
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier: vgoyfPXMu6tRmI0qav3x/hE4RtVvORKFdkaV07XpzzE=
Subject key identifier: 64:6A:91:88:BA:F8:4A:AB:41:82:5B:7E:E1:F0:22:C0:43:D8:C0:FF
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial: 0198D7E192FD2FE425953F8FF35E68AC0ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number: 0B99
Signing time: Sat 23 Aug 2025 17:02:21 +0000
Manifest this update: Sat 23 Aug 2025 17:02:21 +0000
Manifest next update: Sun 24 Aug 2025 17:02:21 +0000
Files and hashes: 1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: i67FdN1+8rzKQrWBr6wdMiuezV+L6NsL8GY8rQJtINs=)
2: ZpykCbVPiyWDmZYOTfO_ZDkVQS8.roa (hash: dMJ7baRxj0geuiw7R0CU8VhA5Y/WfKmOFau3mkt++fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:92:fd:2f:e4:25:95:3f:8f:f3:5e:68:ac:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
Validity
Not Before: Aug 23 17:02:21 2025 GMT
Not After : Aug 24 17:02:21 2025 GMT
Subject: CN=646a9188baf84aab41825b7ee1f022c043d8c0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:36:01:9a:68:05:ae:7d:46:f0:03:56:6e:86:
36:0a:1b:5e:e5:05:d2:04:1c:53:12:7d:94:2f:7b:
48:da:50:47:ee:bc:2c:8e:79:f1:54:bf:06:65:e7:
bb:7c:a3:df:fa:78:85:6f:bf:9c:69:6b:1f:f1:c9:
3b:d2:41:a7:86:b2:f8:3d:3f:02:37:e3:4a:68:c5:
26:89:79:3e:c6:4e:7b:01:4e:76:d0:25:1d:df:20:
e4:f0:98:7e:53:7d:35:3b:a4:67:24:b8:a4:88:6e:
ee:6e:09:ce:74:7b:71:09:dd:17:73:94:96:e4:74:
a8:b5:6a:9c:d2:e4:1c:f0:a9:cb:bf:64:9d:10:28:
50:69:bc:ee:43:4f:d0:82:80:55:f4:71:e2:da:ea:
2e:37:7c:5e:9e:14:a3:a9:67:26:71:6f:93:8f:51:
fe:c7:34:ae:a4:32:ba:a7:22:06:07:d3:32:1d:cd:
dc:a5:c7:b1:b3:f6:88:6b:5f:a7:05:90:ae:7d:58:
a5:c2:13:b8:24:ae:39:43:d0:fd:c5:b0:20:4a:c4:
fb:c4:ba:6d:2f:fe:af:fb:9a:7e:1f:f7:28:82:16:
7f:c5:4a:22:8d:be:95:f9:43:ca:6e:b3:25:59:4e:
2e:47:3e:cd:c4:cb:8f:32:67:de:62:75:68:34:e2:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:91:88:BA:F8:4A:AB:41:82:5B:7E:E1:F0:22:C0:43:D8:C0:FF
X509v3 Authority Key Identifier:
keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c0:1e:4f:44:32:fa:84:16:35:94:f2:9d:5a:98:3b:de:73:
eb:a8:5a:7d:c6:d7:2e:f5:f0:3c:15:9b:29:e5:82:13:aa:e8:
ab:d0:e8:c9:b5:f3:7d:13:80:f4:df:95:c7:44:ae:4c:c6:46:
64:67:50:0b:d5:09:6d:f6:10:c6:4f:33:d1:fd:0b:9d:81:9d:
70:05:ae:3d:7d:12:f9:c8:03:d5:56:f3:75:e7:89:a4:49:66:
ca:90:f5:d3:36:89:01:95:68:30:ad:d3:69:8a:ca:26:2c:6a:
99:5a:72:38:14:11:0e:5f:8e:d3:6b:df:1c:b5:a6:48:8e:b2:
81:d5:08:3e:99:5c:72:98:56:02:f3:fa:b9:72:fb:1a:7e:a2:
52:40:fc:23:ba:ff:2d:f1:8a:33:b9:56:c8:e7:46:fc:47:fa:
74:6f:4e:89:de:da:23:02:0c:0e:e5:f5:1e:c7:a2:29:8c:68:
a2:aa:cf:5b:f2:d8:5e:d6:62:c5:6e:96:70:bd:c1:f6:0a:98:
7e:8d:d8:b8:a8:c5:67:15:cd:1e:d9:61:d5:6d:97:35:82:5b:
c1:26:80:54:f8:7b:d8:82:db:e4:46:6b:ee:10:13:7f:2e:bb:
1c:e3:44:58:d8:48:53:3d:54:07:c2:5f:9c:fa:a1:e8:cc:e1:
b2:4c:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:53 2025 by rpki-client