Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File: WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier: 87ETiMpDzWxqGaDejfnhnmyTqA4ooSIx/fzBf1r30gU=
Subject key identifier: 1E:79:CD:60:4B:9D:0F:45:A2:A8:52:11:A0:FA:93:2F:56:89:02:8D
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 019888B23B9FDA8FBE12D275C56970E1AC77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number: 108C
Signing time: Fri 08 Aug 2025 08:00:38 +0000
Manifest this update: Fri 08 Aug 2025 08:00:38 +0000
Manifest next update: Sat 09 Aug 2025 08:00:38 +0000
Files and hashes: 1: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: /aaUmyk7v8yPBv2uarrzvQ/zc9VlwZh6plX1S3Q5Bfw=)
2: pYvKtWHjQL1axAyemHXasjizsXI.roa (hash: +saRg/F7RlIOLGe+6CACF+gl/0HmxqxN1SsKDNk6n+M=)
3: qBYlovJkfJHkvUcB5hy59ysLvBI.roa (hash: rhUQ7eemuasO/N/vCeryMqfVlnZzFbMH9k0Lde5p9sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:3b:9f:da:8f:be:12:d2:75:c5:69:70:e1:ac:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Aug 8 08:00:38 2025 GMT
Not After : Aug 9 08:00:38 2025 GMT
Subject: CN=1e79cd604b9d0f45a2a85211a0fa932f5689028d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:99:ac:df:8f:b5:1e:7b:75:2c:4e:a7:1f:
1a:c2:f2:6f:2d:0a:bf:3f:ff:a1:8d:83:52:fc:55:
5f:d8:58:a1:02:d2:7f:ff:87:ea:3c:80:e1:69:93:
3d:3c:78:7d:82:5c:ae:75:56:2d:cf:a5:4b:5e:93:
02:5d:82:32:ad:5d:cd:36:30:15:09:d5:b7:c3:82:
8b:21:1e:27:86:fc:d6:f9:89:99:38:8c:be:a1:18:
c3:c6:9a:1f:ad:52:42:7d:1a:a5:30:9e:a5:e2:ea:
6a:b6:07:98:e6:48:e3:5b:46:3a:69:a4:65:3b:fb:
72:76:4f:64:4c:7c:a0:e2:d0:d0:f6:d8:18:45:ce:
92:31:18:02:f3:00:90:ea:53:b8:ea:f2:29:6b:fa:
f1:14:35:91:bb:e4:67:33:54:d6:57:3c:e7:96:28:
08:55:3e:6c:83:6c:27:4c:bb:c4:05:25:4c:e1:13:
54:d0:0b:ba:b5:7c:92:6c:1d:6e:fe:15:c2:c6:4b:
18:be:d5:d6:83:ab:8b:3e:81:7e:34:28:e6:6a:d8:
1d:ee:f8:5c:62:88:24:0b:24:d6:51:a6:93:43:a6:
42:41:a5:6d:33:77:85:ea:a2:5c:41:9b:66:29:fa:
a7:3c:75:5e:ca:4b:a9:5a:3d:eb:4d:8d:75:b3:0e:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:79:CD:60:4B:9D:0F:45:A2:A8:52:11:A0:FA:93:2F:56:89:02:8D
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:f6:4d:ce:6f:55:64:12:0f:25:14:35:72:0a:ef:5b:ce:d8:
47:65:00:dc:ed:98:62:b5:41:42:b2:70:9a:cf:09:ae:05:4f:
e2:55:ff:78:2b:b9:6c:21:33:90:39:5f:3c:d5:b8:b7:df:76:
89:6c:70:09:b6:7c:42:95:9a:f1:6d:3c:b5:a0:12:78:ca:69:
88:75:ac:7b:b7:0b:84:19:b6:2a:f1:c9:59:41:fd:74:46:7c:
21:87:03:ef:25:14:ef:84:76:bc:dc:dc:bf:76:27:04:06:59:
19:ba:47:49:ba:bc:39:28:47:a3:2e:fa:23:65:4e:89:74:33:
aa:75:28:a6:86:5c:f5:db:4f:a2:d3:74:aa:d8:3e:57:7a:1d:
b6:5b:0e:2d:68:7f:a7:67:d3:8c:a0:cc:64:0f:2b:07:8c:09:
f6:f0:9d:ed:1d:1d:a3:53:5a:31:fb:a4:f6:89:ce:5c:5a:ce:
22:2c:49:50:ca:6c:db:30:d3:72:54:90:7f:fd:59:2b:54:19:
d6:3e:b2:9a:bd:27:82:e5:9b:94:33:be:05:0f:a7:e4:07:91:
b5:06:b6:fc:3d:0c:e4:5d:21:7e:63:e4:3d:19:eb:54:ef:83:
47:e9:63:4d:58:5a:3d:5e:00:80:01:2f:41:33:65:8c:d5:7d:
8f:da:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:51:08 2025 by rpki-client