Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier: p5rbNqg9WvzKHh81B0dhcrrTNXNmOaqE0Qvuu9+bvHI=
Subject key identifier: 19:38:06:59:42:27:AD:A0:57:44:B2:EB:64:8E:37:E5:29:AD:4D:04
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial: 019874507827856F2B4736F51EB749AA7B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number: 0B70
Signing time: Mon 04 Aug 2025 09:01:27 +0000
Manifest this update: Mon 04 Aug 2025 09:01:27 +0000
Manifest next update: Tue 05 Aug 2025 09:01:27 +0000
Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=)
2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: u627BbAB20H6bsOVTEmrg6XQG5+x/kOi23P6Ze2N0wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:78:27:85:6f:2b:47:36:f5:1e:b7:49:aa:7b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Validity
Not Before: Aug 4 09:01:27 2025 GMT
Not After : Aug 5 09:01:27 2025 GMT
Subject: CN=193806594227ada05744b2eb648e37e529ad4d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5b:50:37:66:ae:27:de:fc:81:cc:0a:aa:5a:
50:11:0a:2f:03:19:81:c3:03:48:a6:54:bd:ee:57:
41:4b:41:8f:3b:02:44:27:5d:a7:62:74:37:05:f2:
b2:1c:d6:c7:f4:64:9c:d8:6a:19:87:62:55:51:4f:
7c:57:eb:6f:f0:e7:6d:e3:33:75:80:51:d8:13:f9:
da:5f:82:db:12:b3:78:65:16:49:9d:6d:a0:0a:59:
34:4b:c0:f2:0c:d8:e4:ee:e7:0f:9f:cd:88:12:d7:
f9:93:0c:8d:80:09:64:93:9a:67:17:c7:9e:ca:1f:
5b:cb:cc:75:c5:40:ed:e1:9a:74:da:e3:45:ed:ef:
d5:7b:c4:7f:5c:e0:91:10:22:9a:09:d6:65:6b:8c:
58:97:a4:e4:12:7a:44:39:05:22:95:c9:d3:db:d7:
39:71:f5:5c:00:f5:6a:2a:51:0f:24:ae:5e:03:72:
4e:db:4c:1b:dd:d9:34:7f:0b:5d:e0:5a:f9:4a:2f:
06:ed:29:8b:2a:cf:35:e3:de:62:35:e7:d3:ff:77:
74:47:76:85:85:d3:db:41:6f:09:f8:a9:ac:a1:11:
81:be:b4:98:98:76:bc:8f:db:15:98:c5:24:6a:81:
6c:08:2b:66:90:25:e6:dc:0e:6b:a1:52:5a:ae:ec:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:06:59:42:27:AD:A0:57:44:B2:EB:64:8E:37:E5:29:AD:4D:04
X509v3 Authority Key Identifier:
keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:45:09:46:8b:d3:09:b5:4b:53:60:3c:17:f6:dd:a6:32:26:
6b:ff:a6:56:9b:34:62:31:4d:1e:99:b8:b7:fe:1e:61:7b:df:
77:d3:87:b9:e1:d6:68:a6:44:37:6c:86:32:e4:c7:89:f1:9f:
9a:da:21:05:33:d2:8e:1d:04:03:11:a1:28:8b:68:7a:6e:88:
09:79:e6:dc:ea:4c:0f:cc:5e:9a:17:5c:1d:c1:16:40:3a:75:
39:2a:db:44:28:51:54:cf:f1:30:fe:4a:9c:e7:ca:a6:b9:36:
0d:8c:2e:c6:55:2c:85:ce:5c:80:bb:83:07:5e:2e:89:85:6a:
41:02:a8:6d:09:3a:ff:6c:cb:98:92:7e:93:70:7d:5f:17:a6:
67:46:8e:e0:3b:e3:a4:37:bd:48:be:94:0f:9c:72:0d:5a:85:
3f:d3:9d:17:67:20:fd:8d:cf:d0:7d:8f:04:c2:fe:94:ec:3d:
88:2b:c7:62:1e:06:3e:48:e1:6a:4b:c8:a2:91:7e:33:13:b5:
f1:9b:a4:a5:9a:79:3b:1a:27:77:b5:23:24:05:15:d2:33:b2:
db:ed:ad:bd:6f:00:2e:40:d1:50:80:ba:57:d1:30:59:29:20:
34:13:88:a4:76:23:89:29:eb:ad:cf:2e:bf:43:b2:03:b9:62:
ec:ff:05:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:41 2025 by rpki-client