Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier: 3ppEcE3G+HCSBe+dmrhgUWd7PRj7usxRYrCiO+4FUUA=
Subject key identifier: CD:58:D1:6C:A7:76:D5:6F:23:F4:5C:84:58:07:A4:FF:DC:65:9F:38
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial: 01987298A2AA9C70F450BCAC603C40DADEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number: 110E
Signing time: Mon 04 Aug 2025 01:01:02 +0000
Manifest this update: Mon 04 Aug 2025 01:01:02 +0000
Manifest next update: Tue 05 Aug 2025 01:01:02 +0000
Files and hashes: 1: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: KONrK0elRUmtrctOP6+92Kz9aTf/DaJYPM4cybindbw=)
2: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (hash: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:a2:aa:9c:70:f4:50:bc:ac:60:3c:40:da:de:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Validity
Not Before: Aug 4 01:01:02 2025 GMT
Not After : Aug 5 01:01:02 2025 GMT
Subject: CN=cd58d16ca776d56f23f45c845807a4ffdc659f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:26:55:b5:29:45:48:7c:54:f6:38:52:a6:
24:99:bd:97:05:25:0e:e8:dd:a5:dd:e9:68:4f:91:
62:56:60:da:c8:51:ae:54:9d:db:ba:12:1f:55:5a:
68:a5:b9:1f:0f:47:35:92:42:f6:0a:f7:04:f0:45:
0b:ea:28:cc:55:f0:f8:31:fd:2a:57:9b:9a:f0:1e:
67:db:ff:78:5f:49:35:19:00:38:94:15:e3:b5:d8:
17:f0:e2:be:a7:3c:eb:41:74:ca:ab:db:3b:1b:13:
4c:e3:bb:94:7a:29:c8:8d:d1:8b:38:de:15:d3:77:
18:17:e0:72:7e:f0:38:20:b7:45:e5:9b:8b:4a:e3:
55:c2:29:a1:4b:8e:9e:58:79:fb:8f:25:af:e5:21:
24:91:43:7f:5c:ea:e0:95:55:4b:b8:d4:f1:2d:de:
88:c3:40:13:1a:8f:8c:1f:3f:e5:96:0c:77:6c:d2:
38:d6:8b:d0:61:6b:11:3d:cf:a0:1b:aa:9f:17:68:
bb:41:1d:07:9c:17:6a:a9:7e:fb:65:eb:c5:c3:03:
35:e9:83:81:a8:30:d0:bf:83:a0:d6:26:9a:45:c3:
b2:09:d2:5a:ed:8b:af:fa:2f:3a:10:0b:0b:97:bf:
cd:c8:fa:9d:38:1a:f3:bd:33:a2:ac:8e:8f:9b:dd:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:D1:6C:A7:76:D5:6F:23:F4:5C:84:58:07:A4:FF:DC:65:9F:38
X509v3 Authority Key Identifier:
keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:80:15:47:51:ac:3a:f2:0d:13:f8:fa:d8:81:99:41:1d:57:
10:d3:91:a9:fb:6c:a2:5b:cc:e0:4a:f0:be:2e:3a:7e:f2:9b:
cc:bd:15:a0:2d:3a:3d:c8:9e:97:14:4d:19:3e:ce:bc:aa:f4:
d7:a6:f0:62:e0:d6:41:1d:d4:e2:c2:cd:5f:e7:8e:4a:ec:22:
61:d8:41:ac:94:d4:2f:6d:74:0c:ea:8e:6a:71:98:30:8a:8d:
1b:52:5b:8f:1a:b0:0c:2b:e8:bc:fd:67:f4:41:a6:c7:1f:d9:
a5:fc:42:3a:a0:9b:16:a3:1a:b2:da:6c:bd:f4:08:a5:e5:0a:
11:07:ba:bc:1d:d8:e1:77:0a:c0:d2:f5:51:ea:92:b6:81:23:
0f:14:a9:d9:4c:39:87:72:56:65:2d:08:31:f3:76:75:eb:68:
4a:fd:4c:dc:0a:5b:e4:b7:39:14:4f:11:2f:fe:c7:a0:0c:8d:
03:ff:10:02:5e:59:37:02:4a:13:41:b3:0d:12:10:b6:9c:7e:
17:8a:d7:0c:5f:c5:3a:68:d3:62:f4:05:b2:69:70:91:75:61:
b2:3c:60:6c:68:56:e9:9c:77:77:ad:cc:53:25:c0:7f:4d:23:
25:5d:2e:fc:de:3d:3b:e9:a9:53:a0:1d:03:af:31:66:22:97:
56:22:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:28 2025 by rpki-client