Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: uQ8C97x4051GzVHYqN3u5ueqErSFcyW0/jNrPoHHixY=
Subject key identifier: 98:DE:1E:13:08:B6:B3:6D:CC:70:AB:6B:EE:2D:18:6F:09:F1:35:F7
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 0197688506E337FB66A32FF3AF758B6F7A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 1595
Signing time: Fri 13 Jun 2025 09:00:37 +0000
Manifest this update: Fri 13 Jun 2025 09:00:37 +0000
Manifest next update: Sat 14 Jun 2025 09:00:37 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: Cj9G4PlNuJP7Vxa9bUXsn2gtKq+V2g8oOBfNN9ZYEfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:06:e3:37:fb:66:a3:2f:f3:af:75:8b:6f:7a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Jun 13 09:00:37 2025 GMT
Not After : Jun 14 09:00:37 2025 GMT
Subject: CN=98de1e1308b6b36dcc70ab6bee2d186f09f135f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:41:3d:a3:68:2f:20:11:7f:fd:47:0e:a6:16:
2d:3f:66:da:7c:20:f8:50:f8:a1:e3:a3:19:89:ce:
8d:58:85:d6:3c:5d:1c:20:2b:c7:ee:92:dd:bd:df:
ca:4b:8c:07:98:76:7a:69:20:94:54:ec:0f:4c:80:
24:aa:ce:cd:05:4d:37:1b:43:42:0d:dc:42:ee:2e:
b1:12:2c:16:98:c7:a2:55:28:99:3d:ce:12:c3:08:
6c:af:13:21:a4:f0:cf:c9:d3:13:dc:9b:43:cf:d9:
27:65:c4:6d:7d:cd:0b:82:3b:54:60:cc:5c:5c:0a:
b5:c0:d5:13:9c:77:e2:5f:89:d8:db:69:a1:d5:db:
da:fe:8d:12:34:2b:d8:d4:72:87:2e:bd:e3:ee:75:
19:ef:94:a1:b3:28:40:27:bd:dc:fe:83:f3:15:73:
70:06:34:07:e2:12:b5:67:66:80:70:99:cb:92:7e:
51:42:ec:aa:b7:e6:ae:f3:35:20:ed:28:4f:8d:db:
8b:1d:7a:2a:8f:e2:43:89:3c:59:b7:34:06:0c:4e:
2c:7f:9e:eb:f2:14:a3:9d:3c:14:8a:de:ba:ab:fe:
d8:e0:42:a0:71:09:b3:f3:f2:58:01:18:51:31:58:
98:f8:16:22:67:8c:c1:2f:8c:a1:3d:92:cc:e2:a8:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:1E:13:08:B6:B3:6D:CC:70:AB:6B:EE:2D:18:6F:09:F1:35:F7
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:e2:62:17:cb:76:44:40:ae:ab:5f:5f:69:f2:1b:df:72:7c:
22:47:13:a9:c1:92:99:da:ee:8b:81:bc:cc:f9:77:e6:aa:ba:
f0:06:f2:9f:4e:83:d9:ef:a5:bb:b4:53:44:5c:66:ae:38:f0:
5f:71:f7:2a:8c:9d:9d:21:42:7f:ef:d9:70:b6:cb:83:f5:71:
dd:03:bc:26:30:75:02:8d:73:b8:1e:f1:8f:ec:9f:d2:10:59:
9f:8b:7b:d2:fd:a1:dc:b7:dd:b2:51:28:4f:0e:c4:10:0b:de:
64:3b:ce:a8:aa:5e:70:66:7d:a8:5e:fe:51:c3:a0:8f:f9:22:
1c:f0:e5:43:ce:14:a8:03:05:98:fd:d7:00:23:e8:e7:7f:49:
b6:69:f5:33:4f:c1:be:1d:b3:a5:72:3a:4f:93:ff:a1:ff:94:
df:ae:68:50:47:31:12:fe:fa:c7:a1:f2:16:ad:fc:0e:76:08:
09:8f:bd:89:5d:34:b2:f4:8f:9a:cb:b9:65:ab:96:d9:3a:1e:
bc:84:fd:7a:d8:91:31:9d:97:9b:a4:46:1b:d1:92:32:fb:7c:
36:87:f8:dc:c5:fd:4d:ae:87:2a:25:77:b9:4e:b8:2f:06:50:
d0:14:1c:79:88:24:2f:f9:d9:62:77:fc:17:24:4c:d6:b0:c2:
39:e9:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:06 2025 by rpki-client