Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: pcdRYtEZAEoOuAiSTLHgelmbQW9ycWIxx+HG7Hvuciw=
Subject key identifier: 8E:D7:EB:63:53:B7:6F:DD:98:3F:1D:0A:2F:C5:F9:9B:C5:01:2B:DE
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 0197B5C495AA7EFC0E26CC95CF028F748225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 15BD
Signing time: Sat 28 Jun 2025 09:00:48 +0000
Manifest this update: Sat 28 Jun 2025 09:00:48 +0000
Manifest next update: Sun 29 Jun 2025 09:00:48 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: IIORQWDLBgl1sCuDJYwzd9Mb8Rk9Hu4hvYfHd3ozm/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:95:aa:7e:fc:0e:26:cc:95:cf:02:8f:74:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Jun 28 09:00:48 2025 GMT
Not After : Jun 29 09:00:48 2025 GMT
Subject: CN=8ed7eb6353b76fdd983f1d0a2fc5f99bc5012bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a4:9b:b2:53:bd:ef:60:12:e7:86:ca:1d:86:
33:14:84:2b:cb:78:29:46:de:d6:cc:5a:ac:c7:ae:
a6:c8:f3:31:44:2d:83:78:6a:78:e8:76:32:24:ea:
59:fa:4e:34:e3:75:21:22:04:58:5c:8d:4a:1f:74:
c2:9b:01:cd:6f:72:45:7e:83:82:54:15:75:c4:7c:
33:aa:4a:e8:cf:f5:41:62:eb:52:59:38:10:16:e6:
bd:00:68:61:db:be:cc:47:a4:7a:a1:22:66:0a:55:
af:89:18:02:38:a1:d6:df:a2:54:3c:47:19:7f:d6:
b1:1c:22:79:bb:4e:de:59:20:b4:16:8b:18:53:03:
f5:66:f2:cb:b2:ab:40:1f:f5:fa:62:00:21:bd:c0:
97:f6:e2:0c:c5:d4:a3:2d:5e:47:81:3f:26:a3:9c:
74:cd:49:31:8b:e9:31:e9:09:77:44:62:4f:3b:8e:
5a:65:b1:6a:54:3e:2e:30:68:81:e2:52:f2:af:57:
15:d2:b7:1e:b4:b2:3e:7e:9b:3a:23:54:fa:ad:59:
2c:63:3e:75:ee:ac:05:df:0a:4d:6b:1c:3a:1b:19:
de:42:3f:5f:cf:3b:01:23:e8:10:9f:d2:51:cf:fb:
16:52:6c:ea:01:cc:f9:ba:5f:b0:df:67:d8:72:19:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D7:EB:63:53:B7:6F:DD:98:3F:1D:0A:2F:C5:F9:9B:C5:01:2B:DE
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c1:26:b0:dc:f3:30:69:2e:af:dd:35:54:bf:a7:34:d7:c6:
e2:48:a5:17:87:7c:94:b9:74:aa:d9:57:e2:89:e6:20:7e:cc:
ec:b2:5a:bc:eb:4d:46:ca:de:36:fe:62:23:79:7e:c6:15:c8:
4b:df:44:92:90:1c:cf:8c:88:f3:23:da:38:38:0d:18:3f:db:
d4:ab:d9:21:27:fb:c3:6c:11:b4:c6:22:51:92:ef:d6:29:5c:
dc:e4:e3:d8:30:15:91:00:f2:a7:63:7c:a4:03:46:e0:b6:08:
6e:ef:0c:36:b8:bd:4d:c0:57:27:84:a4:72:4b:09:ed:b0:11:
c0:b5:72:31:62:79:e7:53:d5:df:23:ed:2d:03:58:c0:d6:45:
c9:13:68:1b:02:3a:6b:5b:e1:56:00:8e:20:49:40:d8:4e:77:
04:56:aa:fc:5b:1b:4b:5f:00:a6:95:6c:83:f8:63:aa:11:e6:
01:1a:98:11:a1:9a:72:15:e3:d7:09:89:91:0b:6b:2e:b2:3f:
73:e3:53:50:fc:85:43:0d:e1:58:ce:ae:2a:e4:8f:57:39:99:
6d:db:86:58:0a:86:88:01:1a:40:85:35:ed:16:29:27:d0:85:
26:7a:e4:c8:1d:a9:59:b7:97:d2:dc:66:ae:33:43:26:51:df:
fe:f9:41:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:01 2025 by rpki-client