Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: ygFmO6lvQRzQ2+p56KWCNP/Hs7B6UIkSdm9YwA0+sfI=
Subject key identifier: 4A:F9:CE:89:B4:E7:2C:F5:78:46:B0:E4:E1:1D:AF:11:D6:3D:C3:FC
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 0198D7734FF347355093B992B52305F6BCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 15:01:55 +0000
Manifest this update: Sat 23 Aug 2025 15:01:55 +0000
Manifest next update: Sun 24 Aug 2025 15:01:55 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: wwrZsuUVYWJLoUjPMGaWr6FUG1pA5cBkooxRqeMtEIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:4f:f3:47:35:50:93:b9:92:b5:23:05:f6:bc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Aug 23 15:01:55 2025 GMT
Not After : Aug 24 15:01:55 2025 GMT
Subject: CN=4af9ce89b4e72cf57846b0e4e11daf11d63dc3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:cd:0e:3e:2f:6c:34:51:d1:2f:c2:ae:d4:
5e:7e:b9:67:cb:9f:76:ba:2b:0f:bc:37:9a:5d:46:
92:5d:a6:02:03:dd:c4:18:60:45:5b:ee:b2:30:ca:
eb:62:06:7c:28:e5:d0:0e:e2:86:e9:91:e5:e4:b0:
b9:5b:e8:83:d7:f1:54:fd:4d:51:12:c9:95:e4:bf:
c4:e8:f3:b3:0d:17:a7:b5:f0:fa:a5:30:41:46:3e:
cb:ec:db:67:c0:bc:43:c6:02:c8:bb:58:bd:33:02:
34:75:66:60:fd:e3:0f:f7:11:ce:a1:cf:23:5a:98:
17:2c:c4:14:55:f7:d9:7e:b6:a1:4c:d3:cd:19:e5:
3d:b6:63:8b:7f:0b:80:7e:73:47:f9:16:ee:17:36:
70:c0:bc:2e:fa:e8:af:fa:e9:98:be:49:f4:f5:71:
b8:91:ed:67:0d:55:41:ff:c3:3e:b5:e4:ae:45:7a:
61:53:9e:de:e4:c1:b3:39:4b:67:f6:0b:34:d2:b0:
fd:65:85:76:e1:21:1e:16:0b:02:56:9a:c9:b8:3d:
7e:1f:c7:f6:1d:56:3d:4d:b8:e7:7f:d5:aa:48:1a:
51:71:38:6b:4a:b5:92:c0:56:11:7c:1e:cb:6a:78:
d2:15:c2:e4:23:70:0b:71:03:b2:12:ad:27:2a:6c:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F9:CE:89:B4:E7:2C:F5:78:46:B0:E4:E1:1D:AF:11:D6:3D:C3:FC
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:30:4e:73:24:10:72:d6:14:02:6d:63:51:ea:1e:f9:b6:9f:
3b:96:57:a3:7f:85:f3:10:71:4b:a8:8c:0d:2b:ab:7c:92:93:
3c:45:57:3b:90:88:08:19:79:60:cb:f2:61:c7:39:6b:33:5f:
48:e8:f5:94:2c:8d:79:da:51:9a:1f:a5:9b:53:67:2f:0c:31:
b9:58:d3:cf:3d:be:56:a8:c8:19:63:71:68:6f:1f:d0:b8:d0:
b8:9a:a6:b2:8e:56:97:46:74:3e:f3:cc:8e:e5:eb:86:5f:f3:
f5:f4:1e:18:02:73:7c:e8:b7:c3:b8:b2:22:0a:cc:fc:94:73:
b3:04:df:30:04:e7:d3:bb:86:b4:1b:43:fc:9c:05:72:9f:3d:
f7:6c:22:c6:49:04:02:d4:9c:fe:55:19:3f:be:f8:46:55:25:
e9:e1:67:c9:10:ef:4f:c3:d7:cd:c6:06:5a:ae:52:71:b7:b3:
e5:ad:fe:f5:a4:33:e2:11:97:86:e8:d3:51:18:e4:b2:3b:f8:
8b:24:c7:42:49:65:f0:5a:48:6f:e0:8a:d9:dc:c2:e1:2d:18:
eb:3c:49:83:d4:9a:c1:f3:c9:b5:f3:76:19:8c:25:4b:47:de:
ef:b6:b3:bb:57:67:4a:5a:56:ff:56:dc:2d:28:e8:35:ba:8e:
67:4b:15:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:28:27 2025 by rpki-client