Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: kbuSAvv9sOhA6CVp/2SJbGlde7QbJr8PxjIYKnsKD/k=
Subject key identifier: C9:33:9B:DD:28:3A:E2:7E:01:EE:11:99:0D:80:6E:51:D0:9A:9D:66
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 0198D4E02AE6DD4D450997FDF56089E451B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 10A9
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: 7KUqFEDleiwjITJrVolZ29rN36o2AdAOAqHrCct0zuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2a:e6:dd:4d:45:09:97:fd:f5:60:89:e4:51:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=c9339bdd283ae27e01ee11990d806e51d09a9d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:20:3a:ed:d0:a7:50:1d:6f:1f:e7:38:44:
62:0b:52:7a:61:e7:16:2c:7b:70:8f:26:b7:1a:b1:
8e:fe:1b:43:72:ba:e2:ae:d2:be:30:fc:d8:9e:a8:
0a:95:c7:8c:55:2c:90:b6:02:85:ba:1c:2b:80:d1:
d4:d0:94:6c:34:ac:76:80:07:92:b4:16:e8:1b:23:
b4:9d:6e:b2:26:eb:c0:18:cc:36:e2:74:9e:f7:3f:
ed:b2:96:24:26:a8:f6:af:c9:d8:5b:2a:c6:b4:a5:
37:40:2f:59:ce:52:48:94:fa:4b:86:95:2b:7f:15:
b7:76:6f:a2:20:c6:3f:b0:1d:bb:65:0f:61:98:b5:
b5:6e:eb:28:a1:ad:09:07:cb:e6:76:83:0b:f0:ab:
ee:60:f4:73:5a:3f:ad:ef:62:cf:ac:f9:b4:83:ba:
7d:85:00:e0:0f:04:78:4a:c0:50:48:cb:a0:90:95:
8d:ed:18:ca:dc:17:7e:0f:1a:b0:dc:70:44:53:fa:
c7:32:c4:33:09:75:a3:c0:e3:66:4f:69:3d:2c:78:
ff:b4:8e:ab:5e:61:0a:64:18:7b:57:03:b2:9b:2a:
0f:32:66:d5:b4:64:48:66:48:97:68:b6:db:0c:3c:
b4:1a:ff:b2:c1:1a:63:86:10:5d:57:43:b9:50:3a:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:33:9B:DD:28:3A:E2:7E:01:EE:11:99:0D:80:6E:51:D0:9A:9D:66
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f2:e3:2a:dc:e7:a9:48:e8:8e:b0:d3:33:47:68:9d:72:97:
2f:ef:1c:6c:48:2e:a2:f9:18:96:9b:97:02:74:12:f7:9c:09:
ef:60:24:02:1e:3d:65:3c:e4:77:47:1a:7a:5c:5d:53:aa:3b:
05:f1:b2:d0:cb:65:b0:c6:b0:83:f6:6a:51:b5:54:4c:5a:9e:
70:37:d4:3d:1d:31:e3:de:66:d7:e5:fd:6d:74:8d:13:0d:4a:
54:36:d6:2d:d2:b0:ac:04:79:9d:0b:d7:7a:7a:77:1a:ff:ab:
c5:79:2c:cf:46:98:cd:52:45:f1:67:9c:e7:16:6f:c4:d5:ba:
d6:25:da:7f:09:98:66:2b:19:57:3a:c6:72:3b:8b:cd:17:06:
92:2c:07:2f:de:47:0e:96:81:52:2c:f3:ba:04:17:26:fb:62:
f5:19:65:ba:3c:a1:63:d7:98:1a:05:e5:ee:89:a5:0e:0e:99:
b7:7a:11:63:01:fa:6a:88:51:54:7d:51:8f:49:0e:c0:7e:0c:
34:0b:12:a7:86:76:99:b4:f0:6f:d9:d6:a3:dc:86:6c:63:17:
f4:1e:78:a2:2b:ba:52:e1:54:fd:e3:be:62:2a:f0:86:6a:bb:
ae:7a:b4:d0:c3:93:01:e6:7e:65:cd:20:e5:f4:d5:f1:4a:45:
37:c3:f2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:25:34 2025 by rpki-client