Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
File: WArULGTE9V_s54skJwcf5mhMIMk.mft (raw, json)
Hash identifier: pF0fqanqtMuAKoYa+WiwLxRNxDsxvblOZQmvpB2aTdo=
Subject key identifier: B4:35:3E:67:9E:B3:74:D5:C5:5B:63:47:79:D8:12:BD:0A:6B:0E:DD
Authority key identifier: 58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
Certificate issuer: /CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Certificate serial: 019873E21FE837E408E4D618654F340DA95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:00:55 +0000
Manifest this update: Mon 04 Aug 2025 07:00:55 +0000
Manifest next update: Tue 05 Aug 2025 07:00:55 +0000
Files and hashes: 1: WArULGTE9V_s54skJwcf5mhMIMk.crl (hash: 2PTIwZjYhMqROmvbLQMUH3IBN3k/ufyq0TpPefiog+0=)
2: oz4j6XAA3JSDTaFAUqvMD6Q_gKU.roa (hash: alaiQ7nYgvlQJD63x0493TKwZeIQqdX8mBDJEuCO9ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:1f:e8:37:e4:08:e4:d6:18:65:4f:34:0d:a9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580ad42c64c4f55fece78b2427071fe6684c20c9
Validity
Not Before: Aug 4 07:00:55 2025 GMT
Not After : Aug 5 07:00:55 2025 GMT
Subject: CN=b4353e679eb374d5c55b634779d812bd0a6b0edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d0:55:b9:22:7b:2d:ff:d4:40:57:e4:71:ac:
71:b9:1b:f0:15:08:c6:88:11:c8:ed:62:0b:80:c0:
d2:7a:f8:26:e0:9a:a2:74:2a:ba:85:d4:5e:73:38:
3c:bf:0c:8e:14:80:0a:90:70:37:2b:d5:2d:d4:5d:
bc:ad:0e:ea:df:78:75:55:7a:b9:0a:c8:5e:e7:3d:
ab:71:26:c8:a7:13:2a:7f:6e:cd:45:91:52:a2:1f:
b3:d3:11:67:12:11:6a:43:24:fa:dc:0c:d1:ce:1a:
c6:22:87:f9:0d:4c:8f:cc:fb:78:28:08:bf:2a:6a:
fe:20:e9:c1:08:88:09:65:87:c7:e1:41:78:fe:0c:
fe:85:bc:f1:4c:c5:bb:21:33:8a:9e:5e:44:8c:e4:
09:23:97:d0:88:a5:45:2f:6b:8f:ae:9d:2e:e4:45:
fb:4c:b0:ac:ea:1f:63:66:5b:fb:ff:66:85:70:ef:
a2:50:b6:7e:3f:56:ad:94:73:6e:41:76:80:d1:13:
29:a2:20:a1:55:ee:a4:4a:bb:0e:2d:ac:13:62:f0:
7c:f4:cb:7f:27:4c:df:b5:31:61:2b:64:8f:19:0b:
2b:7e:8b:a6:4a:47:cd:6f:c6:5c:98:18:ad:bd:8a:
bc:14:7c:4a:d0:cd:c9:a7:06:b4:78:03:38:0b:3f:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:3E:67:9E:B3:74:D5:C5:5B:63:47:79:D8:12:BD:0A:6B:0E:DD
X509v3 Authority Key Identifier:
keyid:58:0A:D4:2C:64:C4:F5:5F:EC:E7:8B:24:27:07:1F:E6:68:4C:20:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WArULGTE9V_s54skJwcf5mhMIMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/8cb34d-94e7-4e57-98b1-7369a4257014/1/WArULGTE9V_s54skJwcf5mhMIMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:1c:ab:21:4e:4e:4d:36:3f:7a:a8:6f:28:85:a2:68:22:68:
d5:e9:70:49:ff:16:09:b0:36:02:58:f9:13:9e:28:03:49:9a:
7f:a4:08:20:05:54:7c:6a:16:14:c3:c1:10:2d:b0:b7:01:78:
9d:e0:82:77:24:04:64:8a:6b:81:8a:71:f8:a9:71:28:47:1d:
0c:ae:ea:3b:44:1d:08:88:5e:cd:02:20:6b:fd:e9:50:14:83:
e3:0c:12:1f:90:84:df:f0:d4:3a:38:07:89:66:f5:fc:c5:3a:
1c:b9:87:96:de:6d:80:e4:64:13:c7:d6:9c:9c:e4:82:e2:da:
40:be:6b:de:2e:16:0c:d3:8d:ed:23:43:1d:c8:a7:a1:b4:c2:
e7:d1:e6:37:46:9d:e1:c3:e7:d4:66:75:19:7c:65:6b:76:23:
b3:08:a5:df:51:e1:02:75:b0:58:db:21:f3:7b:82:73:b7:34:
19:cb:12:c5:c1:48:1e:74:b2:eb:03:b2:55:b3:49:6f:17:a1:
6b:55:52:1f:e7:29:6d:94:dd:2b:67:48:ae:48:9f:11:7b:59:
30:ed:5f:82:59:13:5d:1d:a3:57:da:26:5c:11:72:3f:99:7b:
99:17:b1:b7:cf:b6:06:67:8a:55:8d:f8:b4:23:3b:db:db:0a:
20:18:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:11 2025 by rpki-client