Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File: WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier: HxZsuP+yitW1mSP1ocVHGaoKG/dGFrOnwV2YKWEVQq4=
Subject key identifier: 74:61:85:1B:F9:8E:34:7F:24:5B:A7:05:5E:73:01:14:C8:B3:29:AA
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer: /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial: 0198D4A84761E51C8F2DFEBFF9E2F5C347E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number: 08A7
Signing time: Sat 23 Aug 2025 02:00:54 +0000
Manifest this update: Sat 23 Aug 2025 02:00:54 +0000
Manifest next update: Sun 24 Aug 2025 02:00:54 +0000
Files and hashes: 1: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: m9g6xaok9mqYCHgzoegH56hGaAJhmDgoUhpv8TjeZOA=)
2: lgaTADVYOse5jNoGc-hlR1iyQcM.roa (hash: whet4s5rWCX20O/tP+eDuVvdhz/p6dV5HSU07qsog2g=)
3: sauoJPH8ZCzsvjvGozwJzjKKcxA.roa (hash: B9f46JTfl/pBuc2yfO6KIqonaBN9SLGFTMzKnpf4wu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:47:61:e5:1c:8f:2d:fe:bf:f9:e2:f5:c3:47:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Validity
Not Before: Aug 23 02:00:54 2025 GMT
Not After : Aug 24 02:00:54 2025 GMT
Subject: CN=7461851bf98e347f245ba7055e730114c8b329aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:11:db:5a:94:3f:90:09:cb:44:ed:79:a8:
6d:73:ad:11:f7:d0:77:42:45:71:3b:37:98:dd:f5:
b4:aa:f9:19:b9:91:c4:2f:75:d1:25:29:c5:51:c9:
ec:c0:47:fd:9d:81:e8:dc:00:d4:23:23:9d:9f:d5:
a6:19:16:b4:82:75:e0:2f:a1:0a:35:4e:97:c0:87:
2c:1b:1e:6f:8e:5d:c2:10:01:29:ba:3c:ea:d8:01:
20:f8:a8:e4:bb:9d:e4:fb:bd:3b:2a:9e:2e:5b:7a:
fb:d7:54:4b:4a:dd:9d:2f:6f:e1:f8:9f:98:bc:2b:
82:13:44:d7:bb:ff:da:0a:fa:af:49:74:c1:36:ea:
9e:76:4a:06:34:93:8e:d7:b9:32:58:66:15:cd:53:
bc:6b:28:72:40:2d:a5:fd:cd:da:d9:8f:33:7b:a9:
fb:28:7e:1d:2c:ce:06:ee:82:ce:ae:29:98:98:06:
3d:70:ff:23:5b:a9:96:b0:93:88:ec:c2:bb:58:8d:
9e:c8:86:31:dd:9f:59:90:8a:d8:d6:a9:36:cd:be:
13:27:72:d5:a8:01:e5:18:be:b4:6d:d1:40:9b:fa:
fc:80:7a:3a:fb:11:4d:0c:73:2b:ba:ad:b9:21:43:
1e:16:9e:da:9e:ce:de:4c:23:25:7a:39:cb:25:f0:
aa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:61:85:1B:F9:8E:34:7F:24:5B:A7:05:5E:73:01:14:C8:B3:29:AA
X509v3 Authority Key Identifier:
keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c6:0c:5e:3b:61:54:b3:2e:93:77:6c:dc:f9:ad:43:ab:3f:
6f:6c:52:a8:35:56:9e:e9:5c:ea:27:94:af:8e:8c:86:71:fb:
24:77:aa:64:8e:92:b5:ac:eb:b6:94:5b:11:d2:23:a6:18:0c:
c2:80:d6:a5:5e:d1:ad:74:d7:ee:64:4d:f1:e7:dc:11:9a:a1:
a4:84:97:08:2b:a4:65:cf:24:1f:20:bc:a0:4f:b2:91:6b:90:
1e:58:41:f8:e7:4a:86:4b:6d:5d:b1:04:81:59:ee:16:de:89:
96:77:78:50:47:67:ce:16:d3:c7:9d:cc:83:f3:d9:69:cd:1a:
c3:e8:f8:54:03:64:23:3d:5b:6e:39:c1:f7:1e:fc:6c:bf:67:
6c:c1:b7:2f:7a:8f:48:15:1f:dd:43:ba:76:91:aa:99:11:d2:
08:d4:9e:2b:ea:92:5d:03:6b:8a:4d:2c:ba:d6:20:1f:40:39:
85:87:5c:0e:75:34:e1:7d:8d:2b:30:9f:c9:f3:0c:0e:fb:b2:
2b:e7:4f:eb:4c:22:72:3b:9a:f6:bf:5e:12:72:29:79:93:99:
66:6f:68:b6:5d:29:4b:16:d4:c2:30:e8:6f:7a:47:df:94:b2:
f8:d4:e5:9a:2a:c6:4d:39:65:48:7e:de:d6:84:35:f1:0a:98:
e9:11:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:09 2025 by rpki-client