Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier: Cle2Z5kEh6H3dEu9wrdybtURGgsZhlsj/HPJ7o51fHc=
Subject key identifier: D5:62:1D:C9:DF:63:0C:E5:7C:38:FA:EC:6B:9B:63:C0:31:02:6D:A8
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial: 019888B26912DEA68B852F1E9F36D9BDE28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number: 0127
Signing time: Fri 08 Aug 2025 08:00:50 +0000
Manifest this update: Fri 08 Aug 2025 08:00:50 +0000
Manifest next update: Sat 09 Aug 2025 08:00:50 +0000
Files and hashes: 1: 28vwddYYnn-BejsfrgsHjSgfzQ4.roa (hash: UAZDR9r94HPPd9OVOKpoGQIjU2FUXfM+rJVeuMGWG0Y=)
2: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: Zgh8KnBPtN+uGQ5KFf1Av8bPWOczYF0Pq2zeSuwuT0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:69:12:de:a6:8b:85:2f:1e:9f:36:d9:bd:e2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
Validity
Not Before: Aug 8 08:00:50 2025 GMT
Not After : Aug 9 08:00:50 2025 GMT
Subject: CN=d5621dc9df630ce57c38faec6b9b63c031026da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d8:10:06:20:92:53:16:9a:bc:92:2a:56:b6:
4d:2e:09:ca:59:1e:16:a2:70:eb:f2:64:81:92:fe:
43:c9:9b:a5:4c:d7:dd:01:b0:0b:5c:00:35:cd:e6:
4b:d5:42:39:e9:8b:c6:65:66:0d:54:46:03:b8:1c:
b1:35:c9:da:bd:2a:6c:1f:09:3f:2a:c9:bc:2e:3a:
57:d5:dd:24:0d:43:43:0e:f1:11:07:c4:5b:57:17:
ac:45:4b:7c:65:48:b4:9d:b8:d1:4c:1d:f7:13:62:
58:c5:1c:de:86:18:05:8a:a9:48:a0:52:bb:6d:9b:
89:ff:ae:f7:ec:6d:61:5b:50:02:95:d0:4f:66:c2:
df:bb:d4:77:c7:b1:36:f3:5b:49:97:35:ce:a0:c1:
54:5d:93:79:1b:89:5a:ca:0c:bb:b1:ea:bc:0d:d8:
3c:9b:85:29:88:82:6e:76:7c:c1:a7:64:da:fd:ad:
07:ec:6c:e3:df:6d:2f:ba:38:44:19:c1:49:fa:d2:
84:cf:e8:c9:c2:70:27:26:f7:14:cc:37:f8:92:27:
4c:29:ed:37:40:4c:4b:fb:8b:4f:31:6e:59:fd:ff:
95:32:fb:6e:e4:0e:bd:ab:52:23:51:51:d2:20:f7:
15:c1:c4:c1:b9:9a:20:2e:35:6c:a3:ec:98:ec:92:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:1D:C9:DF:63:0C:E5:7C:38:FA:EC:6B:9B:63:C0:31:02:6D:A8
X509v3 Authority Key Identifier:
keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:30:94:71:bf:4c:70:31:b8:13:6d:02:fb:c1:60:77:22:21:
aa:28:17:c1:20:4a:72:dc:e5:36:7e:89:08:e1:3d:7a:d7:73:
3a:32:1c:8f:a1:2b:c8:e2:70:f7:95:3c:cf:60:b1:68:dc:13:
04:2f:9f:6d:ac:c5:75:05:8a:d0:07:74:39:09:18:28:68:c3:
25:d5:9d:35:08:3d:c8:a0:f3:fa:a8:00:2f:d7:77:28:cd:e1:
10:c9:f4:fc:64:84:66:0e:a7:74:75:f6:e6:69:fd:b9:78:94:
49:24:77:e2:65:b1:59:95:07:73:8a:96:12:37:db:43:8a:57:
13:fd:9d:c3:a9:18:6f:b5:16:59:ae:ba:26:ec:62:e0:58:fa:
71:a7:32:97:c0:08:69:73:25:04:2c:45:27:cb:c7:07:99:33:
ce:e6:7c:46:c6:7c:a6:2d:34:5e:a3:b5:b8:d1:dd:83:c4:c9:
9e:7b:f7:c5:2e:0f:02:2c:99:20:3d:02:ff:df:9d:2e:fc:7b:
82:b0:01:01:ed:00:b0:7e:43:2f:fa:51:c0:ea:13:a8:4e:51:
13:83:dc:69:7b:a9:fc:68:c2:fc:69:82:0a:78:3c:26:1f:e8:
1f:66:79:7d:52:3e:12:16:a4:09:8b:8e:47:f3:a9:dd:75:d2:
e1:32:50:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:48:46 2025 by rpki-client