Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: UBwhthYtKAA7hRljJGLpTTWJWTYrbg5TIMCMjUPt0v4=
Subject key identifier: 7C:E1:9F:38:89:70:03:6D:AC:DF:9A:0B:3F:3A:70:E6:FA:25:76:34
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 0198D4749EE08719D102DC689007E1FACA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:04:29 +0000
Manifest this update: Sat 23 Aug 2025 01:04:29 +0000
Manifest next update: Sun 24 Aug 2025 01:04:29 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: u6YUaGKkxjNZHVKNbktZ59ObVIyrk+JyGIrbw7xq56A=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:9e:e0:87:19:d1:02:dc:68:90:07:e1:fa:ca:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Aug 23 01:04:29 2025 GMT
Not After : Aug 24 01:04:29 2025 GMT
Subject: CN=7ce19f388970036dacdf9a0b3f3a70e6fa257634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7c:a2:e8:49:fb:15:ce:b0:ac:db:e9:20:5f:
f8:b4:80:21:8e:ae:94:57:94:61:e0:b8:99:91:3a:
05:98:16:02:bf:36:5d:6b:98:55:34:ad:16:99:b1:
d6:48:4c:e4:cc:77:4c:d8:96:49:18:b5:c5:2e:52:
a4:b1:41:67:14:f4:1a:ea:a6:d7:fd:8f:de:04:da:
0e:f6:e4:f3:18:3a:5d:32:0a:93:90:1e:8a:11:f0:
15:7d:df:01:6c:c1:8b:67:75:41:ce:91:35:93:4c:
cf:b3:e2:c0:95:87:4e:bb:16:53:89:f4:93:81:3c:
63:2e:f4:fb:31:ca:67:c6:d2:46:65:aa:04:4c:8b:
7f:41:d3:bd:96:34:d1:01:09:bc:e3:f4:01:37:2a:
43:81:43:21:e7:6b:f3:0b:63:8b:74:57:78:37:8c:
08:73:0b:8d:2f:21:4a:75:22:85:e1:ac:3d:80:ad:
b7:24:5b:3e:3d:b5:7b:e2:c0:d8:1a:65:e2:55:69:
18:c3:47:4d:58:6c:f3:cb:1d:ec:0f:01:c1:cc:f8:
2e:56:d4:63:dd:b0:2c:f5:b3:ca:f9:48:8a:7b:3a:
06:30:7e:a7:a4:2f:f0:66:15:cc:17:c8:7c:38:83:
92:93:71:77:35:02:36:50:b4:35:09:69:6e:9b:ef:
55:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:9F:38:89:70:03:6D:AC:DF:9A:0B:3F:3A:70:E6:FA:25:76:34
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ec:9d:8d:72:e2:dd:ee:6c:33:56:ed:2f:95:56:d0:73:32:
0f:22:51:ee:51:01:d2:ca:86:7f:9d:da:f9:2b:2c:0c:7c:aa:
3f:2c:15:3f:41:d4:90:19:c5:b1:64:16:09:34:db:5d:e1:15:
29:7f:93:90:e6:a4:9d:36:8f:67:62:69:b1:cd:24:ef:b9:ec:
1b:8f:85:64:3f:a2:64:8b:30:18:ac:25:ec:57:7d:3f:12:05:
a0:b5:ca:75:85:3d:a2:27:ad:cf:de:bc:4f:ee:dc:e6:bd:8d:
32:03:8a:de:8c:12:09:9b:73:61:61:63:eb:89:7c:1d:b0:ef:
fc:ef:46:cc:a8:da:6c:37:89:3c:c6:ae:19:5a:d8:bd:bb:48:
83:9f:e5:77:fb:3d:bc:d1:7b:3a:8d:74:50:63:78:ad:88:61:
6d:ba:9e:be:69:3f:2c:1b:5d:8d:dd:45:ed:39:78:9d:da:9a:
6d:71:a8:89:25:63:5f:3a:38:1f:72:fc:e6:ec:4e:c3:f9:09:
3a:a4:2e:40:36:bb:33:c8:f9:d4:43:30:b1:56:5a:0b:97:db:
68:04:3d:cd:d4:18:9f:80:62:6c:90:c6:f6:6a:13:36:8b:69:
19:bf:e7:a5:78:36:96:f6:4d:27:ab:a4:ac:cb:2c:76:2d:29:
60:d4:bd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:56 2025 by rpki-client