Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier: zyjJ7l1gEPh9TYhBCIx0grzbK5F3vNDxEv4zo56XbeI=
Subject key identifier: 7D:F2:3A:6E:C2:05:FC:68:AB:2A:92:74:20:51:A7:FB:2C:91:0E:C5
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 0199315AA2C5428B6805AB0597AABAD684D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 02:00:47 +0000
Manifest this update: Wed 10 Sep 2025 02:00:47 +0000
Manifest next update: Thu 11 Sep 2025 02:00:47 +0000
Files and hashes: 1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: APCFvO00QvKPLo6ebRL3DBLTjTWEA1JsN+0O6NC519U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:a2:c5:42:8b:68:05:ab:05:97:aa:ba:d6:84:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Sep 10 02:00:47 2025 GMT
Not After : Sep 11 02:00:47 2025 GMT
Subject: CN=7df23a6ec205fc68ab2a92742051a7fb2c910ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f3:e5:58:b2:6b:90:a4:88:a9:68:ac:fa:07:
07:27:ad:ac:7d:45:9a:c0:d5:dd:3b:06:f0:ad:5e:
14:a4:e5:75:19:58:ec:36:1e:2f:37:d9:9b:c5:3f:
40:48:fd:b2:5e:02:23:94:f5:96:7a:7a:40:b8:57:
12:97:72:24:d6:10:72:58:f1:c0:a3:d8:b0:ca:13:
4f:e5:e2:68:90:df:a4:4f:be:5a:cd:c6:4e:a9:7a:
24:46:30:c1:49:ec:75:ed:54:fe:1c:62:e6:c8:00:
2e:c2:4c:29:f8:e5:c5:5f:62:3b:9f:82:f0:16:91:
80:f3:83:90:7b:62:26:c3:ab:fe:c4:9c:12:c8:6a:
45:23:35:86:5a:6b:96:a4:19:fb:48:fa:80:75:41:
b5:df:a5:e9:ba:3f:f5:8e:55:ae:7d:bd:24:fd:7a:
d8:e9:32:77:08:20:b2:ac:a6:af:a1:37:45:bf:4f:
47:9c:4a:9a:d2:8a:07:c6:32:cd:98:79:5b:46:3a:
7e:4e:e9:5b:a7:03:75:79:14:57:4d:43:5f:09:23:
b2:a0:6c:1d:9b:81:89:b6:c2:df:a6:dd:ba:44:ee:
e0:27:42:26:4c:2b:d8:ae:28:c3:e4:2a:d9:77:0f:
c4:48:87:cf:77:10:68:6d:76:bb:a4:91:26:ad:36:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:3A:6E:C2:05:FC:68:AB:2A:92:74:20:51:A7:FB:2C:91:0E:C5
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e9:3a:57:10:2e:89:fe:10:0e:a0:21:72:d2:38:2c:b6:13:
6b:92:91:cd:7e:5c:a6:29:b1:47:a7:9b:18:41:1f:88:36:b5:
7d:bc:62:cb:39:c9:fc:cb:54:c2:57:83:71:8d:fa:cc:46:03:
e1:7b:84:9c:cb:75:dd:84:85:79:e3:ca:a2:73:e6:0d:95:05:
d3:9a:07:47:e3:ca:5d:61:f9:1d:d8:37:58:72:7e:19:c0:b5:
fd:3d:61:47:e3:a4:80:c3:41:3a:ef:15:1b:9c:0f:a7:3b:2f:
b7:cd:39:28:66:a9:7a:d8:62:37:64:5b:3e:0d:f1:c2:b7:84:
48:40:b9:5c:00:21:63:bf:20:14:e0:90:05:44:b3:aa:bb:19:
6c:c0:44:fc:4b:63:97:75:9d:98:16:bb:f6:b1:89:4b:98:a4:
f5:5d:df:32:78:b1:78:20:55:b2:b4:5c:48:77:8a:26:27:00:
a4:44:7b:f6:93:51:30:53:88:99:47:b1:14:a4:27:9e:d4:9e:
3b:72:b0:9e:6c:a2:75:b7:cc:89:dd:38:1f:9d:39:e5:8f:78:
a4:b0:4a:39:c6:02:6e:f6:27:02:db:b1:80:df:49:49:4b:9e:
97:53:3d:59:87:50:f2:aa:90:1f:62:f9:6e:7f:db:96:c6:02:
e2:a6:ad:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:13:18 2025 by rpki-client