Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
File: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft (raw, json)
Hash identifier: PKZ02ExkHjWCTJNm753pxjENgi+zwMOKLV+dQdIVgzY=
Subject key identifier: 8F:CC:5D:A4:2E:CB:67:45:6C:B4:EA:82:29:7F:DD:9D:BD:83:F4:84
Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
Certificate issuer: /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Certificate serial: 01987AC00BD79E95D1FAE54C56DF80B093A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
Manifest number: 08A4
Signing time: Tue 05 Aug 2025 15:01:02 +0000
Manifest this update: Tue 05 Aug 2025 15:01:02 +0000
Manifest next update: Wed 06 Aug 2025 15:01:02 +0000
Files and hashes: 1: PkwWwJkvXsUEh6Cv0L7IgIGfFS8.roa (hash: ldaxlOWxdPdxsizqAkQ8NMKwi+hD26UCyicpS3F4O+A=)
2: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl (hash: ay2KtLJOinIsZRg5viLvRl+8CiSu6Q3fsAmGiK6WUOw=)
3: zlPIwjDPqeKD3uFdmxv9hznl_LA.roa (hash: sBzI0OQdYuCXwCE1xwy5akb2HUt9JvXsMA0Ia8KRcEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:0b:d7:9e:95:d1:fa:e5:4c:56:df:80:b0:93:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b
Validity
Not Before: Aug 5 15:01:02 2025 GMT
Not After : Aug 6 15:01:02 2025 GMT
Subject: CN=8fcc5da42ecb67456cb4ea82297fdd9dbd83f484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:e7:e3:83:5c:ff:57:35:2e:29:a5:fd:8f:
db:27:45:5b:20:11:2f:c1:a3:b3:3f:90:a5:09:2b:
fd:45:a4:2e:3e:55:ac:9b:f7:e5:7c:bb:e5:31:94:
a3:19:ce:47:29:96:22:fa:33:af:8c:44:32:de:1e:
dd:80:b4:f9:1b:62:17:a0:2f:49:a7:fd:dc:89:43:
8f:eb:f7:60:d0:d4:d7:73:a4:8d:dc:8e:d8:1f:8e:
56:93:f3:b0:c5:67:19:89:65:a6:cf:37:a5:60:b9:
81:62:44:00:6f:fb:86:97:dc:c7:9d:38:b9:74:26:
b7:44:30:4b:63:93:fb:0f:89:89:34:07:24:37:81:
67:36:20:6d:85:83:96:3e:05:10:3c:27:59:62:ca:
fa:e5:69:f2:f9:6a:13:97:ff:6d:b3:ec:46:aa:50:
59:97:bb:0a:e7:92:c5:48:a4:95:b8:e9:84:c4:2a:
68:b6:98:79:5a:5e:3e:ab:70:12:5b:c1:65:ef:40:
36:8e:27:ff:ed:86:7c:37:a2:b3:db:59:f7:8b:4a:
a2:cd:45:a8:cb:6a:4c:1e:c2:8e:c0:5d:de:fd:c1:
f8:95:0b:e3:7a:db:f2:c9:33:af:07:8d:a5:4a:28:
f1:05:89:41:0f:ba:ea:20:08:d8:03:07:4f:63:8d:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CC:5D:A4:2E:CB:67:45:6C:B4:EA:82:29:7F:DD:9D:BD:83:F4:84
X509v3 Authority Key Identifier:
keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:70:a4:d1:da:af:32:2a:4c:0b:bf:1f:e9:6f:80:5f:8b:f4:
92:32:7a:28:e2:47:fd:bb:cb:95:a6:97:d3:c8:f4:01:45:fe:
18:3a:36:63:57:5a:e8:fb:f0:89:a1:55:17:4a:79:03:f7:42:
a3:d4:97:f9:ed:88:93:c2:68:d9:7f:a2:b3:27:31:6a:fc:f9:
fa:71:b7:72:32:26:6e:62:40:fa:5a:8d:ca:9e:68:8c:f7:64:
16:79:53:04:48:7d:33:bc:ec:60:03:b2:1f:8c:7c:f0:0c:32:
20:2f:5f:24:73:a5:58:26:37:0c:48:ae:68:db:44:52:53:c3:
60:3f:df:e1:29:4a:37:0b:93:ec:45:f1:5b:ec:dd:d9:f3:40:
86:1d:78:c3:fb:97:16:de:fb:3e:fe:73:fc:a9:4d:af:46:07:
e4:ed:93:f7:6e:07:58:61:6f:b2:17:1f:08:72:70:c6:07:68:
62:9a:7d:8c:6e:6d:a1:14:66:7f:3c:61:a7:be:08:20:00:ff:
e7:e5:e3:3d:0f:b4:63:df:3b:5c:cc:f9:1d:46:33:68:58:ba:
05:e7:a1:d2:35:aa:0c:25:69:a6:df:3b:7f:a8:df:55:fb:c7:
66:96:eb:f4:1e:c6:b6:de:77:cb:d3:f1:bd:6f:60:86:52:26:
33:a9:1e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:12:58 2025 by rpki-client