
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json)
Hash identifier: T6p9iViI0sCtIswDDx+FXWM3a86bNE/joPq/CJnkvxE=
Subject key identifier: 88:DB:CA:12:4C:48:0F:48:C3:87:5E:76:DE:4E:C6:9E:01:82:3C:3E
Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Certificate serial: 01988AA0FCBC6A2D55C567FD624CC582D8E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
Manifest number: 119F
Signing time: Fri 08 Aug 2025 17:01:02 +0000
Manifest this update: Fri 08 Aug 2025 17:01:02 +0000
Manifest next update: Sat 09 Aug 2025 17:01:02 +0000
Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: +rtGtwiP6+o54lGRmeimaVBidQBBSjFFmsGefJ+Svos=)
2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a0:fc:bc:6a:2d:55:c5:67:fd:62:4c:c5:82:d8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288
Validity
Not Before: Aug 8 17:01:02 2025 GMT
Not After : Aug 9 17:01:02 2025 GMT
Subject: CN=88dbca124c480f48c3875e76de4ec69e01823c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:06:6f:cd:b3:2a:93:a0:db:6d:0b:54:2a:
5a:4b:47:31:35:3c:30:c6:5e:2b:b7:7c:b3:53:5d:
ed:7c:c5:aa:a9:7a:2d:8d:5a:45:be:80:66:13:54:
f6:fc:8d:69:d4:66:e2:a2:9d:3b:12:dd:14:76:d0:
7c:57:73:38:58:df:ee:6f:57:a5:f2:c5:79:b1:0e:
e8:ba:b4:7e:0c:dd:5c:1c:4a:85:65:83:36:9d:79:
d6:15:0c:99:27:e8:e3:8d:c8:93:4e:78:52:27:9a:
9b:88:f0:be:fa:96:72:db:98:2d:db:71:82:0a:9b:
da:6f:ae:85:39:e3:54:e2:7a:74:c0:79:59:17:1a:
83:52:0b:5a:68:ff:55:e7:af:c4:28:c8:77:6d:73:
94:a5:73:01:04:e6:ed:33:cb:79:22:8e:fa:99:eb:
bf:d8:0c:b2:94:af:55:31:28:35:63:75:68:d1:bb:
22:30:48:8e:bc:4b:b0:5e:b8:c9:f3:43:33:7e:65:
f5:5b:51:e8:15:9a:05:af:6d:30:ca:fc:c6:8b:9d:
5a:c7:26:15:eb:56:72:cd:98:e2:97:d6:02:8f:b3:
87:d4:f3:17:8c:d6:4a:fd:e1:3c:2e:85:c1:60:41:
f2:da:64:41:62:a9:34:9a:5d:d3:f1:0a:7c:a3:4c:
9f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DB:CA:12:4C:48:0F:48:C3:87:5E:76:DE:4E:C6:9E:01:82:3C:3E
X509v3 Authority Key Identifier:
keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ce:cd:fd:70:c3:da:1b:45:36:78:6c:8c:03:28:85:98:e7:
ef:39:10:d8:2e:ec:f1:77:94:29:e3:7b:2c:03:cb:58:b5:60:
e9:10:c3:47:5c:fd:c6:e3:d2:8c:f4:73:28:2f:4d:a8:1f:18:
4e:09:bf:5a:d9:1c:ce:d2:aa:4a:b8:a2:96:7d:7e:c8:dc:b2:
c8:7e:ac:2f:74:e7:e7:54:34:d1:09:78:70:22:af:39:84:bd:
5d:c6:61:88:76:7a:59:9b:dd:bb:1e:4a:7b:ff:f4:98:92:ad:
03:61:b7:55:da:cc:0a:f6:27:bb:d8:6b:4b:ba:9e:4d:7e:3f:
64:d4:ab:02:a5:53:fb:23:1b:95:bf:c0:5c:46:75:04:0d:80:
4d:c6:90:73:57:83:87:b4:2e:f5:e1:79:36:37:8e:ad:52:26:
b3:2d:a7:f4:d0:10:4d:37:3f:62:c0:4a:08:d1:41:6a:3c:5d:
9d:39:dd:21:a9:ab:89:a7:23:3a:a5:79:f8:ac:13:f6:70:25:
a4:df:3b:ee:30:05:58:c3:fa:34:e8:09:de:6b:ad:b1:4f:ee:
67:50:d0:3f:6a:5d:2d:c6:50:a9:6c:8e:a4:b1:2f:74:8d:92:
e5:83:d7:5a:d7:e7:a6:1b:02:ad:1a:68:70:0e:d4:47:68:1e:
7b:90:cf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:51 2025 by rpki-client