Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json)
Hash identifier: PGrwZ8K1BiGMcQNKo9JRml5icUPdfQCxLDRiZZiLzQI=
Subject key identifier: A9:F8:42:4C:75:EB:4A:C8:0A:E5:6D:84:07:64:B6:95:A5:AC:8A:7C
Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Certificate serial: 0198A0BB0CA6F5E8F03FF23E09BA68C101F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
Manifest number: 0AAE
Signing time: Wed 13 Aug 2025 00:01:09 +0000
Manifest this update: Wed 13 Aug 2025 00:01:09 +0000
Manifest next update: Thu 14 Aug 2025 00:01:09 +0000
Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: +heTUknL7SYuGx5N+Trrop3uEJiKmktCvT3O07qE4G4=)
2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:0c:a6:f5:e8:f0:3f:f2:3e:09:ba:68:c1:01:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481
Validity
Not Before: Aug 13 00:01:09 2025 GMT
Not After : Aug 14 00:01:09 2025 GMT
Subject: CN=a9f8424c75eb4ac80ae56d840764b695a5ac8a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:fd:c5:44:87:e4:6b:a0:b9:64:c8:c1:4a:
29:1f:62:d9:57:45:55:29:0c:25:e2:a9:f2:d8:b0:
b4:e9:f0:b7:90:65:50:23:de:17:e5:4a:cd:86:8c:
8f:27:8a:3f:09:04:5b:29:df:67:7b:56:77:7c:25:
0f:fc:fb:a6:af:78:7a:db:72:ce:34:64:eb:db:0b:
1f:e4:b4:d0:45:93:8a:42:48:3b:d6:b4:a1:34:75:
1f:2b:7c:f3:c4:77:0b:96:0f:a0:78:ac:5a:1e:83:
cd:86:ee:1e:f5:17:4d:22:c2:05:d5:c7:84:a6:ea:
20:a2:41:b8:4a:ad:aa:21:57:ae:43:8f:aa:2c:0f:
c0:32:b3:ee:4b:63:9f:e5:3a:d1:ff:58:5c:49:b5:
15:56:4a:8c:78:ba:94:e4:8e:00:a4:99:5b:3f:19:
f6:c6:9d:73:8d:5e:41:05:26:76:41:1c:63:9d:a1:
41:97:ab:71:d6:38:4e:7c:d3:c9:30:f6:f4:73:ec:
ff:3e:0d:05:61:f0:e7:5c:02:6f:bc:0b:0c:a1:7b:
de:4c:f0:b5:69:3b:1f:c7:14:4c:96:73:dd:0b:13:
28:51:c8:16:70:8f:f9:89:4b:b8:c0:69:77:8f:7d:
24:44:50:d1:ce:cb:82:6d:c2:2c:46:c0:65:b2:c2:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:42:4C:75:EB:4A:C8:0A:E5:6D:84:07:64:B6:95:A5:AC:8A:7C
X509v3 Authority Key Identifier:
keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:98:b2:04:67:fb:4d:87:06:13:55:7a:5a:f1:c3:92:89:19:
36:47:0c:0a:21:d7:a6:20:23:7d:de:a1:d3:88:1b:f6:f8:ef:
1b:f1:9d:81:1e:aa:ec:ef:15:27:0a:e6:39:ca:7d:12:8a:7a:
50:c6:8c:cc:0c:95:71:51:2f:66:e6:0a:60:7e:41:cf:13:9b:
3b:ac:de:d1:89:d9:f9:ce:c3:c7:bf:84:be:fc:c2:37:bc:26:
8d:c0:53:c0:92:45:ed:ae:64:37:8d:da:b2:91:0a:11:52:80:
20:71:73:54:06:01:42:6e:19:48:33:ab:52:a3:9f:a3:d9:ee:
5d:d7:be:98:54:86:c0:df:ac:19:a1:d1:e0:6e:17:74:96:11:
ca:1d:39:55:d3:52:a9:e6:18:ef:7d:d4:b8:96:5a:2f:c0:08:
ad:ff:33:fc:81:a8:cf:2b:3a:f8:61:50:17:8f:17:fd:41:ec:
76:cb:ac:3f:42:4e:93:c6:fd:49:ca:28:09:9f:dd:bd:37:96:
3b:1e:b5:97:37:c2:bb:1a:78:e9:97:a7:01:f1:fc:82:6d:08:
1f:a9:f6:0e:3c:48:69:db:bd:96:46:a0:e8:1b:77:c0:2e:06:
c0:b1:d0:b3:4a:87:ad:c5:5c:3d:40:ac:24:1c:f8:3c:55:d8:
7d:b7:f2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:14 2025 by rpki-client