Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json)
Hash identifier: 2PK98qjjFrU0UhpENvcNd3D6mnO4+GTQGUaUE/iNY8c=
Subject key identifier: AC:E8:F2:67:FD:5F:01:4F:34:5D:1F:E2:18:89:D7:2D:3A:AE:8B:97
Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Certificate serial: 0198952509BCD881212293B6C1A844C68C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 18:01:29 +0000
Manifest this update: Sun 10 Aug 2025 18:01:29 +0000
Manifest next update: Mon 11 Aug 2025 18:01:29 +0000
Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: BA8M0ZRUjB+VPP5SZ2/c3W3W9PxpUBNUJpZE17qeRrk=)
2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=)
3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:09:bc:d8:81:21:22:93:b6:c1:a8:44:c6:8c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf
Validity
Not Before: Aug 10 18:01:29 2025 GMT
Not After : Aug 11 18:01:29 2025 GMT
Subject: CN=ace8f267fd5f014f345d1fe21889d72d3aae8b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:12:52:eb:ef:b8:61:a4:ba:dd:c0:2d:c4:47:
5c:46:82:fc:72:f1:9d:ce:e3:55:78:41:a8:bb:1c:
12:49:28:a2:e0:bd:4e:6b:1e:46:4b:c5:98:d5:3c:
e5:6e:44:b2:6d:12:95:dd:e0:5a:49:4a:6e:7a:16:
be:58:49:b3:3a:af:60:b0:d0:d1:ed:e6:2d:ca:16:
7f:a4:ab:35:ab:a5:e9:f1:61:f9:92:a8:73:4b:1d:
05:b9:2d:94:86:a8:d2:dc:87:e5:8b:20:b3:47:9d:
ad:c3:7b:30:ca:7f:62:ff:86:f3:0f:3a:f0:bb:d5:
06:95:cc:56:49:e0:76:c0:5b:85:31:eb:85:84:76:
db:fe:91:30:78:ec:31:8f:2a:60:99:85:16:4d:b7:
d0:66:5a:06:d2:49:19:66:a5:b6:0f:ef:00:d8:fe:
83:1e:e2:23:4f:57:cf:f7:5f:32:ab:97:dd:a2:a1:
76:b1:c3:60:23:1e:34:4f:16:22:89:8a:49:b7:57:
f9:fc:41:69:c8:2a:2f:9e:cb:76:5a:41:e4:5b:8e:
34:d3:5c:c2:1f:31:3e:a5:42:fa:44:d4:e5:62:70:
87:dd:f1:ac:9c:cb:3e:34:8d:f0:06:ca:d9:3b:09:
28:46:73:21:9e:a4:de:21:ec:f8:07:12:c7:1e:3f:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E8:F2:67:FD:5F:01:4F:34:5D:1F:E2:18:89:D7:2D:3A:AE:8B:97
X509v3 Authority Key Identifier:
keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6f:12:9f:52:02:60:81:88:e9:22:9d:28:ac:23:33:a8:bd:
7e:e8:eb:07:4c:94:b4:d0:93:96:16:0e:cc:56:4b:66:2c:c4:
9b:f7:24:e8:e5:f3:59:84:3c:c6:7a:f0:b1:d8:b3:dc:06:40:
ad:f5:f0:58:78:25:a3:c7:b1:1b:a8:94:ef:39:dc:31:bc:dc:
20:28:6a:b3:25:c4:9d:4e:24:6b:9a:aa:b7:00:1c:80:dc:36:
c0:e1:bf:a1:59:a5:a8:f4:2e:f3:8b:06:3d:71:a8:61:d9:9f:
6d:ba:32:b5:30:8a:9a:5a:88:03:b7:f1:db:36:3a:e4:ba:37:
81:b7:10:14:8e:96:80:90:ac:83:2c:8c:31:33:be:87:73:38:
bc:16:e5:e1:7b:ef:10:9f:58:03:f9:1c:30:88:63:a1:58:c3:
51:0b:59:97:78:80:54:6b:70:ce:68:fa:98:1b:fe:53:83:ee:
53:99:69:77:86:d2:4c:52:0f:5f:86:39:57:65:3b:b2:66:ea:
7e:c0:8a:11:f9:da:3f:39:84:95:a8:2b:cd:1d:a3:a5:fc:3f:
2b:88:ef:ed:53:79:9a:42:4b:2f:5b:37:3b:d9:22:bd:b7:bd:
e4:dc:74:b7:79:82:d4:2a:a5:df:95:51:e0:51:9d:a4:6b:40:
fe:26:20:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:52 2025 by rpki-client