Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: B6pe/z3gO5ORsv/SGSwvkW80Vx+LD6HDujD5jQI+0ug=
Subject key identifier: B2:D0:8F:2C:3A:55:43:59:EC:E6:2A:4D:B1:BF:D7:9D:A4:50:89:D8
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 019873E2F29F6D68AFD8037D2C194C418DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 0858
Signing time: Mon 04 Aug 2025 07:01:49 +0000
Manifest this update: Mon 04 Aug 2025 07:01:49 +0000
Manifest next update: Tue 05 Aug 2025 07:01:49 +0000
Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: D1ai2wqFrXdx//3DOtjdw4dqfpyYipcfHEn3ksTLHZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:f2:9f:6d:68:af:d8:03:7d:2c:19:4c:41:8d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Aug 4 07:01:49 2025 GMT
Not After : Aug 5 07:01:49 2025 GMT
Subject: CN=b2d08f2c3a554359ece62a4db1bfd79da45089d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:b2:c0:62:30:33:b5:dd:5c:ec:06:d3:da:
ed:7b:2f:77:67:24:a3:0c:e2:75:cb:4a:73:04:e0:
aa:e4:81:17:a3:83:c5:be:e2:44:1b:1d:0a:5c:88:
d8:0a:a2:8d:e2:92:2e:b4:fb:7f:f4:39:33:27:9b:
1c:d7:09:99:00:0f:b3:e7:53:75:1b:f8:a5:70:b0:
07:f5:c8:b3:fc:5b:e8:35:02:3c:e6:06:81:ed:27:
2e:ef:1d:e7:a9:85:ce:9b:cf:c1:18:cd:94:37:1d:
ea:b7:cf:c9:db:c8:f0:91:35:2d:90:5d:e4:c7:2f:
a5:29:b0:54:7a:04:cc:46:be:23:e8:d6:de:da:f9:
5a:c5:18:e9:05:ec:a3:05:0e:e2:ae:01:bb:18:db:
b2:01:1d:6e:80:ab:bf:49:4e:3a:5f:46:56:7e:a9:
c8:1f:d2:b2:8b:27:db:8c:b2:fb:23:54:a0:f4:08:
f8:be:a0:63:79:43:f4:ea:2e:e6:c8:d6:ad:4e:6c:
93:d5:29:4e:d6:66:fe:18:ea:92:83:fd:83:e0:d4:
39:9a:18:e0:36:19:54:7f:43:bf:66:5b:8a:6f:f9:
8d:2d:cf:98:d4:16:8c:09:1d:3e:cf:20:7a:73:f6:
61:0e:6d:2c:01:a2:c9:5f:b0:8f:68:6e:41:b0:38:
80:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D0:8F:2C:3A:55:43:59:EC:E6:2A:4D:B1:BF:D7:9D:A4:50:89:D8
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fe:d9:93:89:1b:00:cd:41:5c:b5:00:6a:90:f8:12:19:9f:
0f:41:00:5b:f0:b1:6d:78:2f:de:35:5e:cf:17:93:74:0a:77:
98:85:8b:a1:9e:33:a6:8b:d1:73:38:e0:0e:17:6f:90:b3:f1:
54:f3:c7:28:d3:f2:05:bc:77:4d:5a:22:63:cb:f6:99:62:81:
43:9f:61:30:49:80:f1:32:2b:1d:79:d6:95:12:81:e7:3b:d4:
08:07:b7:36:58:53:17:a7:7d:65:46:32:dc:92:20:f4:14:c2:
6b:82:41:91:fe:13:76:97:f8:2b:06:ce:c6:be:36:07:bd:7b:
19:19:f4:a5:4b:26:39:74:eb:88:48:fb:7e:8e:98:26:ea:60:
8f:60:6e:07:fe:f6:f8:f8:9c:df:19:cc:06:44:5b:95:7e:be:
a8:ec:15:7a:41:ff:87:2e:e2:10:46:21:56:3f:9f:13:bb:99:
8e:0b:bd:87:1f:74:26:df:f8:0e:bc:e9:6a:ec:83:d0:88:10:
ee:9f:35:87:87:2a:6c:65:b9:ec:00:b4:c6:28:cc:3d:89:ca:
ea:48:0d:e8:59:0e:be:b5:ad:25:cb:3c:35:fc:49:39:31:c6:
d5:73:ef:83:9b:70:8f:cf:76:db:80:36:f8:f4:d9:13:38:6d:
d0:9b:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:41 2025 by rpki-client