Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
File:                     WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json)
Hash identifier:          tiAypQO2tmmIVwyXugt3Ul2zFn4OFcROTj94JpeCbHE=
Subject key identifier:   F0:51:8D:BC:9C:76:6A:B4:9A:23:F4:51:FB:3B:29:F0:96:C7:60:62
Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D
Certificate issuer:       /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
Certificate serial:       019768BC129DC5430FF7BF86DDE3C3936E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
Manifest number:          1588
Signing time:             Fri 13 Jun 2025 10:00:45 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:45 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:45 +0000
Files and hashes:         1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: XLDj5kSoIBTbGnDTNf4FCpw6Jad+HHkO9Ei9KEES9ng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:12:9d:c5:43:0f:f7:bf:86:dd:e3:c3:93:6e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d
        Validity
            Not Before: Jun 13 10:00:45 2025 GMT
            Not After : Jun 14 10:00:45 2025 GMT
        Subject: CN=f0518dbc9c766ab49a23f451fb3b29f096c76062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:33:99:bc:97:5f:2e:84:35:80:52:17:3e:62:
                    b2:fd:e0:d3:cd:c1:c0:8d:26:fb:54:d0:47:7d:ee:
                    09:d7:78:41:43:cd:0b:c6:a4:45:47:31:37:d2:bb:
                    95:28:d1:e0:9c:e1:c5:f0:90:57:ff:dd:a4:ff:6b:
                    33:a0:51:55:50:80:0b:47:09:f0:d6:89:86:f3:03:
                    f0:5a:a6:3a:4b:fb:ec:41:ad:70:15:32:1e:d2:87:
                    28:9e:af:3e:6e:d5:ce:ca:4d:b4:b9:ff:c2:f0:62:
                    65:6c:22:d9:03:a5:1b:04:a4:10:e7:61:fc:8d:e4:
                    dd:75:53:43:4e:b9:80:80:20:19:ee:f2:aa:94:cf:
                    de:77:53:7d:d9:c3:5b:59:67:34:2d:40:63:2d:6f:
                    4e:30:f3:74:7c:c1:c7:76:53:65:a3:99:46:0c:37:
                    77:f0:43:2f:03:55:1d:9a:66:5e:8e:52:cf:b0:d2:
                    31:5b:68:0f:f6:55:a1:31:d9:1c:bd:d2:fc:d8:46:
                    2a:23:58:22:8d:81:d4:d5:11:d5:01:58:a1:6a:47:
                    ab:6f:f7:65:e0:d9:f5:01:18:99:25:ab:f5:ec:bd:
                    58:5a:01:3e:b4:09:18:ed:c7:2e:f8:ee:34:8a:ef:
                    f5:8e:47:ed:cb:fb:94:14:dc:fd:34:97:1c:47:96:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:51:8D:BC:9C:76:6A:B4:9A:23:F4:51:FB:3B:29:F0:96:C7:60:62
            X509v3 Authority Key Identifier:
                keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c2:ff:1a:0a:7c:51:02:ba:a4:b3:50:da:68:1d:4c:ad:ca:
         82:c3:84:1f:1c:72:a7:bf:ff:6f:d4:08:81:c0:0d:e8:bc:5e:
         09:3e:fc:7f:65:3f:61:f4:49:10:1e:93:03:f2:57:0c:d6:6e:
         07:96:0c:9a:30:06:2e:43:4c:ea:78:df:d8:a4:df:54:fd:0f:
         95:35:bd:4b:d5:17:17:69:5e:d9:0b:ab:bd:c6:6c:bb:da:01:
         bd:33:8b:53:4a:01:f0:f2:f3:67:bc:e7:08:ea:2f:82:5e:ac:
         4f:d0:d0:31:e5:45:7e:a3:b1:c2:63:9f:66:9d:7a:8b:b6:77:
         2a:ab:aa:e7:7d:61:b9:30:03:98:5f:46:8c:99:0b:9d:e6:f4:
         0d:bb:c9:85:ea:1f:73:de:26:ce:d6:b8:6c:76:83:36:b1:9b:
         ea:39:66:75:dc:a7:57:45:dd:52:16:e5:1b:c4:d7:63:ec:89:
         a6:50:8a:d0:f0:e2:13:0e:22:45:51:e6:a6:39:d7:34:ac:b2:
         89:cd:ce:f6:bf:a8:d9:0a:09:f6:e7:4f:60:d1:26:6e:d9:a2:
         30:49:11:45:15:c2:46:7e:c5:fb:e9:d0:0d:8a:91:f8:9a:97:
         34:46:25:43:4d:f1:29:d7:40:e8:77:2e:7f:3b:92:24:31:21:
         22:7e:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:48 2025 by rpki-client