Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: J//vahylAA3acFvcPyUU1f2Slv1REX6Tv/zi5IO2cKo=
Subject key identifier: 4A:20:A3:D8:3A:CC:D2:B9:17:96:49:79:9E:A9:18:52:60:C9:82:52
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 019873E230414CBA1F91E64E4548D518797A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 1626
Signing time: Mon 04 Aug 2025 07:00:59 +0000
Manifest this update: Mon 04 Aug 2025 07:00:59 +0000
Manifest next update: Tue 05 Aug 2025 07:00:59 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: XPffWJkhojYt6zwynpa4aPkFDUBE6lskIdfym6lO6Ko=)
3: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:30:41:4c:ba:1f:91:e6:4e:45:48:d5:18:79:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Aug 4 07:00:59 2025 GMT
Not After : Aug 5 07:00:59 2025 GMT
Subject: CN=4a20a3d83accd2b9179649799ea9185260c98252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cc:e1:63:f4:77:01:ef:42:58:63:dc:60:f6:
c6:e7:f0:6f:b7:e0:74:6d:6d:7f:2e:a1:f0:2f:1f:
61:bf:3c:75:53:04:dd:22:26:99:8a:78:00:93:4f:
78:00:9f:d3:ec:82:90:de:a8:5e:ae:24:c6:c3:23:
6b:ff:2d:70:a3:71:e0:6a:99:75:27:74:ec:d5:41:
6f:ad:ff:b5:9c:c1:9e:c4:22:12:20:05:5a:5b:1e:
d7:14:16:61:58:f4:9d:b2:13:d7:70:df:55:25:0d:
05:00:17:49:5e:8a:fd:f1:c5:ff:97:82:d3:eb:f9:
75:5f:50:a7:1a:1e:dd:a1:9e:ae:70:46:64:1b:93:
c6:a9:09:62:af:be:ee:78:df:7a:17:b7:c0:a9:be:
2b:48:4a:67:87:c7:82:c4:47:24:a3:35:ad:db:94:
51:d6:83:e1:db:74:9c:95:90:cc:d2:32:d8:2b:ba:
6a:31:1b:89:08:5c:24:13:69:17:f1:35:80:ce:9b:
18:74:12:df:25:f0:f3:80:c7:c5:1c:74:4f:b2:fb:
20:8a:a5:e3:ab:df:6a:81:2e:76:70:57:89:95:e3:
cd:91:82:bc:e2:38:03:c1:e1:7b:1c:98:34:11:39:
69:a5:0a:e4:ad:b9:ef:83:a5:e9:29:2b:d1:60:e3:
52:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:A3:D8:3A:CC:D2:B9:17:96:49:79:9E:A9:18:52:60:C9:82:52
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8f:80:67:5a:fd:c3:9c:f4:41:69:05:a2:9f:f3:31:6e:60:
14:30:93:29:00:4e:7d:eb:5e:d2:5d:80:88:84:99:ed:ab:8e:
b9:b7:b9:6f:a3:38:31:f6:fa:89:9c:a3:eb:60:91:b9:9f:f8:
cb:97:19:da:85:ef:b1:1e:e2:85:c5:3d:43:71:c8:10:2b:48:
8c:52:24:9c:b2:09:01:32:d3:67:9a:ae:56:ea:18:74:95:a5:
b1:a2:8e:65:82:b4:52:e9:73:57:ad:27:df:92:fa:4a:d6:7f:
ef:05:96:2e:50:97:23:25:2d:cc:d3:b6:34:de:f7:82:26:e5:
69:6a:63:0e:de:1c:3f:4e:e8:20:bc:e8:e5:55:60:8a:b3:04:
d8:61:82:15:f0:85:d7:7b:27:6b:61:3c:cd:4e:90:3a:2f:00:
33:8b:4f:0b:4b:84:37:11:aa:9c:a8:e8:55:27:35:3b:b5:22:
ee:51:c4:b1:2b:33:37:37:e7:f0:ec:ad:e8:82:33:46:45:83:
81:af:a2:27:92:b9:00:b7:6e:43:15:d8:5d:a7:9c:75:1d:7b:
0f:a4:d1:ce:83:6c:cc:9a:96:55:cf:e7:ab:26:98:f6:11:13:
db:6e:7e:2d:bf:3f:a2:94:cd:5a:af:41:a5:bc:15:67:66:31:
3f:7e:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:08:07 2025 by rpki-client