Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier: 6yw4CWigUSxaV5sL7zVHu7uS1bhoLKLDR10wix2326A=
Subject key identifier: 3F:AE:A1:94:16:E4:23:C8:E8:2E:CA:4A:60:DC:D0:EF:A4:0F:19:4C
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial: 0198D54EAB7FB40A52917719DDB7A9C987A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number: 0587
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: bK53AYEl8Q+6Mu/hEdLjfI1J4G+AJONCVjdl1Sun0gg=)
2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ab:7f:b4:0a:52:91:77:19:dd:b7:a9:c9:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=3faea19416e423c8e82eca4a60dcd0efa40f194c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:67:c6:e0:70:da:66:d9:89:da:f7:e6:75:
f8:6a:7a:18:d0:47:5b:ee:7f:d2:2d:52:8d:7c:ca:
45:e1:6d:8e:e1:01:3a:de:32:fa:83:45:9f:8a:4b:
65:ae:41:3a:3e:86:1f:1e:40:1c:7f:bd:2d:4b:a0:
46:f6:0c:c0:5e:f3:e6:ae:48:d5:55:99:5e:7f:2a:
c6:3a:bd:5a:51:d0:99:3d:a1:50:5f:64:2d:af:32:
33:fb:47:a9:d1:3d:33:97:7f:a3:94:a3:3e:6f:31:
39:b7:e4:51:cb:4b:d0:43:89:49:d6:50:cf:b3:75:
57:22:72:80:d5:fa:3a:d9:dc:48:a9:e1:59:45:b0:
9a:e6:94:b9:c2:fc:a4:fb:c9:25:2f:47:15:d2:e7:
0b:00:84:be:90:5a:a4:fc:b4:98:1f:87:3f:36:78:
16:37:8d:60:24:b3:0b:d8:73:d4:cc:5e:fe:8f:7c:
e0:8d:e4:0e:21:be:17:a6:31:bf:bd:2b:c6:49:5b:
b7:ea:4e:c9:22:6e:7d:93:ad:96:90:54:76:1b:8e:
76:9b:1f:34:d5:0b:9b:1e:4e:12:bb:d1:69:6a:98:
bb:98:1d:3a:f9:b4:b3:9a:1f:11:c1:a3:44:ce:31:
07:bc:09:83:ee:9d:db:fc:e0:0f:0d:26:9d:8d:98:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AE:A1:94:16:E4:23:C8:E8:2E:CA:4A:60:DC:D0:EF:A4:0F:19:4C
X509v3 Authority Key Identifier:
keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:97:16:e2:6d:a7:64:3e:c1:3c:8e:20:ed:a0:f3:c8:b6:6a:
59:ce:9e:c8:b9:8b:1f:87:f6:e6:ef:29:42:e9:b6:b4:ce:db:
74:c7:39:ea:fc:13:4e:e8:58:e7:29:d3:43:f9:b5:e6:20:d1:
7f:15:c6:5c:b8:e8:d9:8b:a1:08:00:99:c4:d7:73:9b:89:5c:
0a:78:17:f0:4b:08:a0:b4:f1:4a:9d:6d:e3:ae:5f:3f:55:40:
69:33:6b:ed:98:80:90:1d:6d:c9:91:e2:83:76:80:69:6b:da:
6f:d0:9a:87:97:da:ed:66:5e:91:28:06:e5:2a:12:a0:51:21:
7d:f8:87:ae:e2:db:44:33:79:10:6f:57:d1:79:3f:f5:1f:f0:
18:a3:6d:d1:95:b4:06:86:ac:c8:e6:ce:36:1d:8c:88:3f:1e:
77:c7:52:87:a4:f3:bd:28:fd:d8:3d:68:ff:60:c2:06:bb:86:
56:41:f3:a4:b0:68:f1:67:73:6f:ce:45:f9:06:1b:b3:80:9e:
fa:91:9e:5d:fa:47:8a:d6:ec:c6:ba:80:b3:b0:cc:ee:b8:6d:
f7:55:94:28:e5:71:76:56:40:4e:2b:db:a4:af:1e:6e:43:e9:
84:db:d8:18:1a:56:fc:19:8e:b0:65:2a:c6:e9:88:94:65:73:
c4:00:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:53 2025 by rpki-client