Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json)
Hash identifier: NdUTVN42f/GdS3jdJDVKCyHDBmeYDsjTZXhVO7oiMYQ=
Subject key identifier: 56:E1:59:97:3D:6E:5B:EA:73:06:EA:59:2D:40:1E:01:EE:2C:A0:0F
Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Certificate serial: 0198D6606D0FDA963D36D72F682878870988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
Manifest number: 02E3
Signing time: Sat 23 Aug 2025 10:01:40 +0000
Manifest this update: Sat 23 Aug 2025 10:01:40 +0000
Manifest next update: Sun 24 Aug 2025 10:01:40 +0000
Files and hashes: 1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=)
2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: GVHmYhv/UZCA4jItrNvGrR7rmaH3nb9/Vo34wfZiy1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:6d:0f:da:96:3d:36:d7:2f:68:28:78:87:09:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed
Validity
Not Before: Aug 23 10:01:40 2025 GMT
Not After : Aug 24 10:01:40 2025 GMT
Subject: CN=56e159973d6e5bea7306ea592d401e01ee2ca00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:e5:97:26:82:a4:36:98:13:07:08:36:49:
47:d3:31:ef:33:68:ef:d2:5c:cd:e1:65:a0:18:b3:
dd:ca:cc:80:b4:9d:41:67:f7:a4:c4:ec:ae:d7:93:
02:b6:2d:55:79:89:52:ab:cb:79:ec:4e:2f:d5:f1:
04:f4:96:1f:a8:73:11:bb:4b:d8:cb:8d:5a:d3:2b:
8a:89:5c:8c:99:8c:ee:21:61:bf:6f:a2:20:28:35:
ac:5e:7a:97:1e:20:80:7d:1e:ec:31:a0:e0:9d:24:
ed:37:de:77:e8:6f:3c:1c:ce:2d:94:7b:83:99:7e:
b6:5a:e0:ed:1a:0c:8c:9d:51:dd:4f:9f:63:bd:04:
b4:8b:1f:13:33:70:37:53:a2:ff:20:f2:e5:34:55:
ed:0c:8e:2f:fb:6b:f5:d7:69:06:fe:cd:2d:06:e3:
92:87:65:b3:f8:09:c1:2b:9f:21:da:55:17:02:f1:
8b:90:17:55:fe:d2:d3:63:d5:f3:80:28:90:9d:bb:
95:b5:3f:e9:0e:27:a8:e3:61:46:63:6d:5a:68:dd:
69:2f:7f:d7:7c:84:76:91:fc:8d:bb:07:25:91:df:
bf:cc:bd:58:e7:c4:24:e4:58:ec:25:02:c4:e7:00:
eb:21:9f:c2:38:49:a1:13:92:d5:33:bd:7a:8e:d1:
90:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E1:59:97:3D:6E:5B:EA:73:06:EA:59:2D:40:1E:01:EE:2C:A0:0F
X509v3 Authority Key Identifier:
keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:99:f0:18:cc:61:1b:58:21:88:be:cd:0e:9d:69:ea:e0:a6:
bb:21:23:f8:cf:7e:23:5d:b1:d3:4b:13:62:4c:3a:a0:41:b9:
d9:69:7e:fe:14:aa:5a:6d:64:51:0e:4f:67:3f:54:f9:8a:56:
e2:60:4d:a4:d5:86:3e:21:46:f4:45:ba:2d:fa:91:4f:44:0d:
34:8a:2d:38:c1:16:0f:54:42:b5:6b:dd:66:64:7b:1f:cf:e7:
8b:d9:2b:15:74:da:28:a8:44:99:97:7a:d5:94:50:9b:82:58:
19:95:53:0f:74:7d:54:42:63:c4:76:72:46:ce:20:9c:c4:84:
52:b4:4a:1c:cc:6e:fa:6c:44:7f:97:c0:b5:22:6d:ce:43:4d:
72:57:ce:1a:bc:a9:06:2a:3e:56:e8:c1:2c:bc:f4:b4:a5:0a:
61:ce:30:f6:3d:64:d4:fa:97:bd:8d:6b:ac:3c:6d:46:de:29:
4c:00:4a:02:5a:17:48:4a:6c:b5:c2:6a:ec:89:f5:3f:2f:b6:
8f:c0:d2:75:41:84:41:b1:ca:89:20:4f:61:73:fb:bb:07:2c:
50:f2:22:69:07:ac:64:ef:b7:25:56:b7:59:d8:0f:e2:7a:12:
7f:98:cf:6a:ec:1e:bb:d0:1c:9a:0a:5c:8b:ec:9c:01:2d:c5:
41:4a:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:37 2025 by rpki-client