Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json)
Hash identifier: 0frQNHQhZbwJoCZnImUUWmXXOxf5EaxvsbexR7BeG2Q=
Subject key identifier: 97:92:4C:C4:3A:88:CE:0D:D2:EE:C2:8B:A7:02:B4:CC:62:93:54:9E
Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b
Certificate serial: 019879AE74001889B5794E4C91496F70088F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
Manifest number: 141D
Signing time: Tue 05 Aug 2025 10:02:12 +0000
Manifest this update: Tue 05 Aug 2025 10:02:12 +0000
Manifest next update: Wed 06 Aug 2025 10:02:12 +0000
Files and hashes: 1: 8selzdDBcWCOuVgfCsfOfBE5_CU.roa (hash: p2O5tRV4Q6XqdGNl3EZYTg9FiLjgZdrbbWtNR0sxUHQ=)
2: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: q3A/4HZ/qCHAWsEj6nSR1ks5VfNCGsZMpKNg2jk0oQU=)
3: igZS5QD16n_qiKkVlzEX0Nd3KpQ.roa (hash: s1QAXQBqaJ5SElDe9N3pzr6SkITHndqfwDSrBBBJ6v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:74:00:18:89:b5:79:4e:4c:91:49:6f:70:08:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b
Validity
Not Before: Aug 5 10:02:12 2025 GMT
Not After : Aug 6 10:02:12 2025 GMT
Subject: CN=97924cc43a88ce0dd2eec28ba702b4cc6293549e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:44:bd:10:f7:c2:0a:93:5e:db:78:35:b0:
b5:2c:38:67:e9:87:ce:ba:5f:e6:da:cd:6e:56:8c:
ae:4c:0f:c7:eb:08:dc:72:0c:be:e7:aa:53:b4:2b:
99:61:71:f3:9a:c6:da:6a:3d:72:ab:f1:f2:b2:6a:
62:5b:25:ec:0d:1c:ab:22:e5:9f:13:f4:fb:50:60:
ff:5d:45:a1:38:b9:d9:2e:bf:b9:17:b1:c6:db:8a:
11:f8:3a:8d:b9:c1:bb:1f:97:db:af:2e:eb:8a:30:
41:a5:e5:57:20:a0:99:6f:ea:bd:20:fc:f3:f9:7e:
3a:e1:71:f5:47:2c:56:81:2b:5d:09:14:45:cd:c8:
37:c1:3a:55:06:e1:4b:15:83:43:5f:0d:71:9b:e1:
8b:d4:9f:eb:71:f1:18:c2:14:b9:ae:1e:e5:90:98:
66:ed:c3:8e:19:9b:59:fc:3b:30:d9:72:26:45:5f:
71:cb:3d:62:23:dd:bc:19:13:e0:d5:ed:c1:6d:5e:
de:b5:c5:21:45:f1:43:fb:08:9a:b8:b8:33:17:89:
f7:78:0e:f0:d4:ad:1e:e5:cc:40:e3:11:f2:93:f5:
ff:63:b2:5d:66:84:86:88:a6:1c:81:65:50:25:de:
e2:2a:80:20:29:c9:7d:a5:f4:79:a6:af:bb:e0:99:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:4C:C4:3A:88:CE:0D:D2:EE:C2:8B:A7:02:B4:CC:62:93:54:9E
X509v3 Authority Key Identifier:
keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5b:40:2e:c5:2a:8b:29:4a:c4:6c:bc:69:0b:d0:b0:eb:06:
d0:3b:88:25:07:bc:0d:33:f8:75:95:8d:29:dc:81:28:6e:43:
0f:dc:f0:9d:15:ef:db:57:9e:6d:b2:da:60:e0:94:33:c0:8c:
c8:84:51:e7:30:ef:1c:cb:d6:80:de:ce:33:64:c7:f3:1c:20:
24:28:b8:cf:a0:77:cb:1d:09:7f:a8:fe:7c:b1:76:60:ea:e2:
b0:ae:6e:21:af:bc:5a:0f:46:26:b5:43:1e:c4:f9:49:fe:20:
e7:b6:4e:37:3e:2d:ec:b2:0c:85:e3:5b:7e:bc:e0:9c:46:89:
0e:29:c8:42:38:52:0d:d2:93:e5:56:88:6f:6e:a8:da:36:11:
b5:bd:d7:89:e0:91:5b:27:bb:8a:1b:04:da:08:8e:b2:f7:fc:
9f:d5:c3:b6:5d:20:0f:87:34:25:b1:1d:13:0f:1e:e4:23:86:
c9:71:70:7b:4e:73:48:99:bf:72:55:21:71:a0:1b:64:6c:19:
53:be:48:9b:90:57:a3:54:e5:27:7d:ae:80:e5:37:a7:0c:dc:
8f:07:a6:88:e3:26:26:ec:49:72:58:d5:df:95:80:c2:a4:61:
17:8f:7f:3f:07:12:dc:1d:6b:c2:21:cf:a6:c5:e4:b4:27:0e:
0b:95:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:30 2025 by rpki-client