Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier: FZm1I20kJwkhb8CD4UwVKBm57J2V97yPX/jJ3NhdGW0=
Subject key identifier: CA:9C:C2:AA:30:45:A0:39:2A:1D:1A:AD:6B:0C:68:25:5C:51:6E:D5
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial: 019A00A2CD5116F51E9F918A9D6D7F5E072A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number: 1444
Signing time: Mon 20 Oct 2025 08:01:00 +0000
Manifest this update: Mon 20 Oct 2025 08:01:00 +0000
Manifest next update: Tue 21 Oct 2025 08:01:00 +0000
Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: TPeTy8Fj45I98g+4CBDu/7/WvapLdA50SJrg04D68P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:cd:51:16:f5:1e:9f:91:8a:9d:6d:7f:5e:07:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
Validity
Not Before: Oct 20 08:01:00 2025 GMT
Not After : Oct 21 08:01:00 2025 GMT
Subject: CN=ca9cc2aa3045a0392a1d1aad6b0c68255c516ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6b:94:79:64:a4:cc:8f:be:19:66:11:c6:dc:
25:9c:15:9c:59:bc:be:94:fb:f6:1e:0e:2a:36:42:
60:54:2c:3c:e3:19:3a:fa:8b:bf:9b:ba:40:f1:63:
f1:98:f7:c4:dd:c0:56:37:55:4c:42:a3:a9:62:dd:
5c:cb:c9:d4:37:ae:a0:1d:e0:c3:cd:e5:1e:b0:53:
f8:79:67:a2:98:02:4d:99:18:7a:86:60:af:97:f9:
45:99:ec:74:f9:01:7c:f3:c0:f9:e7:08:58:9c:57:
ec:69:eb:86:f8:2a:37:ac:2c:cc:57:66:e2:67:fd:
0b:49:05:17:99:59:f4:00:8d:26:ac:0c:63:02:bd:
a4:ee:54:9f:06:d0:d8:2a:99:46:ea:fa:6a:a1:65:
0c:53:fc:3a:ce:96:3e:d3:b8:5b:a1:c6:5c:85:e2:
fd:89:0b:1e:86:c3:37:4e:e3:91:25:fb:9d:d8:d0:
61:2a:a3:73:b5:94:4e:f1:77:32:92:be:0d:d3:a8:
84:cb:1b:da:d5:88:40:2a:cf:5a:27:7e:f8:1b:ad:
ad:4e:b9:38:69:0f:4b:50:ab:2a:a1:c8:1f:23:b2:
93:6d:6d:3b:bb:e3:da:aa:88:9e:a3:83:96:65:36:
9a:3e:ec:ea:4e:9d:ac:97:9e:99:c0:94:13:8e:4c:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:C2:AA:30:45:A0:39:2A:1D:1A:AD:6B:0C:68:25:5C:51:6E:D5
X509v3 Authority Key Identifier:
keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:2d:7e:06:68:9d:5e:28:9c:0d:da:9f:5c:d0:59:a1:96:60:
94:6e:47:70:b4:be:4f:d1:d7:a7:9f:da:82:cf:9a:7a:cb:6a:
5f:ca:5b:2d:08:70:9d:1b:1c:13:a7:2e:23:05:6e:37:f1:3d:
d7:32:63:e3:5f:9c:62:33:eb:1b:7f:ef:d1:52:cb:06:83:83:
b4:08:7f:d2:8b:df:d5:c2:5c:5c:6b:9b:05:b6:07:82:03:cc:
7a:a4:14:3c:0e:8e:e2:ec:e3:f0:66:2f:13:47:d9:db:30:cf:
fa:47:fa:5e:3e:e0:0a:a5:91:2d:d3:ef:7f:85:cb:26:a0:5a:
f1:bd:e6:94:47:5d:fc:6f:e7:32:8d:b0:aa:51:f3:24:b2:2e:
92:ac:d5:46:2a:a9:99:8a:f8:ef:97:a8:06:5f:e5:9b:bb:5f:
42:0f:1a:23:16:a4:35:79:69:9b:8a:e9:e8:be:18:a4:09:4a:
7e:29:de:2c:c7:25:a9:fa:0f:f4:80:3c:e6:a1:36:5b:36:e1:
de:59:4e:70:ab:69:da:86:8b:5d:97:30:ea:0b:be:de:c4:71:
69:f6:5d:85:6b:c8:ea:c7:91:70:f3:88:be:d9:bc:67:a8:39:
53:ef:7e:bc:37:a6:1b:de:86:ca:4d:9b:96:bb:b0:55:55:aa:
cc:63:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:44 2025 by rpki-client