Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier: X0fhWX6K7K0oJOL7iYCdJe12AoW5D246e6TyyYnELIE=
Subject key identifier: 21:C6:98:AC:35:8F:34:E2:62:CA:37:8E:DD:8E:18:2F:2C:51:E5:35
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial: 0198D65F43790126A7EE0D92C23420715881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number: 03B0
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: Yyry7oX0ThEqvOxGPfTiE60l40ib3lurBHiNIP1/lOU=)
2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:43:79:01:26:a7:ee:0d:92:c2:34:20:71:58:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=21c698ac358f34e262ca378edd8e182f2c51e535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:c5:a9:be:44:70:03:47:29:8c:35:ee:7a:
79:c0:88:0d:59:e1:b9:66:7b:26:9f:7d:f2:87:a0:
57:61:c9:8c:77:86:99:d6:cd:9f:fa:da:cb:26:63:
e6:ac:02:d6:cd:09:22:8b:b7:bb:51:95:9b:77:34:
73:a7:ce:2f:7b:a5:32:b2:10:ed:e4:6b:d8:5e:f1:
7f:be:86:95:13:b2:46:73:e6:1f:f3:fb:1f:c1:e1:
f0:37:38:7c:96:70:6b:4a:04:87:9d:4f:0c:91:0f:
24:71:76:56:d3:76:95:55:81:c0:da:4f:f6:00:bd:
02:3e:ad:f9:bd:93:fa:24:08:c2:6d:65:1f:c1:50:
1e:98:cf:76:bf:4e:cc:9c:7a:26:9f:57:e1:85:97:
2a:72:e4:e2:d4:e3:cf:6d:6f:34:9a:1d:f8:e3:55:
b0:d5:29:13:3a:ce:4b:e9:c3:8f:a6:9d:b9:d2:0c:
e3:ce:bd:d0:89:68:4f:25:a2:88:c1:e2:b5:de:20:
29:4f:ed:24:c5:ff:85:95:bb:2e:cb:42:79:ff:2c:
c4:19:8e:93:51:dd:ba:e5:e5:41:8d:2a:fc:f7:28:
db:f4:bf:f5:30:14:ab:77:cc:b2:b5:57:69:44:88:
3d:01:a3:0e:27:32:96:8c:6a:91:a3:54:f6:3f:1f:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C6:98:AC:35:8F:34:E2:62:CA:37:8E:DD:8E:18:2F:2C:51:E5:35
X509v3 Authority Key Identifier:
keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1a:4d:71:0b:60:a8:ad:60:8b:16:e9:50:bb:c2:4b:d5:d5:
35:08:20:ff:4c:68:f2:f7:51:b6:2e:b7:11:74:58:d3:1c:6e:
aa:2f:38:3b:c5:03:d3:35:b2:47:af:b5:8e:df:43:67:39:c4:
e9:5b:87:81:3e:88:ee:cd:87:de:f4:fd:ea:01:f0:32:59:de:
2d:b1:7a:54:80:c0:2c:b0:db:96:48:62:b5:81:77:db:c7:57:
82:28:98:ff:c0:e4:53:dd:6d:58:7d:3f:f6:83:71:83:dd:7e:
82:00:75:f6:0f:e3:81:10:ff:b4:6c:4b:28:13:ac:3f:8c:53:
3b:4c:34:ac:78:e1:dc:73:44:4f:07:de:e6:20:25:f7:76:4b:
27:c1:b9:ef:59:9d:5c:a2:7d:c1:5e:9a:2f:72:c0:1f:94:ee:
33:1f:ee:98:13:d9:99:2b:cb:c3:cc:99:7c:79:99:eb:21:21:
51:da:56:2a:07:82:23:1d:a0:7a:0f:f5:b6:b7:cc:fb:5c:75:
c9:ca:74:15:0c:66:54:33:eb:67:48:6f:ad:26:0f:a3:32:a1:
b7:9b:81:79:38:55:47:3a:7b:74:a0:38:1f:45:45:61:35:b2:
41:a9:1f:48:ee:53:82:fa:ba:cc:87:91:90:f3:53:d3:f7:50:
31:a8:93:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:48 2025 by rpki-client