Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File: WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier: ojoCgHvgzA8jezdn0tysbwfv/JIqoFM2cnI0xrRPZXE=
Subject key identifier: 52:2E:42:3C:30:B2:9F:42:D0:17:93:1B:03:E2:EF:BC:79:78:E9:E4
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial: 0198D5F1B0439AED36C4DACA8C2B985A1BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number: 14FF
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=)
2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: AP3u9DShrCTWU3vmF1LAzzSYeOtoBr56XMmTnG0n1aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b0:43:9a:ed:36:c4:da:ca:8c:2b:98:5a:1b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=522e423c30b29f42d017931b03e2efbc7978e9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:6d:77:29:4b:13:a6:de:02:d0:5f:b9:dc:
9e:75:3f:08:12:51:0f:74:6e:ae:0e:28:42:2b:3f:
68:58:e0:54:17:54:02:7e:3c:04:8d:9f:4d:b7:56:
dd:11:31:6e:d3:49:49:fe:1d:98:93:d9:67:56:7b:
19:9c:eb:13:60:26:d6:9c:72:6a:d0:08:0b:b5:98:
2f:08:7d:0a:c0:76:ad:29:89:00:9a:84:1e:d3:d2:
8c:4d:45:e4:ad:87:17:03:5b:89:c5:03:e4:f1:8d:
ac:39:1e:6b:85:f6:f7:dc:44:63:da:67:d3:b2:2f:
6e:bb:51:3f:93:ee:35:d6:5a:3e:91:51:4a:98:5d:
ba:80:51:64:7c:54:d6:a5:b0:6c:d6:55:88:c2:ac:
35:c7:18:7c:fa:7c:f7:73:f6:24:72:b4:8c:88:33:
9a:6c:50:c5:4b:e0:7c:fc:e7:ec:9f:2f:b3:a7:b2:
5e:02:2d:7e:b1:62:36:b2:1e:52:b0:34:0c:db:00:
65:c0:4f:cd:7c:2a:cf:3c:83:58:b0:de:2d:bb:40:
fd:74:f7:e4:4b:28:54:9c:c6:c9:e8:58:8f:4a:7b:
73:3a:90:c8:78:08:4f:bf:59:d4:ba:69:2c:1c:f8:
47:27:d4:0a:8e:48:6c:dc:cd:8e:33:3f:5c:c4:83:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2E:42:3C:30:B2:9F:42:D0:17:93:1B:03:E2:EF:BC:79:78:E9:E4
X509v3 Authority Key Identifier:
keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:85:e6:8a:d8:35:8a:2d:ae:f2:a5:51:6c:51:d2:c4:80:a8:
89:6a:f3:a8:5a:b2:3b:da:36:f2:94:8e:68:a5:b7:1e:bf:c8:
56:7c:1f:6d:bb:ef:36:5f:2c:45:a4:54:71:8e:fb:2f:00:48:
95:f1:e0:8c:87:1e:ed:90:fb:7a:66:16:fd:7c:31:9a:eb:be:
71:bd:0d:a4:07:46:76:46:0b:a9:54:42:3d:ab:37:9a:fa:1b:
22:bc:61:bd:88:20:11:1d:92:26:52:75:66:17:13:3d:bf:c4:
47:d0:06:91:58:96:68:9e:83:5f:18:9b:b3:dc:39:0a:13:fc:
04:cb:3e:05:18:2b:3d:51:5d:fc:d8:05:d1:a1:6f:62:35:b9:
ba:3b:b9:54:05:b0:41:af:9e:ca:5f:ab:79:99:db:a4:4d:42:
7c:68:d2:e1:9d:71:dc:7d:48:1f:4f:b9:0a:28:0a:c2:cc:a6:
f8:af:cd:c9:9b:70:b7:50:08:45:32:ee:e8:c6:71:06:68:9a:
db:37:fa:59:94:d9:42:95:e9:a0:b8:fa:fa:df:d5:01:2c:22:
f4:04:d4:e6:13:9d:12:bc:58:e3:31:94:82:34:fc:7e:cd:fd:
a7:ce:4e:6f:bd:cf:9e:ab:dd:a7:f4:69:0a:87:4f:19:ec:58:
7a:fd:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:26 2025 by rpki-client