Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: daz515SvofU97+SFm3DnLT7p6pi6M+ofhcrx7GdKfH0=
Subject key identifier: 88:49:F5:89:E6:2A:73:45:7C:92:A4:23:36:22:86:03:FF:78:04:05
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 0198D6601C05F39F77C9A0B565C25423E5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 144D
Signing time: Sat 23 Aug 2025 10:01:19 +0000
Manifest this update: Sat 23 Aug 2025 10:01:19 +0000
Manifest next update: Sun 24 Aug 2025 10:01:19 +0000
Files and hashes: 1: 8selzdDBcWCOuVgfCsfOfBE5_CU.roa (hash: p2O5tRV4Q6XqdGNl3EZYTg9FiLjgZdrbbWtNR0sxUHQ=)
2: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: Vat+DkctoNDcbYULhbQrche8tPzudrmHqU3ZBJL156c=)
3: igZS5QD16n_qiKkVlzEX0Nd3KpQ.roa (hash: s1QAXQBqaJ5SElDe9N3pzr6SkITHndqfwDSrBBBJ6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:1c:05:f3:9f:77:c9:a0:b5:65:c2:54:23:e5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Aug 23 10:01:19 2025 GMT
Not After : Aug 24 10:01:19 2025 GMT
Subject: CN=8849f589e62a73457c92a42336228603ff780405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:23:46:e0:65:26:e6:01:64:1b:61:48:f4:1f:
18:b4:02:82:8a:0a:40:37:dc:68:f6:d2:53:06:26:
da:d6:41:83:f6:5f:d2:3e:0c:fc:81:a1:d1:e6:d4:
ab:c1:e2:d0:fc:c4:21:40:19:10:88:21:5e:39:8e:
c1:54:37:89:04:e3:e1:ca:47:31:c2:e7:e0:f4:38:
56:e3:cf:f1:0c:a4:00:4b:da:dc:fd:61:ed:ab:e4:
fc:13:59:ad:ba:56:5c:d2:fe:0f:e5:98:52:7a:56:
23:18:e8:f1:81:e0:ab:cb:08:40:aa:59:2b:9a:25:
15:09:e3:89:e6:85:ab:41:12:5e:ef:bd:05:58:7c:
1d:94:ad:92:f3:62:63:0b:c3:46:00:f2:fb:a3:ab:
b5:39:60:7a:37:73:cb:1b:2b:51:ac:eb:6f:83:9c:
2d:d5:e6:f3:5d:af:60:f4:42:57:a6:dd:ab:35:32:
7d:47:e6:0b:2f:4e:40:3f:8d:ce:6f:5b:37:ac:7a:
11:27:70:13:05:7a:81:69:7f:81:22:7f:78:96:0c:
17:a1:95:c6:1e:6c:f7:e4:f3:55:9b:6b:8f:07:14:
fb:cd:87:be:b1:1b:f3:d1:e7:78:1e:0d:b2:ec:74:
0f:7e:a8:9b:9a:cc:fc:02:90:62:ae:4a:43:c5:ce:
73:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:49:F5:89:E6:2A:73:45:7C:92:A4:23:36:22:86:03:FF:78:04:05
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0b:a7:8e:5f:a2:51:41:3c:05:00:e2:26:a4:85:e6:49:77:
12:f3:ad:57:25:8c:1c:45:3e:9e:c2:76:78:04:a7:bf:35:ec:
b4:54:c3:82:6d:9c:d1:19:09:4a:ab:62:d1:87:88:fa:c8:6a:
f9:96:03:85:62:b3:18:fc:09:38:8b:4a:f0:ea:f0:59:45:76:
cb:81:09:1b:e5:4b:79:17:3c:b5:34:cb:8b:cf:1f:10:f3:0d:
f6:2f:0d:f0:d2:e5:f3:df:10:c4:7b:52:66:8f:26:91:c0:d9:
d2:0f:06:ef:ec:45:bc:82:56:03:31:6c:b0:2f:e9:f4:8a:ce:
0c:ff:d9:25:5a:1c:c2:c8:06:86:50:26:79:e7:7b:5e:21:f4:
73:49:25:01:23:5c:db:d0:57:b0:35:04:18:01:f1:cf:46:82:
a7:2d:7a:27:60:6a:68:6c:6b:a5:f0:76:2a:11:0b:5e:c7:64:
e7:e6:58:33:b6:a9:69:6a:e7:4e:49:60:e5:c7:88:fa:99:28:
9a:7d:87:a3:84:5e:e4:60:9a:71:d1:b5:5c:76:45:7e:d9:77:
5f:91:67:d5:01:ab:b6:6f:a2:b2:54:9e:a4:1d:35:a9:15:9d:
6d:86:96:5d:25:7b:1c:4f:cc:30:af:89:10:1d:a2:5e:e3:8f:
70:1d:59:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:07:29 2025 by rpki-client