Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json)
Hash identifier: PiZCDREarUUenmD3ZO5OjOs30zolop5CZTGPBdpJ98s=
Subject key identifier: E1:56:40:26:23:64:3B:38:E5:32:23:BF:80:0C:7A:33:64:55:4F:2C
Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Certificate serial: 019873741F5193378E704897EE7EE5A6EE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
Manifest number: 03FA
Signing time: Mon 04 Aug 2025 05:00:46 +0000
Manifest this update: Mon 04 Aug 2025 05:00:46 +0000
Manifest next update: Tue 05 Aug 2025 05:00:46 +0000
Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=)
2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: 7idUpwUV/53EajSBsEk43KDorYld1lS+stS+rDLRzjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:1f:51:93:37:8e:70:48:97:ee:7e:e5:a6:ee:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7
Validity
Not Before: Aug 4 05:00:46 2025 GMT
Not After : Aug 5 05:00:46 2025 GMT
Subject: CN=e156402623643b38e53223bf800c7a3364554f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:f4:20:c7:dc:1f:20:2e:ae:36:88:2a:67:
2e:b8:d5:f6:2d:0c:33:3a:5e:e8:10:62:91:15:60:
2b:3e:9d:09:40:04:29:b8:d3:d0:c5:cd:bb:18:18:
fe:7d:ce:c0:20:4a:82:8f:9c:35:2f:f4:34:db:7e:
ed:a6:a5:50:4f:e1:6c:bb:50:1d:60:e4:da:86:4b:
32:bb:e1:d4:a4:a0:37:44:a1:fc:ff:37:5c:79:27:
2a:42:ac:2f:e6:86:8a:f2:d7:29:6f:dc:7f:67:86:
1a:67:05:40:8a:a5:a2:31:4f:c7:17:35:d0:0c:cb:
3d:70:95:17:14:80:5c:19:57:ee:08:cb:ff:d1:11:
f4:4e:96:76:b3:54:0e:ea:c6:0c:60:d2:70:36:0b:
93:8a:c8:da:8f:63:1a:ed:6b:0b:a2:d8:a3:55:9f:
d1:19:66:b9:26:87:9b:b0:e1:0d:45:3e:02:a8:1f:
5d:5a:6b:27:7d:cd:b8:c0:9e:c1:bf:c9:59:dd:5c:
11:f9:55:c2:c7:86:bc:f7:34:db:43:3f:60:9c:52:
75:34:79:c4:26:7c:34:36:66:85:0a:7b:25:a2:54:
86:2f:77:3e:f4:8c:81:b1:76:65:df:c5:10:60:07:
3f:28:31:5e:e3:28:27:e8:10:61:ed:4f:87:57:c3:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:56:40:26:23:64:3B:38:E5:32:23:BF:80:0C:7A:33:64:55:4F:2C
X509v3 Authority Key Identifier:
keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c0:2d:9c:d1:ea:13:94:9d:00:91:d6:90:e3:89:41:4d:99:
82:e1:83:b5:fd:b4:11:19:52:53:20:6b:d8:63:60:c5:a5:64:
8f:04:38:43:92:8b:fd:a8:9f:b4:3e:18:ac:a9:71:fb:f2:50:
7a:16:e0:3a:40:1a:76:ae:1c:a1:a4:e8:db:6f:70:0b:14:8f:
62:dc:ef:86:51:09:3a:a4:66:7e:6b:10:3a:d2:e5:0a:10:f4:
40:de:db:9b:55:54:7c:60:7b:3a:d6:93:f0:49:9f:60:3e:17:
45:8a:e9:6f:27:26:1b:a6:4b:c4:97:e5:44:fb:c4:c7:eb:a6:
5b:7c:1a:67:f6:43:c6:64:74:bc:71:ac:ee:08:d7:8d:90:47:
23:a0:4f:b1:99:b9:5f:32:b7:d0:80:39:0e:d4:0a:a6:7a:a2:
34:98:db:d2:06:9d:f4:4d:b2:52:d7:7d:ed:04:fa:a7:87:1d:
3c:36:e5:98:3d:79:9a:a0:8c:56:0e:dc:2c:df:ce:81:cf:dd:
33:61:58:f9:d0:f0:c3:ac:ec:f3:71:f6:d8:02:f0:3f:b1:40:
a4:24:0d:df:9d:d0:8b:63:08:2c:40:4b:a3:0b:59:c2:da:7b:
06:7a:9b:c0:30:3c:98:55:5b:2b:91:97:d6:fe:78:2a:24:b9:
5f:fa:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:00 2025 by rpki-client