Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier: Wo52QXfuab3VVR4rUnqbK45XL38EfBJpYBx0Py9EAWc=
Subject key identifier: B8:18:D6:DE:17:BC:49:07:D1:9D:E0:DC:E9:97:2C:C4:30:73:7A:E8
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial: 019887326FFDEEEE007AB4FF3731E9D49B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number: 018A
Signing time: Fri 08 Aug 2025 01:01:26 +0000
Manifest this update: Fri 08 Aug 2025 01:01:26 +0000
Manifest next update: Sat 09 Aug 2025 01:01:26 +0000
Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=)
2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: 2MDOUGpn14QCIxczD1emPBK/yN5eoFydANkH4QDFNrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:6f:fd:ee:ee:00:7a:b4:ff:37:31:e9:d4:9b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Validity
Not Before: Aug 8 01:01:26 2025 GMT
Not After : Aug 9 01:01:26 2025 GMT
Subject: CN=b818d6de17bc4907d19de0dce9972cc430737ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6a:67:24:80:3a:24:46:47:e4:22:58:16:f8:
28:55:86:29:f6:66:c9:b6:29:40:5a:78:4b:60:22:
c1:ea:03:1c:92:c8:ea:b0:cf:a4:7a:c2:d8:dc:dc:
66:33:40:7f:23:12:f8:9e:7b:f7:b2:b1:55:af:1a:
5b:c1:b0:c2:09:f2:66:53:29:b3:03:39:be:18:c4:
56:1c:7b:19:b0:1f:6f:13:e5:fc:a8:c0:c7:85:8a:
d8:58:d5:c8:c2:80:aa:ea:79:15:75:42:7f:d0:84:
64:ba:c2:1e:62:22:50:87:d6:4f:a3:e1:45:28:3d:
b8:ff:ad:61:fb:a7:95:a9:af:0c:dd:ec:3b:f3:9e:
95:d3:ee:18:24:0d:fd:fe:c6:b2:d8:29:d8:0d:91:
62:c4:fb:89:54:ee:e0:67:66:a3:0a:bc:83:4f:09:
71:7a:b1:3a:f3:cc:0c:59:86:cb:e3:71:0b:f6:1e:
36:c8:ad:1c:ed:c7:c1:a6:bc:75:0e:35:46:26:48:
59:07:58:7e:95:09:d5:87:b9:cc:39:69:9a:ea:89:
6b:f9:c9:af:7f:fc:a7:d7:7b:02:21:15:f4:19:f2:
95:c9:49:b2:da:d9:ea:da:c0:fd:55:15:54:dc:02:
62:a7:8a:3c:cb:9c:79:ee:b9:00:41:44:ec:ef:62:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:18:D6:DE:17:BC:49:07:D1:9D:E0:DC:E9:97:2C:C4:30:73:7A:E8
X509v3 Authority Key Identifier:
keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:26:2a:bc:93:04:3a:44:70:69:bc:79:95:58:88:b1:46:09:
b6:1b:f1:dc:5a:3b:0e:ba:16:3c:f1:9a:b9:f3:5b:b7:79:36:
97:09:26:ec:d7:cc:51:6a:1f:d9:e9:91:92:df:1b:7d:03:5a:
dc:26:65:a1:b2:54:92:9e:20:7f:a2:5c:d7:82:0e:d0:da:cb:
8f:51:3b:2d:6b:0f:5c:83:05:37:7f:94:2d:8e:36:95:ed:b0:
1c:81:30:d6:ce:0e:8c:83:32:e9:42:32:2f:5a:00:24:8f:be:
b2:1a:bc:75:9a:d1:bf:93:d7:f7:5f:5a:6a:30:0e:61:df:8d:
eb:bf:42:89:c6:23:23:16:7c:aa:b6:b3:cd:a6:7f:68:c8:99:
d1:c2:ec:bb:19:d9:4e:bc:b7:82:d8:00:ea:98:81:85:b2:68:
05:07:ae:a3:07:4e:7d:aa:70:6b:17:0b:9b:80:11:37:41:d6:
2f:cc:b4:e7:a1:98:fc:a8:16:ca:a8:b5:9b:73:cd:db:40:ba:
c8:86:88:a2:96:76:a5:59:21:7b:a2:1b:c0:27:b9:52:93:d8:
fc:87:b3:84:41:06:71:29:e4:22:ee:fb:d2:5d:d7:3e:ed:32:
7f:29:82:30:8c:c2:ac:bb:bd:26:23:bf:39:ea:d2:e7:33:39:
dd:b5:6d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:18:34 2025 by rpki-client