Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: GgNDvYRagvk6H9KV7Fg/lk5yvtZoC/UVaC29XCn5arw=
Subject key identifier: 85:6F:12:34:36:AB:AF:0C:0B:22:F3:2F:35:0C:70:75:61:3A:B2:6A
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 01974A43E506AD295F30B1127E88046F3F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 158C
Signing time: Sat 07 Jun 2025 12:00:52 +0000
Manifest this update: Sat 07 Jun 2025 12:00:52 +0000
Manifest next update: Sun 08 Jun 2025 12:00:52 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: +fUFl6XqtEjzXh9LxbaAsbo3OKnF6h4BAQDeTEQr1Ss=)
3: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:e5:06:ad:29:5f:30:b1:12:7e:88:04:6f:3f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jun 7 12:00:52 2025 GMT
Not After : Jun 8 12:00:52 2025 GMT
Subject: CN=856f123436abaf0c0b22f32f350c7075613ab26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:35:d7:55:ab:b6:e5:f3:f4:86:a9:34:46:
6e:db:ee:67:dc:59:65:93:a8:d7:89:c3:75:f2:b8:
8b:7c:a7:2f:b8:9a:85:4e:64:50:d1:c5:39:62:a8:
3f:98:cb:c0:82:6e:75:64:99:29:ed:7a:97:34:09:
87:3d:b1:e4:e7:80:a3:7f:fe:ed:33:a3:3c:2e:ee:
a4:e4:7b:93:bb:0a:1b:80:cd:04:b4:cc:1b:5f:f8:
68:79:8a:5a:d7:3a:5e:d8:dc:1a:06:45:c3:7f:a1:
ed:d2:50:40:6e:87:bc:c0:cb:9f:69:2c:74:61:d3:
52:75:be:60:ae:bc:f5:bf:8a:d7:62:16:0d:19:e8:
86:e7:1f:67:16:aa:39:2c:40:d3:65:7d:71:aa:da:
9d:2d:4c:66:cb:de:2f:f4:58:f4:a6:cd:1a:81:8c:
07:c0:71:b2:7a:84:c9:74:f5:d2:69:07:a2:16:1a:
70:fb:86:21:e8:06:3a:a6:e1:4b:3f:f1:5d:c9:39:
40:4c:b4:27:86:ad:b2:33:b2:9d:47:d2:c0:5f:82:
75:ba:79:0e:d7:d1:3c:de:9c:f9:f4:46:e9:6a:b0:
d6:1d:bf:82:79:42:68:f1:da:3d:4b:a2:45:9f:60:
6e:56:ce:02:eb:1f:8f:76:30:61:51:5b:76:0d:9c:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6F:12:34:36:AB:AF:0C:0B:22:F3:2F:35:0C:70:75:61:3A:B2:6A
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6e:b7:a6:0d:90:f1:eb:89:0d:27:a4:e7:ef:33:bd:56:60:
f5:11:41:14:eb:c7:e8:2e:c3:cc:00:ae:b6:39:f4:73:a5:34:
4b:80:e8:2a:de:8c:10:e9:1f:71:30:37:15:c9:17:3f:02:50:
9c:72:35:a5:0c:9f:23:2a:4a:65:b8:d4:4b:9f:e1:b0:00:60:
c5:02:6b:40:e5:99:70:95:be:e2:1a:6e:19:13:ce:b9:75:2b:
85:9e:22:77:70:15:eb:b4:ee:e0:fe:28:20:46:8b:4a:36:cc:
42:aa:4b:96:1c:22:8f:30:4b:89:64:31:71:28:71:76:09:79:
e8:1b:ca:74:f3:44:58:3d:00:5f:73:99:9b:d7:d8:14:e1:f3:
09:31:f5:30:38:ed:40:ff:4e:84:6a:ae:25:7f:e6:4e:27:95:
47:dd:17:c3:44:b6:29:97:65:ae:fc:fb:c7:0f:be:8e:53:1c:
9c:9a:7b:de:35:72:a9:d7:cb:69:6a:2c:5b:76:62:a7:3d:3d:
48:e1:9a:e6:e4:56:10:08:cc:71:e2:83:a5:22:74:96:3b:4f:
16:b8:9f:8b:0d:9b:82:36:e3:2c:36:f0:d4:84:d4:c1:15:ea:
99:52:6f:03:01:9b:04:63:29:5c:73:9e:08:b5:d3:09:f4:d8:
47:38:71:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:19:54 2025 by rpki-client