Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: kpWXqEVqCBidlVAaucjUD4Q0bD3AVVDUNmBPvu3xYHw=
Subject key identifier: 87:DD:A8:6C:63:DF:62:43:38:79:C1:A7:67:2E:06:65:6B:93:3B:A8
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 0198D5BC133CB3D4093C4D10660DA023385A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 024C
Signing time: Sat 23 Aug 2025 07:02:09 +0000
Manifest this update: Sat 23 Aug 2025 07:02:09 +0000
Manifest next update: Sun 24 Aug 2025 07:02:09 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: kPkYYrpWijenuct1qv6YdhVMdG/jbeKAfLz449OJ1eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:13:3c:b3:d4:09:3c:4d:10:66:0d:a0:23:38:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Aug 23 07:02:09 2025 GMT
Not After : Aug 24 07:02:09 2025 GMT
Subject: CN=87dda86c63df62433879c1a7672e06656b933ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:be:7c:da:0f:f7:c1:9a:df:cb:f4:bb:2c:
ac:35:01:3c:45:99:f4:80:70:e1:76:47:fb:d8:8d:
1e:f5:c3:c1:41:0e:6d:3b:79:34:6a:12:33:4e:eb:
d2:86:58:07:02:45:6f:9b:f4:f6:4a:77:59:f7:c6:
21:9e:05:db:60:9f:c5:49:0e:61:0f:42:f5:50:07:
43:cb:bc:1f:3a:9f:35:43:85:96:52:df:05:b5:50:
52:76:72:1b:49:1a:43:97:a3:21:38:c0:4a:f1:55:
26:a2:94:cc:1e:36:b1:6d:51:32:ac:80:88:ba:7a:
d6:f7:77:43:16:c9:30:bd:7f:51:0c:16:f4:52:b7:
a6:10:6b:6e:ed:ea:09:74:54:26:b1:6d:8c:2e:7b:
81:4d:b0:9b:8b:ac:1f:d8:72:37:78:ee:2c:83:e8:
1e:f4:b4:b5:9a:f4:f3:3e:51:60:f4:2d:b8:79:af:
11:9f:0e:d1:2a:82:5e:31:75:a3:86:65:f4:1a:8d:
b0:9d:31:aa:06:a8:2a:2e:af:96:c4:46:a9:80:7c:
af:18:46:a8:2a:88:40:1e:71:70:f7:69:71:c3:df:
6a:67:ad:6a:46:3b:f0:e7:8c:94:c8:79:62:7a:1c:
6d:fc:17:d9:86:1a:5b:cd:77:71:88:1d:d4:84:17:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DD:A8:6C:63:DF:62:43:38:79:C1:A7:67:2E:06:65:6B:93:3B:A8
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bb:27:18:7a:91:b5:82:d1:55:cd:6d:77:a7:74:fd:f0:21:
08:ba:7f:be:35:ac:29:b0:1a:04:0c:80:8a:45:ea:d0:4d:c9:
0d:09:65:72:e8:43:f9:c0:ba:68:cb:0a:61:e8:42:93:03:78:
42:36:d4:5d:c7:07:76:10:47:86:64:42:ab:11:3c:0a:85:52:
95:9b:87:a9:67:59:34:3c:1e:cb:0d:be:88:eb:93:98:26:9c:
8a:53:21:f7:77:17:99:cd:9a:4e:95:b6:48:5f:88:da:a4:55:
7b:4b:00:7b:5a:99:e7:79:14:71:d1:c1:73:dc:24:21:a6:b5:
20:d7:e8:22:b5:4a:9c:5b:e3:6c:20:c1:e3:c7:e9:12:8f:86:
e9:c1:1b:bc:61:87:81:c3:58:50:0e:60:dc:c6:8d:3d:98:7a:
f7:4e:e4:c2:b5:e7:ad:d1:c4:c7:f1:4b:69:8c:37:c5:f9:4c:
f7:be:81:0f:a3:bc:0c:d4:34:c4:3f:54:94:ee:ff:11:5b:98:
96:34:e5:70:e8:fb:9a:1f:fe:2e:df:13:b9:ff:fa:fc:f1:e4:
78:b7:33:12:56:85:55:e0:47:76:ef:c0:09:aa:04:6e:18:4c:
fb:05:72:e1:ae:3c:11:5a:d3:4b:68:58:88:10:70:cf:62:fc:
94:28:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:44 2025 by rpki-client