
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File: WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier: m0YBvFtiRlWVs4aK9LrCrmelX5YLyDpUWsj874jcgnc=
Subject key identifier: 89:09:64:A5:2A:99:94:7B:7E:EF:70:98:8D:E8:20:43:A4:28:E0:46
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 019873E312725AEF80D5782C9AA091D2E540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number: 1391
Signing time: Mon 04 Aug 2025 07:01:57 +0000
Manifest this update: Mon 04 Aug 2025 07:01:57 +0000
Manifest next update: Tue 05 Aug 2025 07:01:57 +0000
Files and hashes: 1: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (hash: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=)
2: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: 4wqslLchrsFHqAOo2SBGu3NRqLgeHr2utESSDH4SZkM=)
3: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (hash: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:12:72:5a:ef:80:d5:78:2c:9a:a0:91:d2:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Aug 4 07:01:57 2025 GMT
Not After : Aug 5 07:01:57 2025 GMT
Subject: CN=890964a52a99947b7eef70988de82043a428e046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5f:90:6f:d9:1d:9c:b3:49:e8:bf:22:4e:20:
21:5c:3b:a3:53:94:6e:31:53:81:d6:31:7e:f9:1e:
e4:93:e3:b8:8c:4e:83:42:17:77:81:f3:2f:43:76:
25:67:64:61:f8:81:2f:e3:8e:00:32:83:a2:28:c1:
00:7a:f6:1e:0f:5b:62:18:55:d5:86:41:2b:c2:8a:
3e:43:48:a5:34:e2:07:b8:61:e2:11:1e:8e:6d:b4:
a6:ae:91:21:98:2d:6a:ba:b9:0c:16:a1:e6:c8:ab:
15:3f:70:33:98:35:2c:e5:b2:e2:6e:87:26:d9:d1:
f0:77:1c:05:11:0e:75:e3:ed:bc:da:73:a3:4c:33:
9e:93:cf:5c:ed:35:95:d8:60:25:2a:63:c8:e7:33:
b1:18:50:02:0c:ad:58:63:9e:c4:e3:1b:74:d0:09:
f0:cb:a3:6c:31:5b:70:b9:b9:a6:e6:bf:2e:03:e4:
e1:ff:7b:57:77:10:4f:1a:4a:11:76:fc:42:a7:5d:
36:41:7e:56:4e:c3:56:ac:8f:cc:76:4c:28:71:9a:
df:5c:ac:61:06:f4:ff:9f:c2:e1:08:23:ea:91:dd:
de:e3:d1:0f:33:27:9b:90:ad:05:11:a9:56:bf:ce:
ab:ad:37:b7:0b:c2:09:25:f6:34:b6:99:c0:69:9b:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:64:A5:2A:99:94:7B:7E:EF:70:98:8D:E8:20:43:A4:28:E0:46
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:46:be:60:9f:fb:c1:90:e2:fe:11:66:e7:ee:94:e7:17:b1:
7d:6e:80:c9:8c:f1:2b:2b:42:04:3d:de:a0:7f:d0:d8:33:6e:
7b:48:3b:d5:c9:15:96:e4:f7:44:75:6f:9f:c5:e8:2a:24:64:
a9:81:63:0a:7c:d5:02:7d:ea:65:62:8e:e5:b4:e6:10:ac:c2:
65:36:8f:ab:bb:51:33:8e:21:2e:a8:6d:3c:0d:a0:fe:9e:ac:
90:21:16:96:12:74:96:51:0d:0b:2b:04:c4:db:43:4b:67:de:
e6:d6:9e:b4:92:02:95:02:b0:eb:f6:b3:9a:c2:49:ab:56:f4:
6e:91:36:e5:be:a7:07:9d:64:4b:c8:23:64:74:af:37:e0:51:
8a:93:ea:7f:1d:c3:2b:5e:b5:2a:37:8a:e2:c0:5f:41:d9:0c:
1e:88:33:e7:75:30:66:79:6e:a0:d4:d4:69:9e:e4:09:da:51:
7c:3e:fa:18:e1:6d:e7:ff:36:57:43:58:7b:cd:b9:03:70:22:
a1:84:c1:c1:a9:87:c1:5d:18:b3:af:33:94:ae:37:df:45:f4:
d5:af:01:2b:2e:0b:78:6b:73:58:ed:23:c5:83:8e:41:a2:83:
e3:71:d2:0a:73:32:c4:39:13:b0:9e:7e:7b:82:cd:18:6f:7c:
cc:e1:ff:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:01 2025 by rpki-client