Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: O3qHBQPnw02AWfN+Os3DrI74UgdaYS+P099L/fulnLk=
Subject key identifier: DB:25:3A:D0:64:E9:23:54:56:10:69:E0:22:0A:4F:24:4F:04:ED:82
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 0197B8210F8608A1AC4AC532157E556ECC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 6B
Signing time: Sat 28 Jun 2025 20:01:03 +0000
Manifest this update: Sat 28 Jun 2025 20:01:03 +0000
Manifest next update: Sun 29 Jun 2025 20:01:03 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: pAcE/zOAgNNZxqGTmfRsvcAuAOpgsrP5paYNSr5qIbc=)
2: wNDSq8yZE9PBcRFzNVbL2mjY9tI.roa (hash: +CAo2P8QJyLpdrdtqSl+fQIj2IGhG8nr3/YTjB35bgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0f:86:08:a1:ac:4a:c5:32:15:7e:55:6e:cc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Jun 28 20:01:03 2025 GMT
Not After : Jun 29 20:01:03 2025 GMT
Subject: CN=db253ad064e92354561069e0220a4f244f04ed82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:3b:74:50:dc:64:a7:2c:2e:41:9e:d9:fd:
09:d9:8c:f3:ef:a0:d1:09:91:1a:46:a2:7b:39:1c:
ba:28:94:cf:06:34:f3:44:35:69:41:2c:7a:3d:76:
9c:6c:ea:e4:74:6a:13:78:1c:96:13:f0:44:a9:f0:
f0:6d:91:18:1c:ce:79:7d:87:f5:87:ef:53:e8:71:
10:4c:6a:44:42:c3:ef:e0:9e:5b:f0:c8:7d:d2:27:
f0:f9:cc:2d:6a:4a:d3:8b:63:e3:e5:f1:ef:a4:da:
5e:15:74:b8:26:e4:23:66:85:09:48:b7:0c:76:33:
50:dc:ce:d8:4f:b1:90:4d:71:f7:57:3e:72:1e:01:
1c:a0:60:0d:0e:94:ff:da:09:eb:11:58:aa:a5:ee:
d1:31:78:98:91:ca:39:9a:c3:30:40:08:88:9b:62:
23:f5:3d:94:8e:15:cb:c8:45:20:94:22:df:93:c9:
d0:59:2a:8b:06:5f:11:d1:1b:19:1d:23:fe:f4:7e:
90:06:5b:55:43:db:f9:72:bc:4e:ca:ad:cd:c7:dc:
96:5e:81:0c:ad:71:91:e3:b0:dc:cf:6b:19:1d:8f:
f2:27:57:92:b7:1d:15:cd:2c:02:9a:88:c4:f3:26:
1b:e3:24:a8:2a:eb:84:e1:e4:f2:26:eb:9d:ae:28:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:3A:D0:64:E9:23:54:56:10:69:E0:22:0A:4F:24:4F:04:ED:82
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9c:80:06:3b:07:88:05:5a:5b:49:19:94:a3:e4:7e:3d:e7:
0f:d7:42:de:aa:3c:74:2c:93:40:ea:a8:3e:35:15:88:00:3d:
5b:fb:9f:a0:bb:7f:43:95:d8:91:34:06:71:bc:8c:3d:25:29:
e9:ae:76:6f:b1:c4:a4:35:41:37:d6:97:0d:ee:24:b7:eb:c9:
87:5c:c9:41:18:7f:54:c7:80:4f:8f:c8:3e:ee:3d:93:a5:f0:
13:1d:21:93:dc:cc:e8:9a:3d:3c:7f:7f:74:25:b4:de:9b:a2:
7c:a1:88:6b:bb:e1:18:c3:f0:22:4d:3c:ad:24:ca:4d:34:a0:
fa:e5:83:13:be:44:42:c8:47:33:3a:9d:08:4a:22:c1:30:5b:
43:50:9e:10:35:6e:ad:e3:6c:61:a7:20:c0:99:fb:8f:f4:24:
f2:73:c7:1e:c1:c0:c8:b4:dd:b2:96:00:f0:5e:c6:73:00:69:
80:55:0c:15:89:d3:bb:9a:4a:6a:82:32:d5:f6:97:e3:d8:52:
d8:74:6c:bb:14:09:1c:1c:ab:c2:f4:89:24:cc:26:f6:5c:17:
0a:e6:a3:23:7e:e6:e7:fe:c9:08:a7:a7:96:c7:8c:0c:f0:ac:
52:7f:56:1c:09:be:c2:c0:06:d5:b5:05:ba:d3:e3:b6:59:af:
a0:a0:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:07 2025 by rpki-client