Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: poVlkL0gOdQz6rANGBov0zLrvSchFVNYGK/ckOwhDDY=
Subject key identifier: FB:0B:E9:63:19:31:16:D7:14:E1:CC:53:CE:1A:31:0B:7B:17:CE:9B
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 01976EF5043E32855E28F781F5A4CF5337B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 159F
Signing time: Sat 14 Jun 2025 15:00:40 +0000
Manifest this update: Sat 14 Jun 2025 15:00:40 +0000
Manifest next update: Sun 15 Jun 2025 15:00:40 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: osGKFCfc0lyBNumqtaY1NDeD91wCg0Sv4j6oNY1CaI8=)
3: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:04:3e:32:85:5e:28:f7:81:f5:a4:cf:53:37:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jun 14 15:00:40 2025 GMT
Not After : Jun 15 15:00:40 2025 GMT
Subject: CN=fb0be963193116d714e1cc53ce1a310b7b17ce9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:a7:45:25:5c:74:90:62:e3:27:8f:31:62:
4c:64:c6:8e:4c:75:ff:62:44:0a:af:51:a0:a6:a2:
bb:24:03:2f:e9:b0:58:79:90:0f:2b:4b:77:f5:e9:
ea:94:30:bc:52:b3:0c:88:b4:82:2a:ea:e5:55:37:
03:48:1a:12:77:c5:46:7f:4c:33:22:19:06:26:ca:
e0:23:a8:3e:4a:1c:8a:7c:c7:65:77:52:87:9d:58:
25:97:22:d3:2b:4a:89:8e:8b:0a:63:b6:4f:87:da:
88:96:89:b7:f8:d2:18:10:f6:13:a0:e1:60:4c:24:
10:f5:33:61:b4:06:ef:40:ec:ed:fe:e9:71:c3:b1:
92:0c:4a:bb:07:99:ab:f6:08:f1:a2:b9:45:6a:e9:
f7:e4:42:b7:92:c2:6b:42:2c:a6:2f:4b:9a:76:47:
76:a9:13:ea:e5:b6:02:5a:20:14:93:39:78:7b:75:
6b:2b:17:59:eb:b9:0a:dc:d2:8b:ed:2f:3d:1f:1d:
92:2f:0f:69:1c:d9:51:20:3e:6e:8a:cb:81:96:1f:
7a:85:07:bb:f0:4d:06:20:60:db:b4:f2:c7:28:0c:
1a:de:71:08:2d:ca:3e:fa:ba:2d:1f:13:a2:cc:13:
e2:4b:b7:6d:40:00:61:9e:79:86:51:df:8b:c6:ed:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:E9:63:19:31:16:D7:14:E1:CC:53:CE:1A:31:0B:7B:17:CE:9B
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:86:42:2c:30:a7:9b:18:6d:44:61:02:bb:8d:c8:16:b9:af:
10:29:b7:b8:a1:40:4f:20:29:8d:e1:54:55:7b:c9:49:ca:57:
d4:99:b5:65:a0:5d:08:f4:aa:44:fb:ef:cd:b3:0c:f4:fd:e3:
e9:b0:ad:de:4b:69:0a:3a:38:ff:a7:26:5e:ab:52:03:1a:63:
89:93:41:7f:d7:a4:80:da:26:5a:d9:5f:cf:28:ed:e4:55:6e:
07:8f:bb:8b:03:ed:59:41:41:02:82:0e:5e:5c:c7:31:ca:99:
45:ae:96:f8:5d:b4:ae:6d:1b:d2:6a:ae:2e:1c:15:7e:c5:1b:
c5:31:fa:a8:a1:c0:d9:89:69:59:0f:8a:ea:bd:26:5d:12:8b:
24:af:0a:17:32:38:e0:9a:35:3f:83:c1:87:33:50:6d:09:71:
a5:c7:08:ad:e8:03:b2:44:2a:02:cb:c8:a8:86:df:a6:bc:76:
eb:dd:6a:48:39:de:d2:8d:ad:3f:83:3e:c7:c0:c7:88:6e:1d:
86:6d:37:98:22:f6:dd:5d:6d:ca:2e:21:1b:70:06:fb:f7:ef:
58:cb:b5:8c:e7:de:7a:34:b5:57:e9:24:cc:cb:fb:59:ee:c2:
e7:cd:eb:3c:dc:ca:3a:d7:68:37:b4:71:2e:25:08:7c:1c:86:
58:44:dd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:46:49 2025 by rpki-client