Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json)
Hash identifier: BRWTIDT6KdVk2C76B93+fR3rPYuOgY7kRvNNDlFP60g=
Subject key identifier: 31:6F:DC:C2:2C:0F:02:C6:C8:2E:89:C9:84:FE:F2:60:3A:1B:CC:FE
Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57
Certificate serial: 0198936C9E2822DE59257140839B7F524003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
Manifest number: 0735
Signing time: Sun 10 Aug 2025 10:00:25 +0000
Manifest this update: Sun 10 Aug 2025 10:00:25 +0000
Manifest next update: Mon 11 Aug 2025 10:00:25 +0000
Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=)
2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: h2LY/ir3gR6UIzjJgjpr+rbshcBTkWfcAYsHh3nCSSA=)
3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6c:9e:28:22:de:59:25:71:40:83:9b:7f:52:40:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57
Validity
Not Before: Aug 10 10:00:25 2025 GMT
Not After : Aug 11 10:00:25 2025 GMT
Subject: CN=316fdcc22c0f02c6c82e89c984fef2603a1bccfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:a1:30:99:90:68:8b:09:09:e3:6f:23:51:
ef:8d:1f:8f:d9:5f:4c:7a:7c:54:52:90:0e:b4:95:
4f:77:59:d2:53:08:9d:6d:6c:a8:f5:e5:6d:f5:46:
f0:8d:a2:ec:68:f2:fc:fa:2d:22:9a:27:e6:16:8d:
12:55:04:a7:19:42:3f:30:98:84:a0:ac:9b:af:1c:
33:03:3e:bf:8e:46:76:5b:18:70:08:15:b3:49:75:
b5:93:8c:31:48:0c:ab:de:21:b2:9f:00:ab:13:f7:
ba:2b:d7:97:d5:59:c0:17:46:9d:b1:9f:ed:5a:c3:
24:64:3c:4f:35:36:14:1b:36:e5:82:a9:cf:2e:93:
21:a9:fd:77:ce:f2:cb:d3:93:75:94:ac:85:2c:62:
f2:c1:c0:6f:f8:13:10:fe:e4:86:85:42:b0:32:18:
02:5d:4d:08:f5:5f:15:54:80:c3:75:19:c4:df:e7:
9a:d5:d0:2a:8d:bb:f6:73:be:89:de:9e:28:d3:06:
1c:66:f9:44:e0:66:a7:e4:f1:33:cf:c8:72:eb:b9:
a8:b9:f3:44:aa:20:14:67:e6:73:2c:0a:8c:30:4e:
49:ba:cd:3f:b6:fe:82:8c:21:08:2a:a3:6a:5c:d5:
21:a9:50:29:be:9a:26:e7:03:d9:3e:d9:49:60:43:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6F:DC:C2:2C:0F:02:C6:C8:2E:89:C9:84:FE:F2:60:3A:1B:CC:FE
X509v3 Authority Key Identifier:
keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ab:68:fd:1e:17:68:7f:e6:02:ce:1d:d3:aa:33:de:d7:5b:
a6:1d:f2:48:40:a9:9b:a4:f8:0d:fb:89:87:a3:85:ae:02:34:
01:a2:af:ea:ce:41:aa:b7:ff:05:ef:3d:0d:6b:43:31:08:ae:
85:fa:56:83:17:1f:1d:bf:96:fd:8f:b2:3f:dc:5f:a5:e2:b5:
0b:32:5a:5c:12:a8:ae:99:c2:d7:10:56:85:f3:a5:39:fd:07:
c9:f8:5b:26:6d:55:10:76:70:b5:9c:0a:86:41:e0:e1:79:54:
71:be:4b:41:2f:d3:36:9e:b1:c4:09:02:2a:5e:62:1d:08:10:
d0:df:41:1b:ab:d2:4e:c8:9d:83:89:4d:72:e9:a2:61:a4:f3:
ed:1b:b4:d6:d3:a5:30:03:7e:c5:9c:33:0f:ec:45:a7:fd:74:
8c:0d:2b:43:16:2e:b9:5b:57:fa:f8:06:87:c1:9b:b3:58:89:
0b:34:56:dc:87:55:74:ad:22:ff:e1:83:74:70:96:2d:99:bf:
23:46:14:72:5b:4d:d8:89:81:f0:32:67:8f:07:0f:b2:7d:87:
cf:f0:f4:8d:a1:9c:f3:24:ad:02:d3:29:fd:d5:1f:b4:70:0d:
34:5f:33:a3:eb:c7:21:02:a5:9d:d6:61:e3:dc:e7:dd:3e:f3:
2a:ef:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:31 2025 by rpki-client