4a:5c:70:e7:75:b1:12:64:3e:72:48:87:
ed:71:ae:0d:4a:d7:b0:d2:da:f9:5f:1c:18:7c:b1:
cc:36:26:2e:e6:cb:8a:da:d1:de:ae:a0:86:01:37:
2f:74:7b:bc:20:37:5c:e5:f4:ed:10:23:70:21:57:
68:6c:4b:5b:f4:96:2f:bc:e8:5f:40:a8:bb:b6:b7:
be:2b:6d:75:04:21:e0:34:0d:92:c4:1b:30:fd:92:
0c:9d:b8:29:25:f8:98:24:6c:3d:52:15:c3:e7:08:
f8:09:05:ab:3a:09:9b:1f:fd:ca:77:05:90:a3:74:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A0:AB:E9:C0:95:1F:BB:5F:C4:6C:30:31:47:52:FD:ED:20:E2:53
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ed:d5:ef:c5:21:11:d5:1d:5e:70:1e:02:49:81:6f:23:ab:
55:de:4e:82:b1:f7:0b:75:15:4e:cb:53:90:a2:75:63:f0:b2:
df:c6:78:05:49:6f:f9:e5:ca:95:2f:4e:3f:4e:56:e9:95:93:
26:99:54:d3:1d:c8:5a:62:2c:5e:cf:ba:ef:ab:02:68:a4:85:
2b:77:73:ac:6a:b6:2b:56:86:9c:51:15:0a:3f:ff:dd:7e:23:
10:49:70:70:8e:eb:14:dd:1f:80:8c:37:33:53:d3:69:32:7c:
25:2e:ca:b5:60:3c:05:0f:0f:0a:78:06:07:9f:b1:6a:fb:8c:
cd:2e:c5:f1:15:6c:0d:55:33:19:9a:f1:3e:8a:e4:f1:12:06:
22:92:f4:89:64:4e:7c:c7:01:8a:85:ab:52:7a:9a:f6:8a:c8:
2b:2f:55:3d:b4:e7:b9:33:70:47:2e:6e:23:5a:82:d9:dd:08:
26:c7:a1:80:a7:b9:9a:a2:35:b8:6f:4c:25:ec:96:69:11:f3:
d4:07:bd:24:3e:56:f0:b2:50:52:5b:79:a0:92:1b:00:9c:30:
3a:20:ee:64:2f:b5:b2:cb:72:21:7b:72:89:9b:43:0a:66:f4:
b6:b0:24:92:0c:28:14:47:19:9b:c1:eb:0d:5d:65:a9:3e:0f:
95:ad:9d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:28:10 2025 by rpki-client