Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json)
Hash identifier: zRIR+b74Py4NqnklYcM7bxOmkGu3Z8gs4z1+renO/uE=
Subject key identifier: DC:F8:D0:0D:80:39:E1:18:B9:93:19:3D:45:2F:85:3D:9D:74:49:27
Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a
Certificate serial: 0198D73AF26619AE4B8227B5FBDEC9B2EDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
Manifest number: 13AA
Signing time: Sat 23 Aug 2025 14:00:21 +0000
Manifest this update: Sat 23 Aug 2025 14:00:21 +0000
Manifest next update: Sun 24 Aug 2025 14:00:21 +0000
Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: u03VimPhuSrd11uUhzmoLCwKjBHYpJU4vI/Nmb5lpPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f2:66:19:ae:4b:82:27:b5:fb:de:c9:b2:ed:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a
Validity
Not Before: Aug 23 14:00:21 2025 GMT
Not After : Aug 24 14:00:21 2025 GMT
Subject: CN=dcf8d00d8039e118b993193d452f853d9d744927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:1d:0f:97:cc:5f:3b:d3:e5:6f:f9:bc:ac:
e1:d9:e5:bd:27:15:ed:59:54:d7:ab:f7:16:d9:cd:
d7:d0:7f:0f:2b:e2:85:b8:3b:59:62:7a:1e:f0:f6:
46:11:fb:45:21:e9:9f:31:94:75:ca:b5:d7:ef:a8:
56:f4:b0:70:de:5c:2a:1f:42:e1:d7:25:f8:74:7e:
04:a4:40:d1:df:86:ec:71:f4:8e:2e:23:12:86:06:
d8:74:2a:59:dc:94:4b:34:42:28:02:57:89:89:cc:
cf:12:dc:55:5a:52:d9:2d:24:1b:35:35:19:a9:7e:
30:47:d6:95:70:d6:04:dc:c6:ce:c9:0b:f9:22:c2:
a3:d0:b7:df:8a:29:9e:80:2e:7a:bf:3e:55:4b:ff:
fb:24:99:41:95:3b:86:5d:25:57:df:00:cd:44:e5:
9c:2f:4c:2c:62:be:de:d6:b2:92:87:b5:18:b8:be:
60:23:02:ae:08:ce:13:5f:56:c5:1c:71:86:01:ed:
d0:56:45:a7:27:6a:63:40:f4:98:17:52:ab:15:e2:
25:72:d6:85:42:6e:bb:db:a8:42:3c:ba:25:50:69:
14:e5:b5:72:40:b3:5e:c8:97:e9:a3:8b:f5:9b:aa:
70:e1:e8:4e:fe:80:40:6f:8f:d1:e7:9b:59:67:e6:
57:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:D0:0D:80:39:E1:18:B9:93:19:3D:45:2F:85:3D:9D:74:49:27
X509v3 Authority Key Identifier:
keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1f:08:cd:22:65:08:a9:fa:a2:75:14:a3:4e:ad:e9:d7:bf:
77:cf:22:d1:3a:9f:62:5f:8e:d9:a7:bf:63:76:e9:ed:c2:77:
73:b6:4d:ba:48:52:dd:d8:21:23:35:83:c5:aa:77:8e:2a:9a:
3d:7e:40:94:c0:fb:eb:6b:31:e5:ec:83:92:74:2e:88:bc:c4:
ea:fb:75:b2:75:a4:38:28:59:08:51:6d:ae:dc:8d:1e:84:a9:
63:06:ad:90:1c:21:78:6c:6b:7b:95:2c:ab:74:30:62:3b:ee:
e8:62:69:1c:24:2c:60:ad:e1:e4:c0:7f:04:d1:47:a7:a1:ee:
a7:8c:88:81:ee:9e:32:4c:40:61:dd:bf:3d:40:1e:2d:d2:58:
63:8b:f8:d0:7a:2a:e9:af:8f:20:01:ac:e2:d7:58:d6:f4:2d:
4a:2c:7e:96:41:74:70:d9:a0:eb:38:1b:57:f4:2c:f9:ea:c2:
13:44:9a:4e:28:de:88:62:ea:80:cc:32:64:c8:39:da:9c:bb:
7c:e0:90:cc:f7:4e:04:5c:47:93:4b:cd:db:f9:58:36:0a:99:
16:29:73:c6:f6:27:7d:ff:c8:9c:71:9c:5c:6a:4e:52:61:6a:
72:66:03:26:04:51:c3:00:cc:d6:65:87:51:45:5b:0b:5e:48:
c7:7b:ee:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:36 2025 by rpki-client