Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: qM07gExDFmmK0zRbcP6+wmRqyVuSBXtQVKfzahvMW68=
Subject key identifier: 24:81:8B:0D:3F:83:EB:02:7C:A3:08:84:C9:48:76:33:A8:BB:47:85
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 01987D8B010D3055E47848F0931F658749BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 04:01:58 +0000
Manifest this update: Wed 06 Aug 2025 04:01:58 +0000
Manifest next update: Thu 07 Aug 2025 04:01:58 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: LlCCNZPz21sRucfIozYiLK/FSMD1YYjTGKu/OoKDYFY=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:01:0d:30:55:e4:78:48:f0:93:1f:65:87:49:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Aug 6 04:01:58 2025 GMT
Not After : Aug 7 04:01:58 2025 GMT
Subject: CN=24818b0d3f83eb027ca30884c9487633a8bb4785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:42:eb:93:d4:c5:ea:26:ed:b9:04:1e:7a:
22:9f:a6:83:6a:cb:3d:cb:37:93:5c:5b:b5:ae:75:
80:cb:01:f1:1a:ae:2d:c3:d7:35:6e:d6:53:05:98:
1d:d9:7a:f5:41:01:b7:54:3b:9f:3c:16:bc:1c:fc:
77:8d:84:3a:c8:d1:b4:fd:e3:9a:d5:b4:70:1f:61:
68:ea:27:36:4f:b7:24:b3:e0:de:8a:52:a1:3c:05:
b9:eb:49:0e:55:fe:45:8e:39:9c:cf:c9:3c:98:0a:
8e:c4:7c:0c:7c:d7:89:a5:53:3a:ae:48:3c:94:9a:
42:4b:60:e4:3f:f7:95:b3:d6:53:69:e7:a3:eb:da:
82:52:76:5e:f3:ef:63:27:fd:40:7b:40:40:66:46:
d1:fc:b4:64:c6:46:37:ed:b4:de:54:89:ee:98:18:
90:33:18:73:66:01:fe:89:1a:93:ad:9e:c2:22:09:
6e:b7:6a:6f:33:fa:e1:62:df:fd:f1:fd:09:bc:08:
c7:de:c2:f8:d0:56:a4:b0:ac:2c:78:ce:dc:80:52:
99:3c:47:da:a3:0e:c0:98:a9:d2:0a:0e:23:f2:18:
9e:ee:93:86:f1:77:3b:97:cd:92:18:9a:9e:d2:4d:
a3:c4:8d:6b:77:10:fe:a1:ce:f2:d3:cf:6f:32:4c:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:81:8B:0D:3F:83:EB:02:7C:A3:08:84:C9:48:76:33:A8:BB:47:85
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:94:7e:61:3c:31:4d:38:69:60:c5:d3:7f:d0:b8:31:f6:71:
0b:36:0a:99:42:7f:e8:dd:25:14:0e:58:5c:0d:79:1f:99:8d:
97:5b:bc:47:81:d0:c5:8d:35:09:4b:bc:f1:cd:60:d8:25:01:
46:50:2a:c8:d8:f2:cd:18:f4:3e:4e:2a:bf:f2:a2:c1:25:2d:
fa:cc:08:46:66:e8:0b:9a:77:ed:55:52:0c:8b:27:1c:96:fa:
26:79:fa:c2:bd:36:ed:82:9d:e2:08:5d:98:aa:77:29:69:7b:
b2:38:8f:37:ae:9f:9a:6d:d6:f6:5d:01:ab:89:b0:0e:45:55:
70:8a:82:24:6b:da:0c:98:93:b0:aa:da:96:e5:db:83:48:9b:
ea:7c:68:72:33:aa:5d:b3:19:90:0a:de:4d:b7:96:77:1f:74:
00:6f:4e:52:14:43:6f:67:4f:10:74:f1:07:c0:73:1e:3b:62:
2c:ae:5c:3d:0b:78:ab:70:15:53:ba:e3:e8:3d:8a:dc:69:16:
70:7c:f2:4c:ae:57:cd:0b:15:b1:33:45:17:7c:2d:a0:fb:0c:
ef:00:89:7b:cc:76:1c:d1:78:24:15:e6:13:60:c0:b6:64:ee:
56:a6:31:08:52:5b:7e:c5:ff:4f:c4:a5:db:8e:bb:67:1c:ef:
70:83:73:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:46 2025 by rpki-client