Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json)
Hash identifier: PvgdCcXjC2NkoTCQ519Lk3ggWLQaxsO7PDDAjuR2pVw=
Subject key identifier: 34:37:D3:6E:94:99:C2:C8:1A:32:30:C6:E6:FD:75:19:5C:32:06:F1
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 0198729846D2D264272037E7CD10EBD53FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
Manifest number: 1097
Signing time: Mon 04 Aug 2025 01:00:38 +0000
Manifest this update: Mon 04 Aug 2025 01:00:38 +0000
Manifest next update: Tue 05 Aug 2025 01:00:38 +0000
Files and hashes: 1: 4jM0JVjRqyqNZv5MXvbIPvqtPak.roa (hash: esLYhdOdh3leFG/PbeUzrVs3Llk7R0kG4kYUF7ITJVs=)
2: Fk-RTc_x_EZ5p-h1OUyJsVVtDV0.roa (hash: oolZPOnT9pMIdCNLzjvt7CZ7qXkkFGvNdRAoF9kj0Tw=)
3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: FiI+tZqJKCTUbcDD3QJCghK9JGbgQjGO5MoFgigJEoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:46:d2:d2:64:27:20:37:e7:cd:10:eb:d5:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Aug 4 01:00:38 2025 GMT
Not After : Aug 5 01:00:38 2025 GMT
Subject: CN=3437d36e9499c2c81a3230c6e6fd75195c3206f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:3c:22:f8:fe:82:97:41:37:e3:41:6f:03:
c3:95:65:2f:ee:cf:dd:ae:cf:80:92:0a:08:c3:36:
c4:d1:9c:9f:15:37:8b:3a:31:4e:1d:8b:66:07:34:
7a:b8:f8:f2:aa:72:ab:7e:8d:53:a7:74:f2:20:f6:
17:7e:0b:73:57:85:ed:8c:54:b3:a7:a9:ba:42:07:
a4:37:ff:7b:67:ac:00:cb:99:e3:70:89:25:ac:2b:
30:a4:0f:3f:37:d2:f1:a6:f1:1e:20:6a:c3:df:2d:
22:67:cb:98:2d:f6:44:a8:7f:3c:d7:c1:47:2c:48:
c8:ad:33:49:6c:d6:d3:55:6f:2f:72:8e:07:81:0d:
66:93:ef:55:97:95:de:b0:d4:62:18:94:62:ad:88:
71:39:f4:d2:43:30:22:d1:59:d1:6b:7f:ee:f8:66:
5f:51:9c:6a:84:e0:c9:fd:84:94:c7:7f:a2:7d:6c:
94:86:84:28:c3:39:b4:87:83:3a:f5:b2:ac:03:94:
02:3d:13:b3:8d:1a:24:fc:93:d5:96:49:71:4b:d3:
90:f3:5d:e0:05:1d:38:9c:e6:64:11:86:92:73:e9:
a5:0a:c7:f0:ab:be:42:ce:73:a4:cd:ed:bb:60:ac:
6c:e6:a4:04:21:d6:b6:5f:4c:9f:6e:66:e6:e4:83:
14:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:37:D3:6E:94:99:C2:C8:1A:32:30:C6:E6:FD:75:19:5C:32:06:F1
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:24:91:65:74:e8:bc:85:ea:9f:8b:87:b2:7f:2b:81:7f:ad:
23:c7:ef:57:cf:c8:1a:48:8a:db:00:4a:02:e8:78:eb:62:b9:
c4:f3:f0:6e:c7:39:9b:90:7a:3c:39:f8:ab:e7:6f:7e:79:b8:
9f:22:ca:01:da:0d:1f:7a:99:a6:e5:4d:10:60:45:f9:a0:d1:
d7:0c:a3:3a:b1:ef:41:5d:73:9b:cf:a5:a0:5c:b2:b4:1f:e9:
7c:72:03:2a:7a:d5:e0:fe:87:ec:46:5d:69:34:3a:07:40:cc:
f5:28:0e:eb:62:89:34:16:b1:14:8b:38:66:a3:1b:8a:e9:56:
4d:ce:91:97:87:94:25:32:22:24:41:93:f5:de:40:f5:55:03:
cf:7c:4d:fe:31:02:d6:70:df:1a:58:f9:5f:b8:b8:33:8c:2e:
7f:67:2b:c2:6d:c0:31:42:f8:36:79:93:68:7f:35:1f:eb:db:
c6:0f:dd:f8:cc:86:83:3c:77:ec:9d:3a:0e:80:85:c9:35:9f:
51:e7:da:e2:26:e8:54:9f:66:f8:bb:98:19:e0:6a:88:1f:f3:
13:eb:f7:d6:8e:1b:3c:0b:09:62:de:5f:60:4a:a4:f9:74:3f:
21:95:02:77:3e:4a:23:99:94:fc:f8:4b:23:ba:5b:46:d7:6f:
9b:41:e9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:37 2025 by rpki-client