Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
File: WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json)
Hash identifier: KESCkunj6e7oCF25sRstqwsmEFTDkDrA+or0ZD8Z/9Y=
Subject key identifier: 4A:91:FB:14:E2:35:CD:45:DB:67:63:12:5B:F8:F1:09:9C:A2:06:1B
Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Certificate serial: 0198D773DDAC0DE5EC1432DC4C8DD1AC2291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 15:02:31 +0000
Manifest this update: Sat 23 Aug 2025 15:02:31 +0000
Manifest next update: Sun 24 Aug 2025 15:02:31 +0000
Files and hashes: 1: JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa (hash: nYPTNfn16VpyVNgK62YL/AjqeUMOonTZwALbyhAMma0=)
2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: f+VQctzgokZA0Vxzubkyd+oUab3N/xe9kJ/8ZPpeR+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:dd:ac:0d:e5:ec:14:32:dc:4c:8d:d1:ac:22:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe
Validity
Not Before: Aug 23 15:02:31 2025 GMT
Not After : Aug 24 15:02:31 2025 GMT
Subject: CN=4a91fb14e235cd45db6763125bf8f1099ca2061b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:f9:71:50:2e:c4:67:30:cb:82:23:32:cd:
62:f5:53:b6:69:af:8e:29:9a:60:9b:9c:0f:55:7e:
a5:8f:41:3e:2d:db:a8:a3:c2:4f:1a:b0:2d:c3:77:
3b:d1:d7:e5:17:f2:87:6f:8b:83:e4:34:28:18:90:
bf:18:6b:b2:14:b2:27:79:9a:b7:53:e6:c0:35:2b:
2a:b4:36:6c:e7:3e:ca:df:90:03:11:22:51:b2:c0:
a0:58:46:a6:d1:d4:ba:35:e6:bf:fa:28:69:ae:9f:
d2:8a:32:b3:d5:82:ce:27:b9:e7:11:8a:81:41:94:
1c:dc:a4:18:bf:63:f8:14:ab:9b:e1:d4:90:e9:05:
e5:e0:f9:8f:70:85:89:60:bb:a5:4e:4d:88:27:2b:
b6:f3:89:e2:f3:61:2c:35:68:44:93:3a:ec:4e:8c:
4e:7d:ee:fe:34:ca:13:05:f7:01:70:96:f1:02:e8:
d2:3f:6e:3b:d3:e0:03:47:be:c4:b2:28:23:60:07:
af:f7:96:42:02:07:c1:ad:05:1c:eb:06:90:7f:8e:
da:5b:f0:28:71:fc:31:ba:c1:fc:45:7e:ef:44:8d:
a6:ba:3e:6f:70:82:fa:04:65:8f:dc:4e:87:7c:72:
5c:e0:5f:06:35:16:f2:d4:4f:02:b0:5e:a8:c9:3d:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:91:FB:14:E2:35:CD:45:DB:67:63:12:5B:F8:F1:09:9C:A2:06:1B
X509v3 Authority Key Identifier:
keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a5:b4:83:30:88:44:58:86:2a:9d:be:39:a0:68:89:47:a2:
15:3f:65:d8:5f:92:e4:c6:2b:1d:15:f5:8d:1a:92:4b:1d:f2:
83:a9:5f:a7:3e:ca:7b:dd:21:d1:a7:ce:e7:43:9e:a9:eb:d1:
67:a3:43:2b:e7:f9:43:38:ca:07:75:ff:a4:09:0f:0d:25:da:
41:ea:56:35:46:1e:37:af:8a:d3:aa:04:8f:82:9f:a7:3b:a4:
4a:d5:ae:56:ee:32:16:14:c2:ae:62:d1:79:ee:0a:58:94:86:
b7:27:a6:4f:6b:0f:44:bf:40:2e:0e:99:90:0b:11:ff:a1:99:
00:6e:52:79:62:af:e2:a4:2c:15:0d:75:ba:7f:31:c8:7b:98:
c3:89:2d:01:51:31:c5:16:4b:89:a3:c1:b4:7b:77:d9:db:c2:
01:03:be:00:a3:b1:12:e5:63:bf:e4:ce:2d:34:b4:b4:9c:77:
75:8a:08:94:48:01:03:c9:47:27:f6:b0:75:2c:b4:f7:d3:c3:
96:dd:7a:d5:6e:d5:b2:e2:da:e8:d0:7b:43:14:35:e4:74:82:
35:46:b8:df:65:ef:89:93:5a:de:e7:a9:cb:eb:b9:30:b9:41:
6d:7a:9e:ed:e9:e7:b0:a5:89:59:ba:f0:9a:d1:d9:1d:ee:9a:
c0:9b:6e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:08:10 2025 by rpki-client