Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: zidSjgjo3BL85wsKaL6VyY4h8zKMHY/BoQs/0kgpCrY=
Subject key identifier: 8C:37:8F:9F:DC:C2:9F:7F:13:82:C7:46:4D:97:ED:A5:87:0E:6F:C9
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 01987D1C924C644E0027CAA76A73A59545E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:01:21 +0000
Manifest this update: Wed 06 Aug 2025 02:01:21 +0000
Manifest next update: Thu 07 Aug 2025 02:01:21 +0000
Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: D3s8JNa3HJliI+ZSfxJqvav8lOwoZIvi2JAFwpc+Alk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:92:4c:64:4e:00:27:ca:a7:6a:73:a5:95:45:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Aug 6 02:01:21 2025 GMT
Not After : Aug 7 02:01:21 2025 GMT
Subject: CN=8c378f9fdcc29f7f1382c7464d97eda5870e6fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:22:0c:f5:f2:60:4b:df:2d:47:2c:d1:5b:
56:d0:86:1b:42:64:dd:5d:44:d7:8e:a1:f8:14:33:
38:50:ab:de:6c:6e:c7:12:6d:87:41:24:b9:42:62:
49:da:8b:22:55:23:4c:eb:7e:0b:9f:72:e9:73:48:
5b:0b:86:94:98:6d:02:ad:4b:68:5e:ed:81:78:95:
28:44:5b:2f:d5:ab:be:04:a3:60:5e:03:60:92:89:
42:4f:61:48:eb:81:65:fa:81:bd:fd:8d:e2:3c:bf:
0b:ea:fb:ce:80:34:b6:49:02:48:bd:a0:19:9e:5a:
5f:25:3f:d3:22:4e:1f:5f:99:cb:d1:27:48:07:d7:
a2:f7:c9:58:32:84:19:8d:2c:13:1c:e4:c5:42:9e:
b6:30:f1:96:b6:71:96:67:24:a9:3b:75:8e:42:32:
ac:5b:be:61:75:52:c6:6a:b0:4d:bd:0e:64:6f:e8:
bf:37:16:49:9a:89:3e:e4:7b:cb:6c:a7:01:34:3e:
b7:4e:76:20:54:30:ea:66:9c:74:fc:d0:36:4d:8f:
c4:ee:f2:c0:da:39:df:07:57:b9:d5:e3:7d:9e:9c:
11:41:b7:a3:c8:fe:d7:b6:c8:a9:04:06:0c:99:53:
cc:25:e0:56:a8:52:02:11:a4:ee:e0:db:87:c2:8e:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:8F:9F:DC:C2:9F:7F:13:82:C7:46:4D:97:ED:A5:87:0E:6F:C9
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:22:c9:94:42:35:de:c1:96:d4:a7:ea:d1:32:79:87:e4:3e:
da:4e:76:99:f6:e0:d2:34:9b:40:ac:b0:8f:da:5b:fd:49:61:
c9:99:2b:77:cb:c3:9c:e8:42:78:07:e5:82:45:c6:cf:1b:3d:
14:1c:ee:3a:d7:64:09:d1:ca:a8:0f:80:9b:d8:ce:de:f6:61:
c6:f3:c1:cf:18:d6:be:51:c7:48:a7:ef:fd:bd:54:ab:a4:8b:
f9:cd:b6:8e:9a:c7:48:d3:1d:8f:49:08:0f:ca:9f:b8:c2:f4:
ef:72:66:4d:be:f6:68:f8:0a:82:b1:b4:a8:19:01:68:fe:ea:
cd:73:4f:00:52:4e:18:13:42:0b:df:bb:7b:c5:18:18:e2:99:
50:15:89:c5:e0:b1:7c:d2:69:b5:e5:70:fd:f2:7b:71:5c:20:
a2:90:8b:25:1d:d8:a8:05:15:db:ae:1b:a1:fb:8c:6a:34:62:
ba:97:54:b3:1d:0e:dc:11:d2:74:a4:66:cf:7f:d8:02:cd:14:
e7:19:f4:88:40:0b:3c:ff:3c:62:99:e3:f8:be:d8:bf:7b:28:
95:8b:3d:eb:04:41:ac:0f:e3:a1:5c:e5:39:57:46:73:c8:c1:
0a:8d:f1:bf:af:12:6a:4f:85:b6:af:82:b4:9b:f5:d6:47:2e:
f3:93:88:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:00 2025 by rpki-client