Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
File: WqKpJUebz8vBloipUqJDAfTnaDk.mft (raw, json)
Hash identifier: Dn5dV/WxTyeZHjkGK1DZNqDRu9Zjd1Q3IpTV1jGE9lI=
Subject key identifier: D7:27:72:81:41:46:A1:D7:1C:01:49:AD:C3:1D:E2:5B:0E:FE:C9:9E
Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Certificate serial: 0198733D646A3C1A373AF145B96C714CFA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
Manifest number: 076E
Signing time: Mon 04 Aug 2025 04:00:59 +0000
Manifest this update: Mon 04 Aug 2025 04:00:59 +0000
Manifest next update: Tue 05 Aug 2025 04:00:59 +0000
Files and hashes: 1: WqKpJUebz8vBloipUqJDAfTnaDk.crl (hash: nh69KGhImFWPLJRHgF5uFGtz/+BetA4Yzcd4NNc6+GU=)
2: jYQY-U25B3NSBy3Axt-DvgoJjdQ.roa (hash: zP4WnXpWxsW1++MaE9e5/n5ALBQb36qRJjvWEAaaUiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:64:6a:3c:1a:37:3a:f1:45:b9:6c:71:4c:fa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839
Validity
Not Before: Aug 4 04:00:59 2025 GMT
Not After : Aug 5 04:00:59 2025 GMT
Subject: CN=d72772814146a1d71c0149adc31de25b0efec99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:58:87:0b:bb:fb:30:c1:fb:e8:3f:30:3b:
a0:f5:a2:ac:75:80:14:5e:ed:6d:f6:6e:cb:8e:e5:
66:56:5f:38:1b:ac:f8:84:34:90:81:fa:c4:a3:bb:
25:2c:fd:1b:1e:83:a8:f9:65:2e:e6:4f:66:de:80:
b7:ec:68:f2:ad:0b:8e:70:d7:ca:35:2f:f8:8d:93:
b9:19:31:ec:db:0d:47:aa:80:8c:de:c0:e7:27:d6:
a0:f7:fe:6d:34:2e:0b:58:86:e9:17:32:b5:6b:f2:
de:26:63:c4:af:58:80:fd:ba:fd:24:e1:a5:4d:33:
73:ea:b6:fc:aa:ed:22:c4:4a:02:40:9c:55:23:98:
34:98:02:7e:a6:ee:17:91:03:e9:48:fd:53:6a:70:
b2:1d:af:69:c7:ca:db:96:44:72:de:ba:ed:e9:4f:
59:12:cf:bb:bb:8a:f2:af:70:3e:7e:79:dd:0e:02:
f8:08:ed:34:87:28:52:d0:0e:e8:8a:a3:ca:2a:57:
aa:af:69:4a:bd:6c:41:f3:46:be:d4:55:86:10:f0:
2e:cb:7a:5c:bf:96:d6:27:b4:fc:69:89:c2:12:c4:
3a:5d:33:d4:b9:22:8e:ae:94:d9:e4:4e:3c:fc:ff:
f0:5b:20:e5:0c:29:06:16:ce:7a:04:36:df:17:86:
10:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:27:72:81:41:46:A1:D7:1C:01:49:AD:C3:1D:E2:5B:0E:FE:C9:9E
X509v3 Authority Key Identifier:
keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:76:c7:b3:a2:f5:eb:11:9c:54:b0:de:12:5b:4e:2a:fa:cc:
1e:c5:1f:e4:eb:a9:dc:29:13:bd:7f:1c:35:67:25:ca:f2:ea:
91:02:aa:e0:db:24:2f:8c:6e:3f:f6:9d:f0:cf:96:53:a2:57:
21:59:1d:5c:f5:7c:9b:64:62:5d:00:69:0c:b2:29:1e:06:11:
c4:93:3a:26:f2:fd:f6:a0:78:32:1b:24:89:0a:e9:96:23:5a:
56:b2:02:36:c2:e1:cd:b5:b1:2e:aa:bf:bd:f3:56:2a:ef:57:
93:e6:9f:9f:7d:48:3b:58:8f:4d:a9:8f:53:29:d8:24:d7:d7:
69:1b:bc:1a:32:10:83:51:e8:e2:4f:08:44:92:89:f8:22:5e:
97:50:f7:07:08:bf:a1:09:a3:4d:0d:0a:4d:4b:82:2a:78:53:
1d:5d:58:bc:91:bc:8b:35:3d:ec:ef:fc:b8:56:f4:a6:dd:da:
32:05:f7:21:9f:28:6b:28:5b:51:26:f9:13:d0:7d:f6:75:88:
6d:d1:0f:9d:80:e3:85:29:65:03:1a:2a:3d:24:cb:33:1b:9a:
53:21:9e:71:a0:a5:67:64:7f:ea:4c:a5:fa:9d:bd:5b:04:2b:
97:13:73:c6:ce:cb:d7:92:fe:be:e0:d9:24:cc:0a:c4:1a:40:
ee:5b:d3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:23 2025 by rpki-client