Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: ZNTOxY/+pS/bBYZhVdRQ9eWKjMnNV1OodtBRb2dS6oM=
Subject key identifier: 00:3F:B0:D9:8E:04:D4:92:C4:1A:57:76:72:54:83:9E:6E:0B:F9:46
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 0198D705F028298B60341D5F3A067D511FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 0829
Signing time: Sat 23 Aug 2025 13:02:27 +0000
Manifest this update: Sat 23 Aug 2025 13:02:27 +0000
Manifest next update: Sun 24 Aug 2025 13:02:27 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: I4rNxuEfyNU35aJ1k9BoE2xOAVnFRzKTPgy7oro/zi0=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f0:28:29:8b:60:34:1d:5f:3a:06:7d:51:1f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Aug 23 13:02:27 2025 GMT
Not After : Aug 24 13:02:27 2025 GMT
Subject: CN=003fb0d98e04d492c41a57767254839e6e0bf946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f7:c7:3b:65:75:9c:02:09:87:f0:03:dc:77:
fd:c8:9e:96:29:e6:9e:52:8a:75:4b:e1:64:11:b8:
2e:5a:98:20:c3:18:3f:0d:1d:94:82:ec:ae:10:47:
c3:02:6f:a8:f4:15:e0:7f:2b:42:5a:ac:02:72:b3:
a5:d6:c8:9b:53:30:0d:79:7f:9f:59:ba:cd:52:62:
44:5a:d1:26:b0:b5:e3:18:63:75:21:cf:9b:31:77:
1f:c4:c0:ee:1f:4b:c4:b1:9c:d0:1c:6f:f7:7f:a7:
b5:a8:bb:fb:95:2b:15:a5:7a:00:a2:f0:84:6a:f6:
7f:e5:61:39:6c:13:66:1d:5d:19:dd:df:28:35:e8:
e9:40:2b:d9:38:0e:a8:4f:7c:b2:6b:ac:08:16:47:
a9:76:62:6f:a4:bf:e4:31:a3:ae:95:74:cb:0b:6e:
6d:ed:da:ec:79:02:ce:90:f9:64:20:4a:68:90:bf:
3c:0e:e4:55:f6:fa:21:f8:75:7e:58:2a:aa:a9:8c:
90:f4:ec:60:3d:b5:4d:e4:07:58:7c:a0:f7:d8:24:
8e:a0:50:ef:3e:72:64:07:b2:08:82:ad:52:b7:d6:
de:eb:59:6b:b7:21:f1:bb:3a:1b:d4:ca:fa:7e:ec:
f9:63:06:f2:34:bb:b3:18:13:28:22:94:32:0c:2b:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3F:B0:D9:8E:04:D4:92:C4:1A:57:76:72:54:83:9E:6E:0B:F9:46
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8a:d9:e9:90:14:1b:8a:d6:c3:34:0f:10:4e:84:39:3a:a7:
17:a0:73:b7:7c:7e:c4:55:d3:26:a4:58:0f:b9:90:8a:a5:72:
14:b9:29:75:19:8b:93:c1:c3:b2:7b:81:20:4f:5b:87:81:6d:
b4:75:b9:6f:c3:08:3c:7e:e0:c2:10:72:3e:6e:50:3f:a3:8f:
6c:1b:16:06:dd:3a:c1:ef:32:8c:3e:39:c5:bb:1f:04:01:ad:
d4:3b:75:43:3b:6b:1c:1a:09:48:08:b8:9d:86:dc:89:17:75:
d7:7c:34:44:e4:14:96:76:15:53:c9:b4:5b:db:45:ee:00:d0:
91:7a:c1:ba:cc:3a:4d:a2:72:69:7a:33:0d:8d:9e:82:54:e7:
96:1c:26:64:83:9c:09:5a:27:28:3c:64:c2:53:e7:7c:8f:df:
e3:14:6b:88:05:e4:7d:f7:3b:24:8e:9d:1f:9a:c7:df:30:4b:
c5:a4:31:ab:21:bf:ec:4f:fc:95:0a:ad:ce:c0:fb:aa:58:ec:
bd:f3:e6:58:69:cd:07:ba:16:b1:3a:a8:f2:ea:e2:e5:7e:c2:
32:49:41:57:79:44:7b:59:4e:ce:df:bf:27:07:61:f9:55:a1:
51:7e:e6:8d:af:bc:b1:9f:2d:18:1d:49:d3:28:78:d4:17:49:
f8:78:64:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:45:41 2025 by rpki-client