Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: 0zaow6QMAXRcMGUk2Ic3rGHTTtQy+SwDecQE3GRykjs=
Subject key identifier: 69:0A:AC:3A:3C:A3:39:39:11:D9:74:5F:47:ED:FB:29:7F:08:FC:80
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 0198D7E15628DB77E8F49840CA1D0BBBF52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 0100
Signing time: Sat 23 Aug 2025 17:02:05 +0000
Manifest this update: Sat 23 Aug 2025 17:02:05 +0000
Manifest next update: Sun 24 Aug 2025 17:02:05 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: +atIdF9PZN2CLmuTLZVV9apPPbnQGqfGjCRhuaQj+CM=)
2: wNDSq8yZE9PBcRFzNVbL2mjY9tI.roa (hash: +CAo2P8QJyLpdrdtqSl+fQIj2IGhG8nr3/YTjB35bgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:56:28:db:77:e8:f4:98:40:ca:1d:0b:bb:f5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Aug 23 17:02:05 2025 GMT
Not After : Aug 24 17:02:05 2025 GMT
Subject: CN=690aac3a3ca3393911d9745f47edfb297f08fc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:6a:1c:eb:f5:e5:48:cd:2a:df:cf:fa:69:
40:02:e9:ef:47:55:5f:dd:0f:96:86:ff:84:cc:ff:
e5:e6:dd:4c:a0:0a:85:46:91:0f:45:7a:fc:fb:f8:
81:6a:95:13:ed:c1:55:58:42:06:a8:9f:5a:e7:be:
b1:e5:b8:d4:ef:d5:31:8c:76:ba:34:90:43:be:e8:
f1:53:7e:42:d4:0f:f6:f2:ef:1d:e4:a5:07:71:2d:
25:41:b5:44:c9:de:31:1f:29:30:a3:cb:ff:3b:bd:
10:04:64:10:24:2f:fb:41:38:e2:22:36:51:20:ee:
86:40:7f:ba:f9:cd:55:83:58:0a:7d:4a:03:3a:09:
3c:29:6e:94:f8:76:8d:c9:73:0f:07:82:6e:8e:58:
bf:75:b2:7b:0d:8a:1e:5a:97:ad:fb:d6:c5:97:58:
41:07:14:d9:bc:5a:9c:c4:c9:7e:86:43:6c:e8:5f:
34:03:e9:7d:8f:e2:c8:e4:97:08:68:c8:1d:00:1c:
e5:bd:48:d0:bc:74:a0:9c:6b:e8:51:90:3e:c0:b6:
f5:29:6c:29:00:a9:87:bb:2c:bd:4a:f0:72:01:af:
34:8f:cc:1b:84:1e:bc:4f:29:69:81:a3:29:dc:3c:
10:f5:90:20:c1:1b:39:a5:cf:28:2c:3b:aa:ce:ff:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:AC:3A:3C:A3:39:39:11:D9:74:5F:47:ED:FB:29:7F:08:FC:80
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1c:6f:44:19:14:66:1f:4e:97:ae:44:f1:5d:a2:43:d0:89:
11:28:5b:94:6d:42:21:79:d8:d8:fe:81:43:6b:ad:42:8f:11:
b8:45:32:58:53:7e:10:72:6f:b0:5c:93:d5:8d:1f:b1:ae:bb:
8b:b3:56:95:f1:1e:b3:4d:b3:51:9b:37:b8:3f:11:c0:dc:8f:
85:03:ce:9c:d3:f5:62:32:21:fd:3c:d1:16:b4:a8:42:74:24:
33:c6:a1:9f:a5:a1:d6:16:e1:20:ee:95:46:e2:d4:04:91:e8:
a3:4b:be:80:b1:66:db:99:7e:ea:7b:b4:35:b2:34:e4:42:aa:
b9:7b:b0:f7:56:c5:c2:70:f3:10:e1:e1:ca:f0:a3:5b:4a:73:
09:f1:3a:0e:07:dc:28:d4:8d:8d:2c:37:d7:79:99:1a:6f:0d:
a2:71:85:4b:32:86:f4:c1:10:ad:ae:36:8d:38:98:75:00:7f:
4a:a4:48:f9:07:0d:86:5b:34:ac:23:1f:80:ed:ee:3e:e3:16:
ec:27:25:f2:2a:2c:3b:89:0d:38:46:ba:b3:4a:2b:90:a1:ab:
aa:16:d0:bf:5a:55:5c:97:d6:e6:90:94:c5:32:78:bf:0b:bb:
8e:22:bf:17:ae:29:4e:35:70:61:d2:29:be:2c:ac:fd:f3:96:
33:90:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:41 2025 by rpki-client