Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier: 0cr5AOjQlFNXmJUVmPvK8AqWszyvki39tm9kUN2ueO0=
Subject key identifier: A4:C0:AB:54:1A:6D:5D:CD:EE:AD:63:92:6F:9C:9E:F1:5F:DD:11:EE
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial: 0198D4E0541DBC14FEABA18E9906C1093A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number: 0FC7
Signing time: Sat 23 Aug 2025 03:02:07 +0000
Manifest this update: Sat 23 Aug 2025 03:02:07 +0000
Manifest next update: Sun 24 Aug 2025 03:02:07 +0000
Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: CbKV2RJUyzzc6X52u2e0fluqNeqk/uFhz9xWkXO+p/s=)
2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:54:1d:bc:14:fe:ab:a1:8e:99:06:c1:09:3a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
Validity
Not Before: Aug 23 03:02:07 2025 GMT
Not After : Aug 24 03:02:07 2025 GMT
Subject: CN=a4c0ab541a6d5dcdeead63926f9c9ef15fdd11ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:0f:c7:b5:6a:ca:18:da:06:b6:82:3d:85:
7e:a9:b9:a0:4f:20:98:f0:be:d9:97:3b:59:8a:ad:
74:3e:44:07:ca:94:fb:19:bc:19:6d:19:b9:30:8b:
94:e2:3a:e2:84:4c:bd:92:00:68:f3:4c:5e:64:ac:
99:97:2b:f7:c9:ce:50:b3:c6:28:30:58:1d:35:66:
19:77:4f:54:72:89:f3:0c:c4:ad:4d:d9:b6:40:d7:
68:36:fb:00:54:85:d2:a3:ce:b1:e7:5f:a5:05:79:
c7:d8:c9:32:1a:fa:98:8f:e6:a1:a6:4f:84:0e:61:
95:a6:82:b7:46:69:1a:a9:72:3a:df:58:1d:b9:27:
e9:8e:46:86:6b:c8:29:79:e1:87:ed:da:03:73:9a:
36:ca:61:59:a6:6d:8f:b7:bd:d3:c6:ca:b7:d2:e5:
b2:f5:de:2d:f3:7d:f3:62:43:42:e7:b6:9d:fc:fc:
c3:28:97:b1:8f:fa:7b:dc:3a:f5:67:04:a3:dd:d0:
44:e7:3c:34:8f:bc:3a:ba:05:53:7f:25:81:54:6e:
fe:0c:01:8a:cb:3f:27:4c:3a:cc:1f:ee:67:67:5b:
f3:4f:3c:2a:8b:a4:dc:38:06:5c:ab:9f:bf:26:81:
ce:7f:06:4f:35:a4:79:de:e1:d2:1b:63:d3:2d:6e:
80:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:AB:54:1A:6D:5D:CD:EE:AD:63:92:6F:9C:9E:F1:5F:DD:11:EE
X509v3 Authority Key Identifier:
keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e2:12:74:df:b3:dd:b4:f3:e5:96:bb:9d:b6:33:13:26:0f:
82:d9:a9:da:b7:f6:0b:32:51:63:6d:4e:26:95:29:f0:17:e5:
84:40:3f:ca:69:10:54:f7:4d:2b:65:60:c4:ed:91:3e:58:09:
e9:b0:79:2c:f5:5f:40:41:1a:5c:1b:55:d8:72:fb:fb:e9:92:
01:40:b4:71:cd:fd:a4:bf:6a:f3:d8:c5:70:63:58:ed:8c:d7:
c4:99:58:fe:f5:f3:71:b8:3f:f1:a7:25:a5:f3:ba:ca:9c:66:
4c:bf:2a:6c:8e:45:1e:8b:05:cb:bc:49:d1:aa:f7:ee:d7:73:
fe:b1:e1:d6:3f:be:d6:4a:0b:ee:36:c4:ed:cb:f9:21:e2:6b:
83:03:dd:cb:b5:d3:55:4a:6d:a3:a0:71:16:25:ac:95:ac:d2:
86:67:12:cb:9e:35:64:46:06:c1:38:40:c1:32:c1:9a:dd:5d:
60:0f:44:87:2e:9b:b2:6f:58:ee:ad:cc:e6:59:48:4b:ce:52:
ae:61:be:06:59:3b:fa:05:0a:f3:a7:14:be:0d:ce:4b:9a:8e:
e4:2b:fa:1a:3f:44:b5:f8:d1:eb:67:44:56:ed:cf:3f:fe:89:
e1:1a:b8:47:d0:ac:2c:54:7a:f1:64:1f:73:3d:dd:a3:62:4c:
e6:fd:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:19 2025 by rpki-client