Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: phv3nlZg5kbGm6urgcn54/DO16p/amNzr5Y5GtD2l5M=
Subject key identifier: FD:5D:F5:E3:03:87:94:B8:70:34:1A:28:00:D0:C1:02:27:1B:CC:EE
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 01987FE66ABCD7C10ABFE831D5A92A95477B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: 0158
Signing time: Wed 06 Aug 2025 15:01:03 +0000
Manifest this update: Wed 06 Aug 2025 15:01:03 +0000
Manifest next update: Thu 07 Aug 2025 15:01:03 +0000
Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: BOsCW7rlktIPxyn6azOfkfdTeXKIQ+TBCa1lIa92TAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:6a:bc:d7:c1:0a:bf:e8:31:d5:a9:2a:95:47:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Aug 6 15:01:03 2025 GMT
Not After : Aug 7 15:01:03 2025 GMT
Subject: CN=fd5df5e3038794b870341a2800d0c102271bccee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:86:ea:27:83:01:5b:b9:af:8d:25:5a:48:
ae:4d:a0:3f:1b:e5:2f:18:38:90:28:2c:73:b5:e2:
fa:2a:90:f8:f4:5d:e4:d0:05:3f:c8:73:6c:63:97:
75:07:a6:47:db:e4:02:d8:52:d6:b8:7d:4c:d2:87:
b6:fe:ab:86:6a:eb:3d:78:94:f6:bc:28:bd:24:29:
db:29:49:27:42:f4:cf:18:ae:4e:4e:48:61:c6:68:
b3:62:7e:9c:b8:9d:7a:75:07:f0:b4:f5:86:ed:59:
5b:24:35:30:bf:a0:cf:7e:fd:61:19:d4:d1:9c:03:
59:e1:f3:f1:68:53:0c:6b:e2:76:21:0e:e6:de:e0:
fb:11:fb:b3:d2:cb:d6:86:ce:02:90:d1:f2:09:5a:
de:af:53:f8:79:94:ae:61:18:ae:c4:d0:aa:99:74:
b7:15:9d:a6:76:66:65:77:60:cb:d3:96:db:b6:7a:
a6:5d:64:95:12:49:5d:29:1f:61:5f:a1:b1:ae:e2:
3d:92:2d:6f:90:ec:25:58:39:f4:4b:e1:fe:3d:1c:
51:c2:40:84:d7:0b:ed:5a:03:cc:1a:0f:7c:e5:41:
1a:10:b2:05:33:d3:b9:70:9d:9b:fb:0e:c3:5a:d1:
5a:44:2f:19:fa:49:4b:84:92:55:61:5b:d3:a0:52:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5D:F5:E3:03:87:94:B8:70:34:1A:28:00:D0:C1:02:27:1B:CC:EE
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:13:83:be:f3:93:53:b3:21:a2:5a:1c:3d:ee:05:10:49:b9:
bb:94:7d:16:ad:aa:af:b9:73:4b:f7:8e:f5:33:39:ab:c0:27:
bd:96:0d:7a:4a:17:da:4f:f1:37:05:ee:66:68:3b:c9:e1:fe:
bd:68:31:04:c0:3b:d4:8c:27:8f:43:55:bc:f5:78:22:41:59:
4a:c3:29:b7:39:e0:9a:38:2f:4b:63:a4:87:b4:11:8a:9d:64:
bb:9a:9b:73:ac:48:7c:b4:d4:cb:2c:20:52:ca:c2:a2:2d:62:
b4:95:46:a0:72:ca:08:2e:1d:5a:84:44:29:16:91:17:ef:8a:
b9:3b:bc:07:dc:e0:71:74:91:6a:29:74:5b:6b:93:f8:f7:ef:
a2:19:29:79:c3:4d:0d:16:76:76:79:b4:73:a1:1c:fa:e3:e6:
f1:0c:1a:f8:c8:2d:0b:c1:71:f3:18:6b:f7:d6:c4:fe:7a:3a:
26:1f:b9:2c:1e:50:93:f2:ff:52:2f:68:06:8b:ba:42:7e:40:
aa:47:fc:81:9a:d1:06:f3:aa:d9:6d:f6:ad:96:5c:d0:f5:2e:
17:3c:40:7d:cc:e5:ca:b0:f4:21:54:78:77:f7:52:0f:ba:03:
86:8a:c9:26:57:d8:88:55:d2:62:7b:e9:51:25:eb:c7:6d:99:
e3:6c:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:26:27 2025 by rpki-client