Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier: o9xauWbeLHlvDg/stnQOtxEJ1PeqoKifFuERf55IPSY=
Subject key identifier: 3B:88:3C:E0:C1:49:BC:00:87:14:D2:6E:F8:38:2D:93:4A:8F:1B:DC
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial: 0198D5BC4CE7326D92FFD6E4194C36E5F540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number: 0502
Signing time: Sat 23 Aug 2025 07:02:23 +0000
Manifest this update: Sat 23 Aug 2025 07:02:23 +0000
Manifest next update: Sun 24 Aug 2025 07:02:23 +0000
Files and hashes: 1: QEzw4CiK6CiHgldhyTg0boyDFI4.roa (hash: ffDuLw/6EUMQBC9wlTrHOAlboOryP+rRmytNZtNkFZU=)
2: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: BLG8MNo418gC7TJDhicpeQJvs6zSq8OVq5jKEKgAsOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4c:e7:32:6d:92:ff:d6:e4:19:4c:36:e5:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Validity
Not Before: Aug 23 07:02:23 2025 GMT
Not After : Aug 24 07:02:23 2025 GMT
Subject: CN=3b883ce0c149bc008714d26ef8382d934a8f1bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:17:05:af:49:e0:8d:0d:89:b1:ed:e4:85:ce:
72:93:7e:d5:40:c9:bc:51:25:5e:31:d0:a5:ab:f1:
fe:5e:70:1e:32:86:4e:e5:eb:01:5b:ca:91:2d:5e:
2f:c9:d0:11:16:1f:15:1c:b4:c2:7e:b1:43:49:0c:
07:41:7b:07:cf:16:b0:02:00:9f:97:b5:4f:ba:ac:
d9:6a:22:d9:53:93:8c:50:b9:4d:f4:a1:57:ac:0f:
98:5f:0f:c5:82:4a:38:af:5e:6c:fe:44:83:45:89:
42:0a:13:76:17:8a:55:4d:d3:eb:c0:d6:c1:59:51:
8b:06:c4:1b:32:db:bc:bb:b3:07:4b:86:2d:eb:03:
e4:08:8d:f4:c8:bf:3e:87:9c:cb:21:92:4c:9c:75:
4b:fa:50:05:d1:d7:57:c4:23:3e:da:fd:b1:35:8b:
41:74:9d:31:52:74:b0:b9:01:7d:48:be:dd:f6:22:
69:f5:26:f1:a9:28:eb:06:6d:59:5a:bd:75:8d:b2:
b8:e3:8e:0d:e9:b9:79:c7:b0:57:84:d9:08:f9:11:
e7:63:e1:c2:eb:8a:a9:c7:2d:4c:cd:ea:d0:4e:80:
02:6b:03:6b:1f:37:0c:23:73:09:15:26:c6:65:26:
94:56:22:14:1b:40:24:6d:15:ce:65:8a:05:95:e3:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:3C:E0:C1:49:BC:00:87:14:D2:6E:F8:38:2D:93:4A:8F:1B:DC
X509v3 Authority Key Identifier:
keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e0:d5:89:34:25:fb:57:ea:57:f2:a8:43:2f:d9:f6:26:3b:
cf:ef:ed:9a:1d:04:07:76:1e:78:a7:e1:e1:71:35:e3:76:05:
f1:9a:0b:80:a2:27:89:0a:cc:27:ce:46:a7:dd:df:c1:2f:b3:
a1:44:2c:36:66:79:a3:fe:96:13:3f:41:8d:d5:36:c2:83:65:
fb:5c:35:18:22:c1:5d:50:8e:da:21:67:2b:67:67:e8:2c:d1:
9b:2b:83:82:ba:18:c0:ed:dc:67:a9:01:b8:7a:27:0e:cf:04:
e8:e4:0a:68:51:69:ec:fb:75:0b:b1:f6:62:d4:33:2c:13:91:
40:69:c4:6c:2b:03:21:f4:c3:a5:ab:17:fa:73:6a:a9:35:58:
2c:1b:a6:65:b5:55:64:4a:41:65:0b:50:c3:5b:a1:e0:97:a0:
19:14:38:2b:bd:3f:49:4f:c7:ec:45:0a:96:ff:45:71:94:76:
a3:50:ff:dd:2a:42:b3:92:48:43:c4:62:c3:d2:cb:11:73:49:
54:83:3d:73:3d:52:63:87:f1:99:14:f4:ea:15:01:f7:4c:01:
19:1c:49:00:27:26:45:c6:09:c3:84:95:fb:dc:4d:7f:61:4e:
d2:7d:4f:8e:fc:57:67:24:7e:07:96:73:8a:f0:c8:43:f7:a4:
2e:40:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:31 2025 by rpki-client