Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: QJYkKrEz2JDXMRbrVscXXLb50+p3bhEYpTxBknqoUmE=
Subject key identifier: 11:39:C3:4F:93:E9:7B:0F:32:41:55:48:76:6C:B4:51:D1:0C:41:50
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 0198462D6CC6D84A0DC1F2466A07BCF0A649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 1144
Signing time: Sat 26 Jul 2025 10:00:38 +0000
Manifest this update: Sat 26 Jul 2025 10:00:38 +0000
Manifest next update: Sun 27 Jul 2025 10:00:38 +0000
Files and hashes: 1: NvAPv-l4cBrLTji2iXv6GfI0gZg.roa (hash: BBOKh5jKHRu7y0Xpwzm9dX9BwYJwDLK16Nc2ib6JODU=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: y0z9KUk49GCFeUnycsIDPO7uPsFC6ms5thQB+EM+mpI=)
3: aKrvV8xBl8sCHisqRYKu_FgNh7A.roa (hash: VWMQXxpmmku9lvmyl+DypVcQSIrG+GnuaLnSwfYRfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:6c:c6:d8:4a:0d:c1:f2:46:6a:07:bc:f0:a6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Jul 26 10:00:38 2025 GMT
Not After : Jul 27 10:00:38 2025 GMT
Subject: CN=1139c34f93e97b0f32415548766cb451d10c4150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:d2:8d:f3:7a:d0:6b:c7:ed:46:3d:2d:91:
6d:e0:ab:0b:2e:c3:21:60:0f:fa:0f:99:3d:d8:74:
b3:84:59:9a:81:92:23:89:b3:78:00:07:98:10:a3:
f3:ac:ed:c2:3e:b2:7a:ae:61:c9:2a:24:7f:31:31:
59:b4:1e:34:bb:7a:07:98:98:49:1e:d5:f3:c1:7a:
03:a1:71:04:c1:e3:4e:1e:6d:2b:fe:a4:c3:29:64:
13:bc:69:08:ae:d3:f1:4b:1a:7b:dd:05:63:9f:cc:
ff:d3:45:e3:92:00:b2:9b:ec:7d:17:23:45:d1:cd:
53:80:56:1d:dd:7f:74:b0:32:86:ad:c2:2f:15:76:
c6:a2:ea:ee:27:80:dc:4e:45:f1:c2:d7:eb:85:89:
3d:f5:63:43:2c:6c:57:1c:61:5b:da:65:ac:54:d7:
be:8f:75:aa:4b:da:ec:e5:ef:3e:d2:e9:c5:77:6e:
ed:34:fd:5a:64:8e:36:aa:dc:60:09:0a:e6:df:a4:
4a:0c:5b:50:b7:fc:39:09:5c:13:f0:1d:75:3b:fb:
1a:98:d4:73:dc:2c:2f:b0:1e:1f:73:4a:9b:18:72:
f7:61:d6:cc:27:b4:b1:5a:e5:1c:2e:d4:9e:e7:37:
56:0e:1f:ca:b0:31:3f:fd:0f:16:72:7f:8f:41:b7:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:39:C3:4F:93:E9:7B:0F:32:41:55:48:76:6C:B4:51:D1:0C:41:50
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d8:58:4d:48:5f:fe:cb:6c:67:2f:a4:0a:0f:0f:69:3b:57:
26:39:f7:12:8f:26:82:50:ae:4b:c6:d0:88:ff:3e:39:63:41:
a9:3d:4e:35:b6:41:cf:cd:58:0d:1f:df:7b:ee:9d:76:70:8b:
c5:88:d8:5e:70:79:6d:a4:b0:6a:bf:66:21:9f:0a:6a:a2:0c:
7b:6c:72:b0:fb:43:6a:48:1a:9b:19:f4:81:53:ce:50:1e:2a:
a5:92:2d:05:0d:f4:e7:14:78:25:34:40:c6:b2:69:5c:3a:68:
5e:6a:ca:1f:d1:56:1e:e8:3a:2f:4e:4c:83:ec:37:5e:f0:75:
97:0b:0a:30:4d:66:9d:54:e5:99:d6:c0:fd:a5:ae:8d:1b:74:
6c:66:a9:3f:30:2a:a7:08:ed:b0:53:9f:63:8d:22:d8:25:9e:
fe:c4:f1:30:c6:db:c9:54:d2:fa:4d:bf:48:7e:cb:9e:1a:50:
85:ae:1d:74:21:5d:33:ff:86:cd:b0:62:59:d6:9f:5b:54:f8:
6f:ea:11:76:b8:76:dd:01:0a:63:4a:f2:0b:35:85:fd:85:ef:
d5:31:3d:40:5d:0e:6c:63:5f:33:e3:1e:4a:86:3f:3f:cd:2d:
32:d2:e0:44:ec:3a:a7:cf:2a:f4:ce:06:10:e1:67:35:ad:81:
22:0f:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 17:31:33 2025 by rpki-client