Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier: BHnSAf8zYRDnVsOBZtkHvOabBkIsTyEF183xAekG9RU=
Subject key identifier: 10:E9:34:61:92:2D:98:C4:7B:96:C3:CB:E8:ED:AC:3F:ED:F3:EE:19
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial: 0199FB45A2E178E811A250E6C7FC938F9985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number: 059A
Signing time: Sun 19 Oct 2025 07:01:08 +0000
Manifest this update: Sun 19 Oct 2025 07:01:08 +0000
Manifest next update: Mon 20 Oct 2025 07:01:08 +0000
Files and hashes: 1: QEzw4CiK6CiHgldhyTg0boyDFI4.roa (hash: ffDuLw/6EUMQBC9wlTrHOAlboOryP+rRmytNZtNkFZU=)
2: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: 3j0W3w667cjy4aAExFDu316diD0H5B4R372C2xek69I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a2:e1:78:e8:11:a2:50:e6:c7:fc:93:8f:99:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Validity
Not Before: Oct 19 07:01:08 2025 GMT
Not After : Oct 20 07:01:08 2025 GMT
Subject: CN=10e93461922d98c47b96c3cbe8edac3fedf3ee19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:45:13:22:a9:ba:58:63:c1:83:d9:e0:de:
93:36:8c:7f:e9:95:1f:20:c8:60:85:7c:81:5d:0b:
9f:a9:c5:cd:23:ce:26:d2:01:ae:40:36:ed:1b:3b:
61:cc:a2:4c:47:76:a5:8d:5b:27:37:e6:7e:37:63:
62:cf:43:e2:05:50:cb:a0:aa:08:c9:77:6a:c0:a5:
fc:74:53:b5:5e:9e:85:15:6f:88:3b:03:e4:9b:48:
0e:c9:1d:22:18:48:18:df:8f:43:ba:b9:01:ad:11:
d8:7e:18:1d:ed:f2:e4:a2:30:09:91:f6:f7:b0:60:
38:ef:d7:fa:19:37:cb:2d:17:58:cd:19:13:c1:e1:
a2:8c:1c:50:99:e9:fd:69:63:77:6b:ad:4a:32:6f:
f2:dc:0b:28:7a:71:6f:99:0a:b8:c7:48:64:0c:1b:
e1:1c:2a:82:f3:13:c2:9c:b0:5e:85:d5:75:c4:a8:
05:61:db:08:ea:6c:2a:75:62:ad:24:95:bc:76:48:
ce:28:a5:56:f1:2e:70:3b:57:a7:f8:f2:8e:64:7e:
cb:5f:e5:0d:10:9a:ae:15:36:3e:37:45:a1:e5:06:
1a:ab:5c:38:d2:d0:b1:e7:14:5c:5e:a4:2b:fb:90:
f7:3f:e9:9e:de:61:88:e1:da:31:9d:91:51:2a:72:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E9:34:61:92:2D:98:C4:7B:96:C3:CB:E8:ED:AC:3F:ED:F3:EE:19
X509v3 Authority Key Identifier:
keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:60:e8:32:73:06:51:a7:7f:c1:b9:b0:91:52:4d:67:3e:2d:
99:48:c4:e7:00:61:ff:c8:40:8d:41:f0:e1:fb:27:56:b6:12:
43:13:4d:2e:62:68:e5:fa:a9:26:14:5a:b3:ec:7c:c6:81:b5:
62:f0:7f:3f:de:0b:c9:e5:1f:53:53:b7:4f:17:37:b5:89:ea:
de:18:2a:84:98:ee:82:3e:2e:e9:b1:4e:77:9b:06:fa:4e:61:
d2:84:3e:6f:d4:be:16:81:0a:b6:90:80:42:1e:33:e8:e4:04:
f6:fa:81:82:ba:30:89:c7:ed:43:e6:c0:16:06:35:a7:1d:30:
29:0f:85:a4:1f:dc:d0:72:70:29:7c:2e:1e:46:0b:52:8e:66:
5d:99:5a:fd:95:6a:bf:d3:9b:dd:04:8a:1e:48:2a:5a:47:61:
ea:c6:20:64:f6:f3:da:48:8a:8f:d5:9d:2b:eb:46:df:31:6f:
d4:d5:3b:ed:49:bb:cf:6c:fb:02:63:33:dc:1b:0b:b6:1a:fa:
ef:59:ba:07:c8:b3:ce:b5:0b:4c:e3:54:40:6c:93:5f:79:c3:
01:d7:83:ab:89:2f:03:23:57:dd:3a:d1:72:70:29:ff:9d:75:
04:a5:66:ca:cf:6b:3e:d9:1f:d8:4c:71:81:9f:af:7c:68:e9:
e6:b5:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:12 2025 by rpki-client