Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier: AKSWxE4RdDQhj3/igT4Ma1aWv3OPnZTgwfwD7P3nJ6Y=
Subject key identifier: 37:BB:39:EC:C4:BB:4F:08:B4:E3:23:48:15:28:DD:DE:86:E1:C5:4C
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer: /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial: 01976C98E13E921C91E94775182A63187ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number: 1593
Signing time: Sat 14 Jun 2025 04:00:47 +0000
Manifest this update: Sat 14 Jun 2025 04:00:47 +0000
Manifest next update: Sun 15 Jun 2025 04:00:47 +0000
Files and hashes: 1: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (hash: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=)
2: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: 8l6ngD4MDTn1ObKMzR1yfwXNEifMsySflQxe5OlaYFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:e1:3e:92:1c:91:e9:47:75:18:2a:63:18:7a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
Validity
Not Before: Jun 14 04:00:47 2025 GMT
Not After : Jun 15 04:00:47 2025 GMT
Subject: CN=37bb39ecc4bb4f08b4e323481528ddde86e1c54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:92:aa:7e:ac:cb:04:c3:a2:33:3d:90:a3:
e9:41:d0:ba:03:20:a3:5a:fe:f1:c6:f2:95:80:fc:
1f:db:c7:ff:3b:ce:d7:6f:06:d9:c1:cf:20:31:86:
76:5a:0b:a0:37:01:ed:25:ed:c6:9c:25:58:03:2b:
a5:4c:5f:8c:3f:f1:41:98:7a:41:67:cb:03:7f:b9:
02:62:89:af:00:8c:de:64:d6:9c:fd:43:e9:8d:54:
b0:9b:46:15:55:7f:65:c9:e5:d7:7a:e2:93:12:53:
5f:6b:7d:51:93:38:5c:98:7a:73:cb:d6:6a:e8:e1:
45:95:01:96:b4:38:a1:9a:91:37:52:7a:c2:e1:1b:
40:0d:6f:2e:51:1e:b1:64:c5:a5:d9:8c:06:b0:3a:
0b:d6:b4:d1:ed:fb:b1:e6:50:3b:3e:00:8e:3c:cf:
f2:b3:20:ec:a4:83:f7:4c:87:b3:8a:dd:1e:5d:56:
46:12:08:1b:39:f5:4f:d2:f4:b3:54:ca:90:9b:55:
07:15:08:d6:de:ab:d3:fd:e0:61:22:52:60:cf:6c:
d8:4b:1a:56:c0:85:68:45:87:2e:39:6a:a9:af:b9:
59:23:75:50:13:f5:da:16:89:c0:78:c8:10:9e:37:
2d:83:96:74:aa:d5:b5:74:9e:e1:66:11:a3:b5:2f:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BB:39:EC:C4:BB:4F:08:B4:E3:23:48:15:28:DD:DE:86:E1:C5:4C
X509v3 Authority Key Identifier:
keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:91:35:8e:53:49:cd:09:9b:8b:6e:c9:5d:19:c2:de:0f:2c:
29:ab:50:c3:62:18:44:61:46:66:4f:12:72:fa:11:55:49:6b:
ff:f5:07:b3:8f:e6:96:64:a8:d0:31:52:83:0d:0e:ea:f6:fb:
1d:21:3e:5a:a5:a1:f2:30:be:f6:8d:dd:77:39:53:c7:c5:79:
20:75:0d:50:2c:29:3d:89:8b:25:58:ed:9f:d3:eb:98:f3:77:
8f:ad:ed:27:05:38:aa:e2:2a:8b:83:8b:11:74:67:3b:f9:6c:
c5:32:48:95:36:98:88:54:7a:02:f8:9a:6c:5c:a6:d0:aa:a6:
fd:91:50:6e:cb:ae:1d:0b:c2:c3:c1:bd:45:07:7c:9f:1f:bd:
6f:a1:a2:70:aa:4b:9f:a6:20:be:16:49:fe:5b:71:2d:56:f3:
48:c3:33:65:f8:dc:a7:dc:f5:9b:e0:c6:e3:50:a3:2b:eb:e8:
9c:4c:2b:c7:12:64:41:8d:64:07:57:d7:86:6d:f3:5d:fd:53:
33:72:9b:16:de:27:c5:2c:06:4c:5f:fc:c1:95:6b:43:b2:7e:
25:8c:a3:26:62:ce:58:1b:e3:db:71:0f:c9:d4:d6:36:1d:70:
43:b0:e3:55:c8:4b:b1:dd:2b:e0:c1:95:22:bd:6d:83:25:9c:
7d:e1:4c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:29 2025 by rpki-client