Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier: 9xaBvSWEeacmds1kzIL4FOvsYp7pcQKpG+JWzBNrv5A=
Subject key identifier: CB:9B:A7:62:8D:1C:4F:5E:7D:6A:0F:B9:87:24:98:75:6A:6E:EE:47
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial: 0198D54E4125B6A0CD4B19DA4CB141510200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number: 15F8
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: wWUHG7TTxAghfSNz6ziW+Z8JRfpwvVGn4jCuNtMWPBo=)
2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:41:25:b6:a0:cd:4b:19:da:4c:b1:41:51:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=cb9ba7628d1c4f5e7d6a0fb9872498756a6eee47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:3c:13:1c:19:9a:5d:ab:1e:e1:ea:9e:09:
59:73:05:b3:94:23:cc:57:6e:69:ad:e9:7d:5c:5e:
a9:da:c7:d7:93:1f:87:b4:c5:97:54:aa:19:d4:44:
ec:6c:36:42:c8:b9:eb:72:14:8e:34:42:24:a5:5e:
37:d0:4b:52:e5:61:b2:89:87:a0:08:8b:e2:b3:cc:
fb:f2:dd:2e:99:e4:e6:64:d1:73:e5:dc:0d:a0:e3:
d3:e2:ae:33:8b:13:02:91:fd:52:07:38:16:fb:11:
13:2e:33:c2:db:b2:90:ac:ed:9e:7e:a9:96:81:31:
78:8d:ca:9a:75:67:22:5c:d3:24:b1:0b:9f:1b:f2:
39:e5:43:54:c0:d4:a8:9d:a0:e5:71:f4:14:d6:84:
9a:ef:c6:e9:79:bd:88:38:f8:9b:c6:dd:5e:6b:02:
49:8e:a9:50:77:1b:52:4e:2e:4f:ab:c5:2f:a3:6f:
f0:79:13:4a:a3:ba:82:49:d2:63:34:57:5f:c2:b4:
3f:4a:bf:1c:48:ba:67:21:cb:8f:0e:1b:e7:ab:24:
7c:73:59:b6:5d:dd:71:6e:8e:fa:45:ac:27:df:3b:
b1:25:57:91:49:b9:93:6b:c7:8c:e9:fb:c6:de:87:
d3:37:d7:f2:05:ac:d6:86:38:38:61:d6:69:48:07:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9B:A7:62:8D:1C:4F:5E:7D:6A:0F:B9:87:24:98:75:6A:6E:EE:47
X509v3 Authority Key Identifier:
keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b2:d3:e4:19:98:13:22:ac:6d:8c:cc:83:ed:e5:90:83:6b:
f4:ba:72:02:9e:ca:c6:b2:11:56:e0:84:50:94:79:8f:7e:4e:
cc:2c:43:cd:c9:3e:26:ed:5e:60:ea:3d:6f:66:31:59:9b:7c:
21:5b:c9:64:04:00:2d:20:5e:1f:16:32:b4:65:e1:40:8f:f7:
62:0e:81:9a:eb:be:04:bb:89:a4:ba:2b:7e:6e:fb:66:23:9a:
76:9f:8d:36:e1:a4:b7:89:b1:a5:69:85:35:32:9a:2b:1d:98:
2b:a6:bc:69:80:0f:5d:b3:2c:0e:4f:e5:c3:40:55:fa:27:19:
71:fe:70:ea:9b:b3:30:33:57:22:61:8b:1f:e9:f8:e2:cf:f7:
63:5c:4f:e8:6e:d0:e5:ff:c2:4b:30:bf:25:91:0c:a4:39:48:
eb:7d:7e:75:1f:08:92:a4:64:5b:1a:38:4e:37:c1:13:83:c3:
b1:ba:3e:e3:41:6f:01:e8:1d:1c:9e:13:d2:f3:c2:14:7d:fd:
ac:50:14:0d:dd:2f:1b:6f:55:0f:ca:98:95:e7:c1:8a:4d:6d:
15:fb:6b:e3:51:89:91:1b:f8:bc:52:18:2f:f2:0d:64:b8:66:
de:bf:a4:7c:ab:5c:f5:d2:31:6f:d3:f6:e0:6e:88:d8:10:99:
a9:07:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:40 2025 by rpki-client