Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier: 8raVOeUwPbBZsTLX5qJaeMYHL6mgzSavv8I1yhFrK+4=
Subject key identifier: 9E:F4:E2:EE:B9:58:9F:C4:5F:92:5A:B4:EE:DB:25:E6:5D:DD:E3:7D
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial: 0198D6CD4C4581F7BBF9BB75A13866011390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number: 165A
Signing time: Sat 23 Aug 2025 12:00:35 +0000
Manifest this update: Sat 23 Aug 2025 12:00:35 +0000
Manifest next update: Sun 24 Aug 2025 12:00:35 +0000
Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=)
2: WAFcyNofG780PiarII34uyb9U64.crl (hash: E+T5IGLJyJJsR+yJlSRlK5IsnLcLOnxdXl1Rvp3E3ac=)
3: m3VZjdzwzA2piVdwr0jRtcRx0nU.roa (hash: P1WYR9PHlhqL+0w0ThuMbIIaq+c1NvgD6JAgzrBxv9k=)
4: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:4c:45:81:f7:bb:f9:bb:75:a1:38:66:01:13:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Validity
Not Before: Aug 23 12:00:35 2025 GMT
Not After : Aug 24 12:00:35 2025 GMT
Subject: CN=9ef4e2eeb9589fc45f925ab4eedb25e65ddde37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:60:9a:fa:55:7b:b0:33:80:4f:82:2d:28:
fc:c6:10:11:6d:fb:db:05:19:f1:63:5f:a2:3c:dc:
77:20:8a:8c:c2:ab:8e:48:bf:cb:e0:cb:be:e3:fa:
26:6f:9d:fc:f2:ba:c6:c0:f1:90:ed:f3:c9:8e:42:
a7:d9:f8:4a:1b:e2:e1:23:bd:26:d9:42:e9:31:19:
b7:f0:2a:4c:dd:a7:31:f9:cd:42:02:67:de:06:c9:
ac:d0:54:7e:15:f7:f1:c7:df:2c:71:26:18:6c:2a:
b3:fc:f3:36:d2:d1:c5:df:87:a3:3c:a3:df:e4:58:
64:5e:bd:0d:a6:d7:e9:57:66:03:bc:e7:18:7f:ec:
f0:c8:f4:4b:cf:55:3b:17:1b:b2:e1:b8:56:0c:76:
20:b6:13:90:88:49:2d:94:fb:32:79:fd:0a:ba:c1:
52:47:6a:68:cb:bb:87:b7:10:3a:76:a7:f1:3c:cd:
f0:6b:a3:39:12:e5:a2:27:30:07:77:1b:7f:49:e1:
8a:ce:02:10:5e:f5:8f:6e:a3:7f:4f:02:0d:8d:a8:
aa:0a:3f:f5:fb:d0:30:1a:42:95:e7:19:ba:bb:3a:
de:17:6e:c3:b7:02:df:b0:50:31:d3:a6:75:c6:3d:
16:77:b2:2c:db:ea:75:b6:eb:96:06:b2:b2:08:17:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F4:E2:EE:B9:58:9F:C4:5F:92:5A:B4:EE:DB:25:E6:5D:DD:E3:7D
X509v3 Authority Key Identifier:
keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e4:50:f8:3b:20:61:16:9f:c2:24:5c:df:bb:c7:95:d3:e8:
ca:45:20:5f:48:ad:f7:1e:52:e2:bd:23:f7:a3:ce:b7:5f:f9:
ae:e4:a6:e6:1b:cf:8f:c3:1f:28:f0:d1:99:86:ed:e3:ba:11:
17:04:3a:3d:90:52:4b:6e:15:2d:9e:9b:33:5d:fb:e4:16:dc:
46:9d:97:70:fd:8f:22:9f:10:3b:4a:56:4a:b6:00:1d:a2:0f:
df:93:83:fd:78:8a:93:80:ae:db:83:d7:f7:16:9a:02:20:df:
ab:8b:ad:ba:4a:e5:e9:43:45:a1:ac:59:b5:26:99:5c:ea:db:
60:e9:20:53:3c:5f:b1:8d:d0:01:d1:d8:ca:1f:31:d7:c2:e3:
63:37:03:99:99:2d:96:bb:ae:3b:e9:0c:08:87:e3:e1:5b:d7:
25:b9:07:fc:d1:a1:fc:b0:fa:8f:62:98:e4:3a:17:b6:60:98:
6f:77:d6:91:58:26:19:a6:b1:d6:05:68:ca:8b:18:b4:e3:de:
ea:db:6b:b5:49:9b:7b:96:d7:24:10:0f:e1:1b:b7:69:07:f2:
2a:26:03:14:e2:5f:35:06:06:b9:b1:4c:af:3a:e4:c3:2f:3b:
b5:ac:06:4e:0b:f2:65:bf:f1:c6:57:cb:08:7e:8a:d2:10:67:
19:63:a4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:28 2025 by rpki-client