Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json)
Hash identifier: BavrfDD2WjGKu953VnW6Fo/sfHYyq+89V9ctvWCVryg=
Subject key identifier: 0D:58:C8:3A:06:F4:22:9B:FD:99:D8:42:40:C1:D0:E1:2B:69:40:74
Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Certificate serial: 01989636CE50A64F2C3CEF3C78F53A095039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
Manifest number: 0DC8
Signing time: Sun 10 Aug 2025 23:00:30 +0000
Manifest this update: Sun 10 Aug 2025 23:00:30 +0000
Manifest next update: Mon 11 Aug 2025 23:00:30 +0000
Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=)
2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: ax8+89v5PYCuc4WFHZmR3YIZtfbt3qcrHNsVS87wJ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:36:ce:50:a6:4f:2c:3c:ef:3c:78:f5:3a:09:50:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0
Validity
Not Before: Aug 10 23:00:30 2025 GMT
Not After : Aug 11 23:00:30 2025 GMT
Subject: CN=0d58c83a06f4229bfd99d84240c1d0e12b694074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:7a:1b:50:7e:32:21:c0:d5:60:50:51:53:
d6:64:8c:ef:df:b9:1b:06:b0:bb:ad:9b:2b:2d:03:
5f:bd:7a:6e:0b:da:b6:ed:54:42:8f:f1:50:3e:89:
c0:a7:bf:03:3a:55:e8:b7:13:d2:17:33:6d:70:98:
54:0b:1f:42:c5:73:59:2b:e1:ce:b0:02:4b:42:37:
dd:9a:5d:09:ee:ec:f8:c3:4e:42:62:10:82:27:d0:
5e:50:d3:64:2f:ff:7e:c1:f9:37:78:3e:d2:91:09:
18:6f:a8:55:8a:a8:ce:22:4d:cd:db:dd:02:cc:4b:
fe:a9:e5:ad:c4:71:ef:97:2e:95:fa:f3:b1:f3:9d:
f0:26:c0:db:c9:49:00:a2:88:92:db:3e:e9:2f:37:
54:c1:2a:73:35:6b:3b:51:c1:6f:52:63:e7:75:6f:
e6:fa:3a:00:c6:9c:b0:ec:b8:8b:99:b4:a3:6d:24:
40:b7:2f:92:8e:41:22:17:ca:9b:39:f9:9b:89:72:
c8:93:46:b7:14:a0:92:fc:7a:6c:a8:b5:62:b8:da:
b2:bd:bd:78:c4:a1:e3:47:75:ca:0a:ae:7a:53:45:
ec:a1:ca:3c:64:e0:90:7a:cf:fe:f6:a7:00:8c:c8:
f2:84:66:80:41:03:44:0d:8e:76:93:77:ab:b4:0f:
4a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:58:C8:3A:06:F4:22:9B:FD:99:D8:42:40:C1:D0:E1:2B:69:40:74
X509v3 Authority Key Identifier:
keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f5:ef:71:d1:74:02:65:ac:86:13:ef:77:d5:6d:1e:47:5b:
31:9e:a4:90:06:7c:ea:a6:c3:63:76:fa:c4:b7:f0:59:61:a9:
8b:52:71:8c:1c:b0:58:de:5a:4e:b1:ab:28:2e:e5:81:5f:a6:
fd:d9:e1:dc:bc:ce:6e:25:94:c5:78:d3:96:d2:9a:9b:e2:78:
bb:a7:da:b0:40:7c:4b:6a:4f:20:7e:6a:8c:a2:ba:fd:97:35:
8d:8b:ab:44:23:c8:df:8f:12:39:e9:e2:4d:53:85:c8:80:fa:
15:21:83:93:c2:ee:6a:7e:f9:ed:cf:a7:1a:9f:8b:ad:aa:db:
8f:88:12:20:d6:3f:2a:9c:f3:2f:0d:c3:23:a4:0e:02:10:86:
ff:f4:6c:19:19:b0:4b:7f:28:72:dd:b2:2c:f6:65:82:cb:5c:
16:d7:ff:00:34:03:eb:8e:9c:56:67:d9:18:b9:3c:86:22:fb:
fe:db:87:34:78:c0:ba:8b:5b:63:24:ee:00:aa:c6:3a:43:a0:
81:3f:e1:cf:44:9a:06:7e:14:5c:e3:15:08:d5:64:77:4d:85:
f7:20:d2:8f:85:2e:ad:f4:db:1c:96:e0:57:38:ba:0d:3f:49:
1a:b7:9b:cd:78:ae:7d:d1:d7:0c:27:a9:03:ed:51:1e:96:97:
09:60:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:37 2025 by rpki-client