Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier: 1iOO54/0ZPowbZbTz+fqImI9+ux2YTCFrINrFjEmqFc=
Subject key identifier: 45:B5:60:92:17:C3:64:A2:26:22:81:BC:9E:E7:38:28:F9:26:86:92
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer: /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial: 0197B5FC736A60FBC2E007DE78985FAB61DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 10:01:49 +0000
Manifest this update: Sat 28 Jun 2025 10:01:49 +0000
Manifest next update: Sun 29 Jun 2025 10:01:49 +0000
Files and hashes: 1: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (hash: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=)
2: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: p5yH+o5Gs3GeU6Xd0001zswwFvKDLCCVZy+E6QuPnKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:73:6a:60:fb:c2:e0:07:de:78:98:5f:ab:61:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
Validity
Not Before: Jun 28 10:01:49 2025 GMT
Not After : Jun 29 10:01:49 2025 GMT
Subject: CN=45b5609217c364a2262281bc9ee73828f9268692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:2f:6d:a8:cc:98:8a:d1:0c:b9:0e:6e:46:
6f:b5:2f:32:8e:f2:6f:73:fe:13:14:fa:a2:3f:17:
75:4f:36:9e:e8:16:71:95:a5:c9:e1:6c:93:85:d9:
c1:6e:e6:db:cf:1c:e0:b0:1e:6a:8e:45:63:7b:bf:
c9:bd:b2:fe:81:e8:3b:93:ee:ca:6c:c5:9d:31:3d:
09:6e:35:21:14:f0:77:01:f1:dc:ee:37:12:eb:b0:
dd:e0:3e:26:5a:bd:23:64:17:25:2a:a5:cb:d5:61:
90:16:1d:55:80:80:e0:17:6e:ab:d7:85:ba:c4:d0:
44:8e:98:f2:37:cd:8c:ce:0c:5a:1e:04:42:0d:b5:
79:9d:70:a9:2e:7f:8e:b6:6a:ea:f9:bd:35:60:8b:
59:80:b1:49:d8:1a:ff:73:c2:4b:91:0f:d4:b3:f8:
5e:6a:08:e6:a0:5f:d0:aa:74:01:d7:a7:88:5c:ed:
8c:55:59:ea:4a:ee:ea:73:ad:a3:ca:76:52:2f:39:
9a:d9:1e:e1:41:c9:b4:3b:99:f9:bf:80:1f:17:a7:
56:56:d6:5c:91:ad:0b:9b:93:63:8b:b4:03:d1:14:
fb:67:5b:63:f3:e9:19:28:7a:ac:ee:a4:06:31:ce:
7f:4e:db:57:10:86:37:f4:3f:ef:27:60:2f:2b:a5:
ab:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B5:60:92:17:C3:64:A2:26:22:81:BC:9E:E7:38:28:F9:26:86:92
X509v3 Authority Key Identifier:
keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4c:48:2a:ab:13:c7:d3:c6:24:ce:ea:f1:07:dc:7b:06:1d:
19:a1:a5:da:0c:18:12:47:4e:bd:f5:d9:6f:f1:d1:58:3e:3a:
21:d1:16:0e:81:8c:41:76:34:08:30:96:1b:3d:c9:2b:f7:8f:
4f:49:63:48:aa:dc:ed:91:58:a0:8b:57:f6:fd:51:c8:0e:3f:
6d:7a:b0:68:af:1b:29:c5:41:c8:b0:ca:ed:00:25:df:a1:a7:
76:47:c2:5f:d0:a1:a3:af:bb:63:80:10:67:30:3d:41:df:4e:
8e:b2:6d:fd:72:ff:f8:20:4d:a6:d9:2f:80:d6:90:37:9a:6a:
c6:5a:18:77:10:eb:77:3f:04:e9:f1:70:fb:28:81:a5:2f:35:
27:12:81:96:a2:ed:0d:36:34:fe:dc:2f:f5:93:1d:41:cd:a0:
29:b5:9d:9e:a4:f0:d0:54:21:9a:67:69:1a:19:c6:43:fa:a5:
3d:5d:9c:1f:d4:48:11:4e:a0:3f:9d:bd:5a:ee:a9:33:ae:43:
b9:93:5a:9a:9e:bf:e2:a2:49:3e:79:50:f2:1e:51:44:38:5f:
e1:bc:fd:6e:3b:e4:3c:a1:36:42:90:78:a1:f4:94:76:23:b8:
18:cd:83:cc:f4:cb:bd:c3:63:95:8b:29:f0:0a:7c:5f:5b:d0:
2c:21:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:38 2025 by rpki-client