Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: WkNU0cy19k3O4IpPAXxSBg6H1+X/LpY+fOd1w/HRyj0=
Subject key identifier: 6D:2B:DB:D2:E5:88:08:F8:4D:0A:DA:92:C0:3B:F6:E5:AC:B9:E4:2E
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 019885B139506F321AD3AF4D24862FF4AB04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 1080
Signing time: Thu 07 Aug 2025 18:00:40 +0000
Manifest this update: Thu 07 Aug 2025 18:00:40 +0000
Manifest next update: Fri 08 Aug 2025 18:00:40 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: HOr1FTMV87Y8EPsVAya5I55DFyd+SROP4vqbwNSzip0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:39:50:6f:32:1a:d3:af:4d:24:86:2f:f4:ab:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Aug 7 18:00:40 2025 GMT
Not After : Aug 8 18:00:40 2025 GMT
Subject: CN=6d2bdbd2e58808f84d0ada92c03bf6e5acb9e42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ab:ab:0b:f9:72:72:97:8b:e4:1a:8b:f5:57:
22:dd:bb:cb:78:5d:6b:01:45:ae:b0:4b:22:db:f9:
9e:70:70:81:90:15:fe:d7:36:7c:dc:31:b6:3d:8c:
51:c9:bd:60:2f:9c:64:bd:58:ff:8c:65:fc:72:f6:
65:71:76:01:5c:8a:47:44:00:78:70:82:b6:03:2c:
50:ea:98:1a:22:51:80:e6:ab:82:3d:8d:df:7e:36:
1b:b6:bd:68:87:f9:d6:a2:9e:ef:d0:d2:43:7d:23:
ab:d8:e8:19:32:64:e7:eb:99:40:51:dd:4b:32:d1:
1e:24:81:40:74:27:40:83:44:51:00:90:ef:9a:64:
cc:41:32:85:56:c8:e6:ae:84:92:03:4d:b9:16:c3:
a7:34:df:9d:38:cd:07:87:8d:e1:f9:dd:85:b2:5c:
c0:0e:9e:e2:5e:a8:c3:ec:b1:f6:f0:fe:5e:60:8d:
14:77:5c:6a:93:11:eb:70:c8:a9:78:22:89:61:0b:
9f:62:50:64:dd:aa:bd:5f:da:1d:6c:58:7b:30:d3:
66:7a:bf:06:d9:aa:8c:e0:ed:f9:e6:6e:24:6f:2d:
35:25:f2:c1:a8:fb:66:dd:54:9f:ac:4f:31:19:42:
df:99:00:77:8e:e1:1a:28:b9:df:cc:c2:81:bd:21:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2B:DB:D2:E5:88:08:F8:4D:0A:DA:92:C0:3B:F6:E5:AC:B9:E4:2E
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:6a:f5:8b:ad:51:7f:65:2b:21:21:db:f7:f5:b7:be:38:48:
10:34:ea:d2:ab:ae:1a:ea:c0:a8:6e:0b:a2:36:f8:44:46:47:
31:91:c5:48:a1:e1:63:0d:cd:48:3c:c7:e4:a2:a9:01:4f:38:
52:8b:7e:79:a8:59:aa:c2:9e:f1:59:be:9e:bf:49:8b:82:0d:
6f:a2:ee:33:d0:a1:e4:98:05:cf:ed:a6:1b:0c:2c:4b:20:f6:
66:76:ab:c8:a0:ec:56:0e:88:0d:64:7a:19:1f:ff:cd:92:5e:
f4:31:cd:3e:f2:3c:06:7b:8b:64:54:8c:07:ee:9c:f5:ca:af:
f6:32:34:aa:83:6c:ea:34:8a:87:13:46:e2:e3:37:eb:55:88:
a1:3e:37:64:f1:9f:8d:5c:e7:75:10:1b:3e:80:bd:65:77:86:
d7:80:e0:16:6c:18:76:83:e9:12:c4:5b:df:1b:fd:c0:8a:28:
57:7b:f0:3b:6c:4d:81:b0:25:98:65:93:c8:8e:f5:a6:8d:46:
30:70:0f:01:ff:91:da:50:65:63:43:b7:81:3d:0c:75:22:1a:
24:5e:22:3c:ba:cb:cf:17:36:50:db:3f:33:ce:87:18:5c:e2:
b4:e0:42:5b:3a:5d:cd:f6:20:b5:cc:e2:51:9a:d8:e2:1f:cf:
cb:7f:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:50:05 2025 by rpki-client