Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: LxBOZh91FQLqhgFedixP8Gi3pRppBUZ0NuOqYXAPyf8=
Subject key identifier: 1C:D1:B1:2E:47:C5:C2:EA:98:14:CA:68:0D:11:5A:72:B5:6F:A9:0A
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 0198906BBBA831EA282228771CB1E246A8AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: DB
Signing time: Sat 09 Aug 2025 20:00:36 +0000
Manifest this update: Sat 09 Aug 2025 20:00:36 +0000
Manifest next update: Sun 10 Aug 2025 20:00:36 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: 5zIeKmPYzvN0f0lcl2+rL15y5w7jq5BpzScE5Mja4SQ=)
2: wNDSq8yZE9PBcRFzNVbL2mjY9tI.roa (hash: +CAo2P8QJyLpdrdtqSl+fQIj2IGhG8nr3/YTjB35bgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:6b:bb:a8:31:ea:28:22:28:77:1c:b1:e2:46:a8:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Aug 9 20:00:36 2025 GMT
Not After : Aug 10 20:00:36 2025 GMT
Subject: CN=1cd1b12e47c5c2ea9814ca680d115a72b56fa90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3f:28:22:35:96:53:ca:8c:8c:3c:a0:49:df:
2c:dc:fa:f3:8f:38:90:c0:f7:2e:a3:33:e0:14:5e:
c7:9f:8a:df:57:3a:5a:96:a2:93:9a:19:0e:aa:82:
8c:01:55:7f:27:66:f5:20:b1:68:b8:27:22:7e:2f:
ed:55:03:bf:15:a0:e4:09:83:00:90:b2:e5:c1:83:
04:62:8e:5b:e4:cd:91:94:d3:50:30:ab:fd:8e:b0:
4a:42:3b:12:93:3f:bb:2d:c5:dd:c5:21:ff:e0:ba:
50:2e:fb:ea:14:81:42:f4:ee:a4:59:90:bd:90:2a:
37:57:66:52:3e:0f:f8:d5:7b:c9:f5:5d:26:7c:39:
43:9e:7f:50:fd:2d:c9:50:be:ea:bf:1d:55:64:c4:
69:48:79:48:89:c1:ab:3a:85:3f:60:be:78:ef:68:
25:68:5c:7b:c3:a0:09:c8:2d:6b:a9:f5:df:ec:1a:
2a:7d:ac:87:90:27:3c:4e:24:5a:51:7f:de:6f:c4:
db:0e:c0:88:9f:47:09:8f:c8:9f:01:5f:86:f6:be:
80:12:db:c4:c6:34:a9:54:cd:da:e6:f5:47:e7:88:
17:15:29:99:13:b6:d9:e3:52:04:fb:1e:ec:c4:b9:
ca:cc:ce:3c:78:3d:63:c5:77:a5:f6:28:44:6e:33:
b6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:B1:2E:47:C5:C2:EA:98:14:CA:68:0D:11:5A:72:B5:6F:A9:0A
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:47:91:4a:73:7a:c9:8c:38:3a:8a:32:23:41:dd:c0:86:b4:
ab:0c:15:82:41:11:00:93:72:06:8d:28:db:f8:f6:ca:81:d1:
c1:f1:00:72:bc:bc:ab:62:71:0f:82:20:38:88:b6:8a:b8:a0:
56:c2:7a:dd:76:05:c7:a4:68:9b:de:07:f8:f7:4d:c6:34:a0:
26:0f:4a:b0:d5:5a:60:cf:2b:f9:0f:97:c7:01:53:f9:25:03:
df:8e:48:06:cd:4d:01:1b:70:4a:09:90:e4:6f:bc:86:00:db:
9e:13:e5:92:6c:cb:c2:7e:28:ea:21:cd:4f:9c:de:63:14:51:
17:5b:57:15:45:eb:8e:82:1d:42:bd:18:b8:6a:6a:94:83:cd:
40:f0:66:bb:ef:c0:3f:f4:a1:72:07:65:34:65:bf:88:15:84:
80:a6:8a:6b:93:f6:b7:b5:f8:6c:27:c3:ed:2d:63:2c:48:84:
bf:ff:fd:fc:d5:1c:52:21:73:2e:60:0b:3b:1c:02:46:c1:16:
c4:60:14:8d:df:82:dd:6d:60:d1:bb:81:d6:5b:39:f5:22:9d:
c7:c3:68:f7:07:cc:5e:04:0c:66:f5:5a:bf:30:8a:50:84:24:
f2:f0:f3:c3:36:cd:cd:8c:3d:9e:8c:7f:16:e8:87:54:13:a3:
d7:7c:34:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:01 2025 by rpki-client