Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: +lF4YDON4SuVBf/bqRsKgLujUZZhAUXP7XOzf981640=
Subject key identifier: 15:2F:E1:6C:D7:A4:73:B1:EE:95:2A:F1:7E:D6:AD:30:41:5E:BD:E2
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019872984F24672B8DB975E6F58817D62A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0824
Signing time: Mon 04 Aug 2025 01:00:41 +0000
Manifest this update: Mon 04 Aug 2025 01:00:41 +0000
Manifest next update: Tue 05 Aug 2025 01:00:41 +0000
Files and hashes: 1: CrZg-KF8Q9A22OHJJHctF4UJ8vA.roa (hash: TgN9LzFg5B6mAl/H8RLYxQOgYmdpxQcOV4fT/DnUDn0=)
2: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: nPKf2/RC1OjJdIowzDFtsqbsx9L/j29vbFhc6svlqIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:4f:24:67:2b:8d:b9:75:e6:f5:88:17:d6:2a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Aug 4 01:00:41 2025 GMT
Not After : Aug 5 01:00:41 2025 GMT
Subject: CN=152fe16cd7a473b1ee952af17ed6ad30415ebde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:00:0d:87:95:3a:78:c5:65:ac:ef:f0:e6:b9:
df:6e:f4:f7:29:cb:c7:a8:f4:ff:ba:81:59:5c:40:
30:5d:94:0d:5b:fc:83:9f:b5:d8:7a:18:9d:b7:0c:
83:25:9e:c2:b5:f6:1d:49:35:7e:f0:b1:22:fd:83:
10:69:fb:15:f0:32:52:7b:0b:70:f6:d7:e1:5e:20:
8b:5c:1c:74:79:7f:4e:b5:42:e8:1a:c7:3e:12:a0:
79:c6:95:b2:88:5d:fa:7d:f2:4c:4f:46:66:5d:e0:
b7:3f:de:ce:cc:dd:5f:a4:e5:02:4c:24:be:bb:7c:
c8:c9:35:35:08:04:7c:c8:1e:57:58:f3:b0:a4:2b:
ff:b3:2e:d4:93:95:51:74:d5:ba:84:61:2e:76:f3:
d7:af:1a:42:ff:91:62:7a:c7:90:37:60:0b:b9:1e:
b5:d2:79:0f:d3:81:75:77:59:a7:16:73:95:cb:77:
2a:35:4f:04:df:bc:22:a3:4b:5d:b0:03:28:3d:1f:
0e:ea:6c:71:a6:55:97:af:60:ba:21:2f:ab:b2:36:
80:e8:be:00:c0:fb:82:68:db:b6:6c:ed:8f:7d:90:
74:70:7c:d1:83:96:37:e0:cd:f1:cb:72:27:2d:91:
d0:f7:b2:d1:17:d8:6d:28:c4:ed:21:e6:91:b8:d3:
70:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:E1:6C:D7:A4:73:B1:EE:95:2A:F1:7E:D6:AD:30:41:5E:BD:E2
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1b:5c:20:5c:44:52:a1:f9:96:d5:31:8a:cc:c7:51:14:29:
ce:bd:84:92:0a:e2:5c:b0:c7:a5:e3:45:a6:b4:38:63:8b:58:
4a:8b:17:81:c7:3f:79:85:1d:93:a2:3f:bc:67:2e:f9:da:65:
71:a0:1b:e3:51:ba:e0:09:e7:90:eb:48:44:37:36:fc:18:6e:
d7:7b:cc:f7:0f:12:fe:8e:33:25:9e:35:d5:8d:ec:b7:3e:fd:
08:65:d9:85:22:26:30:eb:2f:79:de:f5:c1:79:23:5d:3b:03:
47:7d:56:55:80:dc:35:b7:d6:93:fa:82:74:37:c3:cf:6f:2c:
0b:6c:66:d3:6d:09:58:37:d8:f0:e3:5d:f7:2b:ff:f9:20:1d:
af:1c:3a:1d:39:af:16:a5:c2:1c:d4:01:ae:1f:b1:72:8f:2b:
ba:84:0b:72:3b:8e:a9:8e:76:05:58:6a:ce:04:36:ba:52:97:
a4:c0:ee:59:93:1a:21:80:d2:f0:dc:16:b0:f1:d2:d0:07:32:
cb:e8:e8:9e:9e:a9:88:3e:f2:0c:73:f4:f8:f9:17:cc:f5:17:
30:c2:3f:b2:c1:05:b8:e5:82:3d:fd:8a:b2:15:d4:23:cc:0f:
a0:89:cd:69:3e:37:fa:48:3f:a8:e8:7d:47:86:cc:af:1e:7c:
b9:d5:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:01 2025 by rpki-client