
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier: GWMLLa8bHD0HOKI40a/ypiYmd7QKYGuIZZpWFU//lik=
Subject key identifier: 00:9F:90:F4:1D:FA:ED:A8:74:09:7E:05:A3:DA:4D:19:E1:A0:FD:2D
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 0198D5BBB496D26877BBB2176804F5935F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number: 0587
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: 9uBK3gkQP3qMith1/z2Mg7I9xEn3FCFlog+MXQPNrMA=)
2: a6Ca0db6IRWqpeQUf-mkPOP5Y6E.roa (hash: +wI+O0cNbhPu/Y/iWm666e3mQkbcXkl04FBEwBpeXro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b4:96:d2:68:77:bb:b2:17:68:04:f5:93:5f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=009f90f41dfaeda874097e05a3da4d19e1a0fd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:ed:a4:0e:6c:78:05:a8:24:d0:21:93:22:
f9:6b:ba:b4:28:4c:47:68:bf:08:d1:c8:5e:92:68:
0e:84:c8:da:ac:13:3c:b6:42:1c:39:a0:ac:c4:81:
4a:d2:be:d0:f7:8b:27:c7:bd:2f:38:54:9a:22:3d:
ab:7d:49:ab:f5:dd:52:27:b7:eb:54:93:c7:d0:05:
21:0c:f0:c0:26:cb:77:fb:c1:b4:15:42:a7:3a:b0:
64:88:6a:1e:ab:22:a8:58:77:65:10:bb:62:77:77:
5f:d9:90:8f:83:0f:31:8d:70:6b:c6:7a:1a:8e:f5:
49:31:0c:f4:ea:1a:73:f3:71:55:82:2d:da:eb:a5:
e8:d5:d3:af:e3:6e:7e:bc:38:53:3b:d7:f5:95:04:
ac:c6:c4:0a:0f:12:07:6e:e4:ff:b5:80:34:b8:0d:
53:9b:5e:85:46:26:22:22:61:08:71:a3:4b:61:01:
13:6f:bb:97:45:5c:4d:c8:89:2f:17:ef:02:38:2c:
d2:fc:7f:3e:cf:42:8a:da:0c:7b:11:aa:76:6b:dc:
4c:32:4e:d3:7b:f6:8c:6a:7f:ec:92:16:e8:e1:c6:
bf:c5:14:b3:fc:e9:96:9f:a6:54:c8:73:2d:13:a7:
fb:76:cf:b0:e0:2a:d8:50:b9:6c:95:e9:04:cf:d1:
a4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:90:F4:1D:FA:ED:A8:74:09:7E:05:A3:DA:4D:19:E1:A0:FD:2D
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f2:10:60:a8:18:41:32:9a:af:c1:d2:ac:81:b7:9f:14:f7:
51:7b:5d:6b:2d:64:06:2b:3a:23:1d:df:bb:ac:ba:bd:34:ad:
62:ce:4e:a7:59:ed:25:1d:7a:24:1b:45:ba:cf:d5:d1:c3:d2:
d9:f7:15:4f:51:7e:6e:22:8d:87:a3:d4:5a:23:01:46:48:46:
de:00:bc:b1:56:29:6e:c7:45:27:78:36:8e:c4:64:9d:f6:e8:
70:46:97:9e:47:35:d2:02:06:fd:4a:01:48:9b:80:3b:38:c1:
2b:0c:a2:1e:0d:f5:6e:44:04:80:e1:f0:aa:59:37:fd:3f:eb:
84:52:5d:e3:84:a3:53:1e:d5:c8:b4:51:1b:b2:dd:69:35:bd:
81:54:13:41:da:8a:58:7b:b2:7a:20:74:3f:f9:43:45:3b:d3:
0d:f7:dc:bf:e0:f0:02:cb:da:b3:33:b0:7c:9a:81:c6:c8:b0:
67:6f:1e:83:79:9d:89:20:eb:5e:9b:b6:de:e6:15:92:c8:7d:
ec:6f:05:c9:76:2a:e7:f6:d4:18:1c:d5:22:b9:7b:a7:bf:c0:
64:47:79:29:27:15:aa:28:3f:0c:5e:34:4f:5e:14:95:c3:40:
ed:0f:26:10:33:a4:b7:c9:28:37:81:60:df:d2:17:b3:4b:39:
a7:30:67:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:19 2025 by rpki-client