Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File: WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier: ddfkZLa8vwKP+HO7xwX1UDvdnlP8PF1R+uPUhO4b0qs=
Subject key identifier: C8:63:4D:38:01:54:3A:59:1C:BF:E7:A3:3B:C7:A3:77:2E:2F:B1:51
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer: /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial: 0198D58390087E9997198618235B2B26127A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number: 09F5
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: dPPAuT62CcEAkNpA2MPh4/JU2NgzAAFsEqKIxVvOybk=)
2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=)
3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:90:08:7e:99:97:19:86:18:23:5b:2b:26:12:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=c8634d3801543a591cbfe7a33bc7a3772e2fb151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:9e:f7:50:82:96:24:da:06:21:bf:dc:29:
84:d9:4f:83:14:05:33:f3:45:69:a9:54:49:b2:98:
66:1f:a9:2c:28:9e:2c:e9:eb:ad:4b:97:63:1b:33:
d5:25:b7:68:09:0a:90:2e:94:73:7f:47:a0:15:50:
2f:09:87:ce:e2:64:1b:e9:5f:e9:af:76:d1:34:b3:
7a:b5:07:39:95:d6:32:67:39:9d:38:a7:41:4b:b7:
b5:cd:da:65:80:22:32:3f:87:c5:55:af:2b:79:60:
53:23:0d:60:35:b2:fc:20:e0:99:07:c8:50:7e:e1:
f8:b9:49:8c:62:57:6d:8f:53:c4:3b:5c:18:c0:63:
da:c4:97:01:de:72:8e:e9:41:2a:5a:86:3e:c6:ce:
91:4a:b9:24:bf:b0:3e:47:79:a7:ca:ec:e8:62:6c:
43:f4:40:70:36:1e:a8:d7:90:98:82:d7:5c:b9:51:
15:15:5a:09:60:66:18:19:35:67:e0:09:d0:27:d8:
47:ed:71:12:aa:1c:09:93:b5:36:9b:7e:73:7a:ce:
11:08:bf:a7:2d:85:c1:ea:36:1f:91:64:12:ea:6b:
73:54:2d:93:c9:4a:bf:f1:b7:b3:9b:15:8e:9b:68:
1c:4f:db:ca:57:95:b9:a0:a5:b2:6d:bd:b6:c9:e1:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:63:4D:38:01:54:3A:59:1C:BF:E7:A3:3B:C7:A3:77:2E:2F:B1:51
X509v3 Authority Key Identifier:
keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:bc:c3:d7:94:76:f5:48:4e:cf:66:67:9e:92:e7:6a:99:bb:
02:2a:25:12:9d:84:66:b1:f5:ab:43:84:ed:fe:59:03:5d:20:
4c:9e:02:93:c0:38:d9:f6:a0:19:78:0a:66:a0:c7:90:bb:94:
b9:de:04:4b:90:83:ae:e3:24:5b:09:72:ff:5d:a7:b5:51:95:
fc:cc:19:4e:3f:d4:3a:0b:fd:88:85:f1:2e:79:2d:ba:25:2b:
0a:7a:10:f9:5a:e0:d2:90:4f:74:d5:8b:f7:8e:22:66:05:e8:
41:82:37:66:f6:c7:63:e8:40:e3:7d:35:27:cc:fe:bb:b3:d5:
b5:14:67:2f:b1:9f:10:95:89:6e:59:2f:41:08:12:50:e2:31:
45:22:e2:85:23:c0:47:21:a1:2f:f2:bb:39:e5:80:a5:ae:92:
05:21:88:1f:86:8b:07:58:9b:99:e6:b5:a2:87:c3:e2:be:b6:
5a:bc:68:53:c0:67:0f:93:be:5e:df:11:a3:fa:e2:6f:c9:79:
36:10:32:d6:4f:de:7d:d2:2e:30:fc:a3:93:e3:1b:bc:43:d5:
09:a6:10:9e:37:46:d3:44:f4:d7:25:71:0a:40:85:4b:ac:0f:
08:44:c0:5f:3b:54:6b:e4:59:ab:09:d8:3b:49:1d:97:72:ce:
1a:ce:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:19 2025 by rpki-client