Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
File: WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json)
Hash identifier: X3Fq3+DRm7Wjsf0Z5UBlrJ1Ane9CJ6OFriVkTHbCMvQ=
Subject key identifier: 10:01:56:BF:2F:74:7B:F2:CF:2C:8D:06:6F:69:67:88:E0:8D:0C:94
Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
Certificate issuer: /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Certificate serial: 0199FD343CAB1196DD40184D2BE74DC007B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 16:01:22 +0000
Manifest this update: Sun 19 Oct 2025 16:01:22 +0000
Manifest next update: Mon 20 Oct 2025 16:01:22 +0000
Files and hashes: 1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: ynY69S4hPVpiHgmGnrl/8/tINrbVHotLDJuKosxGOqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:3c:ab:11:96:dd:40:18:4d:2b:e7:4d:c0:07:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Validity
Not Before: Oct 19 16:01:22 2025 GMT
Not After : Oct 20 16:01:22 2025 GMT
Subject: CN=100156bf2f747bf2cf2c8d066f696788e08d0c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:36:64:8b:1f:1c:19:e4:0c:87:71:74:d2:
c8:33:4f:e0:3f:d4:6b:26:03:b8:61:43:8b:5e:84:
c7:f5:db:59:7a:16:8b:16:57:29:3f:0a:30:f5:84:
57:c1:ed:01:01:ae:c1:72:75:65:01:f0:32:42:69:
79:60:e2:cc:47:a6:a2:4c:d8:84:84:be:56:9f:8e:
29:6c:72:21:05:94:ec:8c:e0:5c:8a:07:e9:48:ad:
47:c4:fd:4a:c3:97:f7:9b:7a:bc:0f:ae:58:f1:ee:
f5:58:45:bc:11:cd:76:6d:d5:e7:43:dd:22:c0:09:
27:09:1f:33:a2:35:c9:84:f8:57:68:52:16:cb:c7:
0a:f3:43:07:16:6d:7d:53:01:f2:d1:81:70:3b:02:
6d:dc:18:a2:9b:54:e3:3e:1c:dc:cd:0f:c4:e8:5a:
17:1c:45:ff:b9:89:22:8c:10:f2:29:39:f8:db:2e:
43:d9:1d:2f:77:94:ad:b2:f4:43:eb:4b:56:f9:96:
a0:63:0e:9b:d5:e8:25:0d:69:6d:6b:d8:2d:b0:d3:
74:c2:12:b3:1b:8f:f2:2f:07:f4:ce:16:c3:a0:18:
92:a5:79:9e:d5:b3:7f:d2:7e:bf:fa:69:24:39:36:
9e:39:79:ff:a2:3e:9b:d6:72:3f:e3:f9:bf:cf:73:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:56:BF:2F:74:7B:F2:CF:2C:8D:06:6F:69:67:88:E0:8D:0C:94
X509v3 Authority Key Identifier:
keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d9:9e:dd:f1:74:3d:a7:69:c4:ff:80:a6:8c:f6:0f:36:37:
cf:b2:bf:95:e7:69:93:5a:0c:9a:72:07:f9:cd:cc:0b:1f:31:
bf:a7:e7:c4:a0:eb:bd:4f:0c:ea:18:83:59:85:bb:8c:cd:cc:
03:84:ed:1f:76:af:13:8d:b1:05:8a:dc:c2:2a:2b:02:96:4e:
bb:c8:91:eb:0d:6d:de:06:d5:d9:30:69:2e:fd:ee:4a:94:dd:
a8:a9:3f:a9:07:eb:e1:c2:29:d7:a8:1c:ed:5d:11:5e:19:25:
47:70:92:07:60:d2:9f:f3:c5:58:92:ef:62:ca:fb:ee:9c:4f:
81:cf:f6:dd:a9:1a:43:08:dd:6c:3c:52:ae:e6:c3:a7:1c:ba:
54:28:c9:b3:88:29:05:65:da:a0:b9:b6:25:3a:84:2e:dd:4c:
16:0e:7d:b8:e5:ff:ef:42:d7:a6:25:6d:fa:ca:a2:3e:4b:14:
ab:bd:91:37:de:d8:15:d1:de:66:f6:90:a5:bb:2e:08:bf:90:
97:dc:46:93:a2:b0:f0:d7:9c:32:7e:07:56:4a:a0:a1:6f:f2:
87:38:32:44:c8:38:46:b0:51:7e:81:0b:6f:7d:f8:c8:7e:ca:
d0:e1:38:63:1b:80:f8:20:10:69:75:b2:59:9a:62:8b:23:c8:
27:54:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:07 2025 by rpki-client