Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: E7NGFL8KUS2ABPGsQzrdJL5rT3oeNQBUymf7vAAeOgo=
Subject key identifier: E6:0B:FF:90:BF:75:53:DE:60:7E:B8:C1:E8:4E:41:74:52:E2:4C:99
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 0198A0F1F07D6DC2C269814E5FFF2F03B39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 0240
Signing time: Wed 13 Aug 2025 01:01:06 +0000
Manifest this update: Wed 13 Aug 2025 01:01:06 +0000
Manifest next update: Thu 14 Aug 2025 01:01:06 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: Bs7PAZesnIJqwCHBB4uDLIfYezmo45e81+WDUUxIzPs=)
2: lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa (hash: 95YPoU3EnMBScsmNlHgLSHa16IwnjsnV9FN8H0xyPaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:f0:7d:6d:c2:c2:69:81:4e:5f:ff:2f:03:b3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Aug 13 01:01:06 2025 GMT
Not After : Aug 14 01:01:06 2025 GMT
Subject: CN=e60bff90bf7553de607eb8c1e84e417452e24c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:40:72:3c:85:d5:01:ab:57:f4:07:f3:27:4a:
8e:9a:d4:0b:ca:af:36:06:e1:be:9b:ec:df:68:50:
9f:61:bf:20:28:5e:06:6f:4c:a3:aa:b2:2a:a2:21:
46:fb:88:26:e5:74:d8:7f:33:ca:00:f6:c0:3d:5b:
74:6f:4d:c8:c2:fc:2b:96:f3:73:16:e9:d8:c9:db:
3d:52:57:56:cc:05:b8:a4:da:4f:63:17:df:f1:73:
70:d8:ec:78:27:14:23:aa:05:47:35:b7:f0:7f:bf:
7a:47:7d:53:f5:a3:b1:19:ce:93:0f:7e:04:0e:5f:
0f:28:5c:94:ae:b1:ef:81:c1:67:f7:17:84:aa:bb:
0a:8f:91:1a:ac:30:0d:da:de:20:57:ad:fe:9e:8b:
86:07:96:9b:cf:54:22:02:f0:d6:6b:85:4b:19:d3:
59:ef:6d:f7:2f:7c:a2:e4:cf:c5:b6:7f:e3:aa:f0:
86:9e:73:4f:da:70:99:60:2a:30:bd:ea:24:2f:c2:
ec:26:65:e2:9a:69:96:24:37:6e:22:e2:19:f3:84:
9c:8d:7e:97:4e:75:1b:1c:cf:3d:e5:e0:69:33:d6:
3c:36:16:12:c0:f2:8e:63:2a:ed:9d:b8:6b:73:eb:
d7:9b:7e:a2:f8:f7:b1:44:35:f0:60:9a:1c:37:de:
0c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0B:FF:90:BF:75:53:DE:60:7E:B8:C1:E8:4E:41:74:52:E2:4C:99
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9e:11:c4:a0:bd:22:7b:bc:53:9f:68:22:ef:4d:88:95:2d:
16:3b:b5:78:d6:c0:17:5d:e1:2b:ed:9f:c5:4a:26:a2:8f:c2:
0b:bc:05:84:8e:4b:fb:c6:ad:25:d6:ec:19:16:da:24:22:1b:
b7:38:48:c1:34:2d:d2:29:1b:bd:be:b8:e5:71:8c:a4:ef:9b:
24:68:68:4c:3e:cc:9a:e7:76:7f:ea:19:f9:51:8c:a9:4f:9c:
24:3c:93:eb:f0:08:94:98:95:a2:b6:4e:1b:85:41:16:3f:24:
85:6d:4b:9a:2f:49:42:98:f5:b5:a5:49:eb:03:cc:20:bb:44:
eb:d4:d2:49:2f:7f:a1:55:d1:fc:f0:3f:ea:2a:1c:7e:24:91:
9a:b4:29:34:92:34:78:24:92:19:e3:28:0b:73:86:97:13:06:
34:cc:4f:dd:22:90:ae:9a:23:35:8a:98:00:3c:a1:1f:9d:8d:
a3:76:76:c5:1b:f4:39:3b:81:7f:15:50:d2:8a:4a:39:cc:a6:
e3:76:85:3b:20:9e:28:78:9f:fe:d9:d5:7f:d7:93:2a:fe:f0:
83:39:11:7c:e0:68:b0:fe:1a:37:85:69:97:96:52:e7:45:88:
95:87:ef:d8:2e:ca:3c:c0:04:49:0f:7d:36:ca:36:ca:bb:8e:
8e:b5:d7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:40:46 2025 by rpki-client