Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: AaFTUGBRSKBMNYRuXO5YRevip4QwtOUMrebyunqfLU4=
Subject key identifier: 04:8F:E6:DD:4D:EC:33:22:28:9C:07:C1:D5:F2:3D:79:94:3D:EE:1E
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0197B6A169A59D71B4A60C9747A027431965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 15C4
Signing time: Sat 28 Jun 2025 13:02:00 +0000
Manifest this update: Sat 28 Jun 2025 13:02:00 +0000
Manifest next update: Sun 29 Jun 2025 13:02:00 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: e1YddG4anskrGm1tfWww6lyUzpwZ/kX23LSEtf6qe+0=)
3: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:69:a5:9d:71:b4:a6:0c:97:47:a0:27:43:19:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Jun 28 13:02:00 2025 GMT
Not After : Jun 29 13:02:00 2025 GMT
Subject: CN=048fe6dd4dec3322289c07c1d5f23d79943dee1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:2f:65:61:1d:96:ac:e3:5b:4f:02:b7:eb:
f7:ae:30:f5:c0:1e:75:04:25:1e:21:34:32:4b:4d:
94:c4:e4:47:bb:40:00:5e:9f:58:50:6f:e6:b1:0a:
a4:28:c9:4d:8a:0a:59:bb:59:2a:60:15:b1:0d:f0:
a6:f1:6e:e2:29:c1:b0:39:be:b5:7a:65:95:f1:d1:
30:76:20:5f:be:22:d4:0e:cc:30:01:de:f7:6f:d6:
89:4b:e2:e4:21:b9:ee:04:bf:ee:83:0a:23:43:8b:
6f:6b:9d:7f:f9:d1:77:85:4d:51:d1:a8:d3:83:0f:
f1:99:ef:03:ce:3d:f8:3c:47:26:0c:69:8d:e1:96:
d2:cc:6d:53:80:68:76:82:f2:62:8d:4e:3a:5b:78:
ff:84:0a:87:10:5f:b2:1b:78:d0:0d:1e:ed:7a:8f:
cc:fb:09:23:5f:db:5b:6a:d6:f9:2c:6c:cc:b3:f1:
a3:1a:ee:5c:b6:ca:f0:8b:ce:cc:0d:bc:18:6b:60:
b7:06:40:51:39:ca:02:49:5f:13:50:8e:1d:20:91:
01:d7:1f:31:6c:cf:43:e2:8f:74:97:0a:82:d4:b5:
74:81:b2:08:43:ab:16:0a:d4:50:b0:15:06:d5:cb:
a8:b7:7f:a4:1e:f3:f0:cb:33:b0:e0:ad:bc:70:71:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:E6:DD:4D:EC:33:22:28:9C:07:C1:D5:F2:3D:79:94:3D:EE:1E
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7c:d5:b6:29:23:12:4f:ac:d6:68:4a:cc:b2:14:e7:11:c1:
e6:bd:6c:ed:7e:af:06:91:95:43:74:5c:f3:4f:07:42:e1:0b:
d2:db:e3:ad:05:f3:09:3e:1d:7f:99:bc:aa:09:ee:32:88:de:
28:f8:43:35:f8:f1:78:8d:06:ce:c9:26:ad:65:f7:d6:47:b9:
30:60:34:5d:35:16:28:c5:d9:7b:4e:a2:6d:c8:b8:59:aa:1a:
95:c2:b6:8f:d0:79:da:5c:df:17:31:3d:8e:6d:d6:8e:93:d7:
9f:ab:45:25:3c:5f:8c:5e:4b:d1:1f:a2:c5:c5:3b:9d:de:1c:
70:f1:91:76:53:c3:e2:d2:78:90:02:3f:12:ab:b1:02:4d:b0:
8e:67:81:d8:96:dc:79:52:ce:8d:e8:d5:cb:72:cc:86:be:6b:
fb:58:a5:4d:6f:f1:14:9a:9d:32:53:28:bc:45:d4:9c:5e:56:
1f:5c:ac:2f:b3:6a:83:20:fc:b5:7a:6d:8d:8e:6a:15:44:d0:
9a:ed:f8:e1:21:b7:d3:9e:19:60:c8:b5:26:39:46:8e:cd:d7:
18:e0:eb:1c:dd:e4:16:8c:31:80:81:18:82:ac:a7:5a:88:d1:
52:4a:78:01:2b:ac:c3:a6:dd:1a:c9:04:de:6f:d8:dc:55:d5:
69:aa:30:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:41 2025 by rpki-client