
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File: WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier: YEiFeDSeW0SPwytWrwd4ttQkfSGxF7VREyBnSGMxof8=
Subject key identifier: 58:AD:ED:BF:2D:A5:AF:53:65:4B:FF:E2:55:71:B1:32:33:66:9A:75
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0198819DB8EE8F5352D93F582FB097F47B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number: 162E
Signing time: Wed 06 Aug 2025 23:00:53 +0000
Manifest this update: Wed 06 Aug 2025 23:00:53 +0000
Manifest next update: Thu 07 Aug 2025 23:00:53 +0000
Files and hashes: 1: UZBTwDwhsdeE6L8tM7LMgk2vcQQ.roa (hash: c7iWfc2h0xfZuOGmHIC37VdlCYWmVoLvyubnSxmqlrQ=)
2: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: /gKm+b8huggGpd4TjmWzjaP+AjIQ2SRF3XeMrhJAVtw=)
3: gfUQxZf716-HSp7xPfSbqE7VvUQ.roa (hash: r1nBveRpIdnYjv06tCcb1Umx8XxX6zqSuPOa3WYDsmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:b8:ee:8f:53:52:d9:3f:58:2f:b0:97:f4:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Aug 6 23:00:53 2025 GMT
Not After : Aug 7 23:00:53 2025 GMT
Subject: CN=58adedbf2da5af53654bffe25571b13233669a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:16:92:9a:28:82:58:a7:c2:4b:42:14:30:
61:7d:db:01:8f:24:08:fa:52:e2:63:8c:5d:4c:26:
93:32:7b:67:22:31:00:f1:8c:23:8c:65:97:d5:b7:
7f:86:9a:c6:48:ab:27:13:e5:68:ce:96:ed:02:f3:
c8:d8:81:60:df:ce:fa:26:7c:99:bc:6a:55:ad:99:
dd:29:a5:25:ca:d2:3b:8d:f8:fa:84:b2:05:40:c9:
fc:62:db:ff:08:db:45:93:3a:9f:cb:94:05:32:ab:
93:7d:ae:0c:c4:21:18:08:66:4b:0a:30:a3:eb:ed:
ca:a1:38:99:55:7f:19:9b:34:cb:80:96:c8:45:25:
80:06:fd:9e:67:40:dd:57:e9:fe:53:bb:c2:ee:5c:
15:ca:e7:42:8f:f6:fc:4d:1d:07:af:58:3f:59:5b:
84:ec:6c:c3:44:6f:74:c0:52:7a:e7:4c:29:d0:18:
6e:ac:23:f1:f8:34:40:ef:48:5d:f1:94:52:1a:0d:
11:17:0e:78:66:fe:1b:3d:6f:4c:93:f5:cf:0c:44:
df:15:8a:74:95:2c:c1:48:44:87:3b:f8:06:37:53:
46:04:4e:0a:aa:da:f6:1a:58:6b:23:d3:16:ad:48:
ca:f1:4b:99:ec:58:08:28:ca:e0:69:94:d2:45:7c:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AD:ED:BF:2D:A5:AF:53:65:4B:FF:E2:55:71:B1:32:33:66:9A:75
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:97:7d:6c:dd:8c:3d:01:fd:b4:52:22:22:34:ba:0f:64:45:
86:c3:53:b2:d6:07:e7:3d:6e:cc:96:12:bf:21:7a:62:0c:f5:
9c:0b:b5:95:b8:2b:34:8d:09:83:0f:ed:59:fe:a9:f9:16:c9:
b1:dd:18:68:79:cc:0b:b7:f4:a2:92:b9:0d:75:c8:89:6e:31:
7c:6b:67:86:b9:58:e5:61:f9:c9:b5:fd:3b:d0:6c:c4:23:fc:
32:a7:e8:68:71:25:2d:e0:48:6b:54:0d:f8:29:91:61:a1:87:
22:6f:2e:fc:96:70:a0:3c:06:8e:b8:61:99:14:cf:93:62:76:
e5:a0:8d:20:8e:9c:32:24:44:d8:58:d9:ad:52:70:6e:5f:8d:
2f:2f:dd:ab:6b:42:fe:df:fe:4e:57:93:0d:59:6d:09:45:32:
df:78:c1:e9:7c:8f:28:8f:f2:52:60:ac:d7:8d:5f:28:82:ea:
6c:5f:e0:9d:63:f7:95:be:c6:c6:99:f1:7d:23:e6:cc:58:de:
34:92:5d:8b:d5:53:72:01:09:e5:f8:22:26:80:a2:28:d9:5d:
b2:29:a3:ec:d7:ed:72:07:85:d3:f8:a2:5b:c8:73:54:cd:2a:
cb:e6:53:1a:a2:ad:58:28:b4:ea:d5:39:00:7e:cd:32:15:68:
6f:34:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:14 2025 by rpki-client