Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: GDaqkGIApj8K0popF8lnaTn5G90CUvmZ6JjPfQ3hNrM=
Subject key identifier: FA:EF:4B:69:86:25:94:B4:C3:A0:48:F9:36:2F:6D:BA:6B:92:28:27
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 019878D19486C5266C87CB3BC3D443BA1464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 1622
Signing time: Tue 05 Aug 2025 06:00:57 +0000
Manifest this update: Tue 05 Aug 2025 06:00:57 +0000
Manifest next update: Wed 06 Aug 2025 06:00:57 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: oYmdzh8Z0J5zvTlHYZ4z9WdGXE63EKZMF6xQWOoIIec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:78:d1:94:86:c5:26:6c:87:cb:3b:c3:d4:43:ba:14:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Aug 5 06:00:57 2025 GMT
Not After : Aug 6 06:00:57 2025 GMT
Subject: CN=faef4b69862594b4c3a048f9362f6dba6b922827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:82:9b:b1:17:e2:cc:29:17:8a:f6:a8:5b:
70:cb:44:ea:2d:5a:a6:43:54:ab:0d:3b:3f:84:e2:
98:f1:ae:b1:f5:00:2f:40:90:0a:1f:4c:cb:8b:8b:
66:dd:85:ac:eb:e3:bc:36:11:7b:67:07:70:7f:34:
60:ac:98:c3:97:9f:4a:2e:cf:02:03:90:cc:86:ae:
4a:a8:a9:a7:ed:98:f6:5a:49:17:1a:27:53:13:ae:
c7:b4:da:39:b5:4f:4b:fd:31:63:0c:83:5b:02:b0:
51:7f:be:6c:00:2d:40:c4:cd:97:7d:aa:80:24:f8:
92:18:b2:5e:8c:66:53:07:75:8d:52:e0:4f:94:e6:
ad:3b:f4:53:9d:f8:68:b7:15:32:49:60:f0:44:af:
ca:da:34:1f:70:c2:c3:e2:7e:e1:f5:9b:55:27:12:
cc:07:12:1d:eb:35:26:ff:67:bd:05:3b:51:6b:84:
ff:a2:83:66:d9:21:a3:35:9f:3a:4a:ca:90:2d:fb:
90:43:e8:63:d7:38:e6:1d:e6:97:a3:a0:29:b2:89:
7c:36:df:52:17:84:c4:a5:82:5f:46:23:2c:27:86:
d8:91:35:9c:01:df:6e:d3:75:ca:5c:78:f4:bc:26:
40:39:a4:8c:86:49:e4:01:e0:39:20:ec:f9:17:b7:
64:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EF:4B:69:86:25:94:B4:C3:A0:48:F9:36:2F:6D:BA:6B:92:28:27
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:af:20:29:72:41:2d:d3:9c:4d:ed:b6:7f:3c:98:e1:84:e0:
df:0d:99:24:c0:e1:7b:53:fb:d8:4f:74:63:fb:9e:38:df:e2:
dd:e4:8e:3d:bf:22:69:0f:ae:cb:70:e1:13:b9:2d:88:64:42:
91:20:50:9e:af:90:97:ba:22:f8:04:d4:da:c5:91:5b:12:28:
c0:d0:80:33:b2:05:83:73:8f:2c:d9:fa:7b:33:d8:df:54:b5:
d2:06:54:ef:9c:df:c4:e7:66:c2:56:ff:2d:1b:4e:93:b6:39:
df:53:af:a1:fe:4a:f5:c1:b1:d0:f3:06:5d:9d:6b:fd:4d:58:
78:e5:bd:72:a2:07:0a:b5:7a:f3:dc:a2:46:0f:3a:29:78:a9:
05:0e:fe:a7:0d:7f:d9:28:12:9e:5a:4c:99:cd:bf:62:21:d2:
a7:3d:e9:71:db:dd:c7:86:e3:9a:e9:22:32:9e:3b:c3:d4:53:
23:05:f5:a5:7a:ab:4e:9b:54:e0:3b:10:39:3b:14:d8:97:10:
3e:55:de:51:4c:09:46:02:c7:a0:64:c8:43:35:81:fc:b1:32:
41:1f:bb:bc:f1:7f:a9:e8:95:5e:58:39:9a:74:1d:b9:92:fd:
ea:a6:39:0c:eb:09:ed:db:54:aa:1f:fe:12:8b:76:57:25:a1:
cc:fd:4b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:15:49 2025 by rpki-client