Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier: fxDZlf5n5fUpcHWAkzqUDk2gK7OeudFkKszX1Pt+2PI=
Subject key identifier: 84:67:3F:37:CE:6F:75:69:30:2D:9B:3F:E9:34:F2:26:F8:36:4A:79
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial: 01987CAE523146478750A25E87B1894C7F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number: 0D3B
Signing time: Wed 06 Aug 2025 00:00:55 +0000
Manifest this update: Wed 06 Aug 2025 00:00:55 +0000
Manifest next update: Thu 07 Aug 2025 00:00:55 +0000
Files and hashes: 1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: 9Av2m6kpPW3cJcPV86r+BnJqkMav0uk8lNIIvFKDUYs=)
2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:52:31:46:47:87:50:a2:5e:87:b1:89:4c:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Validity
Not Before: Aug 6 00:00:55 2025 GMT
Not After : Aug 7 00:00:55 2025 GMT
Subject: CN=84673f37ce6f7569302d9b3fe934f226f8364a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:08:78:0b:1f:fc:29:61:6d:66:6c:8c:51:
6a:6a:86:57:c6:77:84:f5:43:fb:50:52:81:95:e8:
23:f6:4f:ef:10:53:eb:fe:6f:f8:a7:c7:3a:74:74:
05:f9:8e:21:8c:4c:b9:86:66:8c:27:06:51:f3:fb:
bd:c1:a3:95:a0:4d:85:ca:6e:b6:8c:11:6f:54:bf:
78:9f:93:d8:9d:4c:bf:45:2a:f6:c8:5b:bf:83:77:
2e:d9:47:d3:db:89:6f:f5:48:ce:36:5c:51:c2:ec:
f2:f8:4e:e6:d7:dc:55:28:83:83:ed:7e:51:4b:0e:
ab:fd:98:1f:85:d7:75:ab:10:09:df:ad:bd:e5:f7:
84:75:a5:b3:77:9d:b6:b2:51:3d:ee:29:68:be:18:
58:cf:2f:b4:9e:54:8f:1d:d6:1d:8f:2c:f5:cb:1b:
73:2d:a7:47:82:39:6c:65:35:b1:7d:53:e1:ee:cd:
0f:99:af:1a:a3:4b:a7:ff:fc:50:bd:71:d7:08:a0:
b9:81:33:56:61:57:e8:c4:84:ec:c8:22:b0:80:19:
5a:e2:b7:e7:7b:99:da:25:63:81:c1:f5:93:ca:31:
22:88:1e:8c:1b:78:60:cf:5c:ff:e6:e4:20:32:4d:
63:8e:d8:b9:84:4a:7a:0f:4f:57:79:d6:89:09:94:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:67:3F:37:CE:6F:75:69:30:2D:9B:3F:E9:34:F2:26:F8:36:4A:79
X509v3 Authority Key Identifier:
keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2c:3a:95:ea:8b:5e:ab:4b:91:72:fc:45:87:94:e4:46:d5:
be:0a:1c:8a:2b:6e:06:7a:0c:0a:c2:bc:66:04:af:fb:f7:c7:
7f:44:ba:2f:55:91:aa:5a:bc:b6:61:83:3e:20:90:dd:88:ab:
a2:6f:f2:f2:95:02:0f:1a:5e:20:ad:1e:c6:9f:c9:3f:1e:53:
05:d4:37:dd:64:53:d6:1a:11:66:7d:fa:9c:5d:d2:7a:f1:94:
45:89:44:63:83:62:c6:0d:bb:a5:26:13:41:bf:9e:e5:50:0b:
36:e3:e2:b8:e1:df:6e:80:b1:26:58:e8:6c:cb:49:44:87:ca:
52:8f:8d:23:f6:4c:de:99:82:db:65:96:c8:ec:a9:74:53:64:
5e:aa:09:8e:50:8c:c7:5f:51:a2:ba:aa:7c:e2:da:ab:4e:1a:
2f:0d:56:f1:9c:57:51:ba:6d:b5:71:83:5c:b2:8b:bb:72:f9:
ae:9a:ad:84:0f:90:07:19:35:c6:a4:e3:ce:2a:7d:c8:7a:76:
e9:cc:b2:d0:01:9b:a0:7d:16:eb:d0:12:a9:b2:9a:c0:c0:66:
94:cb:72:9c:43:82:d2:bd:e7:31:86:ad:51:98:ad:2d:0d:02:
e0:3d:21:d3:70:95:3e:d0:31:7f:10:a2:94:a6:83:5b:f6:f8:
50:14:f2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:12 2025 by rpki-client