Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: 5zzdufdYYjz2qfFbj9DPkg/Wi2fZCUPTuMBAi/JnYSU=
Subject key identifier: 71:C7:9B:FF:61:69:C9:B3:4B:0D:19:19:53:C5:62:FF:7D:80:01:C5
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 019835A79DBE70431B9BB3130503B3780367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: AC
Signing time: Wed 23 Jul 2025 05:00:33 +0000
Manifest this update: Wed 23 Jul 2025 05:00:33 +0000
Manifest next update: Thu 24 Jul 2025 05:00:33 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: NSM4VRrPzOcpFh3M4T9iKfzpUT5gixvNZ15FNSz1Obk=)
2: wNDSq8yZE9PBcRFzNVbL2mjY9tI.roa (hash: +CAo2P8QJyLpdrdtqSl+fQIj2IGhG8nr3/YTjB35bgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:a7:9d:be:70:43:1b:9b:b3:13:05:03:b3:78:03:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Jul 23 05:00:33 2025 GMT
Not After : Jul 24 05:00:33 2025 GMT
Subject: CN=71c79bff6169c9b34b0d191953c562ff7d8001c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:24:d5:a3:50:ff:a8:11:c4:66:9a:44:6d:
ee:75:f2:4b:49:74:1b:89:04:c6:ec:3a:f5:6c:7a:
1f:ce:83:8c:53:24:e6:18:e9:81:8e:48:3e:c5:c3:
d9:31:71:3f:3b:22:95:0f:03:a4:95:40:e3:90:f3:
26:6a:e5:1f:79:80:f4:f6:a1:56:05:a1:d8:46:f2:
5d:a1:4b:46:1c:3f:de:2e:c2:99:b1:d8:0e:d0:12:
7e:d3:13:c9:d5:85:36:5c:50:f2:fc:df:a9:d4:be:
12:69:75:d1:c4:48:9e:b4:45:d7:57:22:f0:19:7e:
92:68:7f:56:be:59:e9:6b:ed:8e:c6:61:ea:47:9e:
d8:80:db:22:48:6e:16:9d:b2:e1:a9:60:e6:8e:ee:
11:1c:1f:04:ed:f1:3c:b8:e3:28:e4:1c:18:30:c3:
2e:19:83:91:55:35:1d:0b:f7:7c:15:e9:72:0e:c4:
a3:78:28:41:4f:2d:d2:3e:aa:45:95:d7:cf:cf:5b:
55:86:4b:bc:32:ab:5c:3b:55:4c:9e:04:84:1e:1c:
30:a8:0a:30:bb:55:0b:88:09:6a:30:a8:f0:b2:f7:
a4:e2:4e:b0:2c:30:d6:f6:60:55:fb:c8:22:fe:18:
24:cd:ac:26:74:ad:8b:94:d7:96:fd:b0:7c:80:fc:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:9B:FF:61:69:C9:B3:4B:0D:19:19:53:C5:62:FF:7D:80:01:C5
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:50:6f:90:52:fa:c5:d5:c4:63:1f:ad:0f:6f:15:9c:8c:70:
e4:47:35:c7:9b:65:df:29:f8:b1:66:43:43:77:b2:03:f5:97:
e7:b4:a8:7c:93:f5:8c:86:de:ba:79:8a:ae:43:3a:68:1c:5c:
a0:96:8f:29:3a:89:04:42:76:57:d2:ed:3a:78:5c:c5:fd:d4:
a4:c6:eb:cc:4a:93:63:2b:a3:78:06:06:62:e5:91:eb:fa:7f:
4a:62:bb:38:c1:ea:9a:8e:ab:8b:f9:ad:e7:ae:45:8b:d8:92:
72:82:06:e5:8c:7b:33:45:88:38:e1:e5:fe:50:54:5a:0f:9f:
a3:61:06:0f:e3:cd:48:e0:b0:bb:6d:d5:31:e6:8c:19:70:c7:
76:8b:c3:ed:12:8a:11:5e:00:98:ca:14:d6:af:85:8c:33:b5:
24:e6:b0:40:15:03:69:dc:34:bb:1c:98:18:73:95:fb:d2:11:
ba:4c:bf:19:47:da:23:ca:48:b3:b2:f5:65:0d:e1:90:be:2e:
51:73:60:b6:05:f0:50:10:4d:2e:99:97:6b:71:bb:52:9e:2f:
08:38:d8:c4:03:14:0c:73:a5:c5:a5:60:d8:5c:07:1c:f8:02:
42:d2:44:fa:1c:2e:7a:af:28:b7:cf:c5:f5:4d:91:1a:7f:54:
9d:3e:ab:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg1p52+cEMbm7MTBQOzeANnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjE1NzliODc1ZTNlMDkzZDQ3MzI1Yjk3MzVlZGJmZTc4
MDlmYmEwHhcNMjUwNzIzMDUwMDMzWhcNMjUwNzI0MDUwMDMzWjAzMTEwLwYDVQQD
Eyg3MWM3OWJmZjYxNjljOWIzNGIwZDE5MTk1M2M1NjJmZjdkODAwMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjok1aNQ/6gRxGaaRG3udfJLSXQb
iQTG7Dr1bHofzoOMUyTmGOmBjkg+xcPZMXE/OyKVDwOklUDjkPMmauUfeYD09qFW
BaHYRvJdoUtGHD/eLsKZsdgO0BJ+0xPJ1YU2XFDy/N+p1L4SaXXRxEietEXXVyLw
GX6SaH9Wvlnpa+2OxmHqR57YgNsiSG4WnbLhqWDmju4RHB8E7fE8uOMo5BwYMMMu
GYORVTUdC/d8FelyDsSjeChBTy3SPqpFldfPz1tVhku8MqtcO1VMngSEHhwwqAow
u1ULiAlqMKjwsvek4k6wLDDW9mBV+8gi/hgkzawmdK2LlNeW/bB8gPzoDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHHm/9hacmzSw0ZGVPFYv99gAHFMB8GA1UdIwQY
MBaAFFhhV5uHXj4JPUcyW5c17b/ngJ+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQt
ZjUzMzYzMjdiODgxLzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQtZjUzMzYzMjdiODgx
LzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1BvkFL6
xdXEYx+tD28VnIxw5Ec1x5tl3yn4sWZDQ3eyA/WX57SofJP1jIbeunmKrkM6aBxc
oJaPKTqJBEJ2V9LtOnhcxf3UpMbrzEqTYyujeAYGYuWR6/p/SmK7OMHqmo6ri/mt
565Fi9iScoIG5Yx7M0WIOOHl/lBUWg+fo2EGD+PNSOCwu23VMeaMGXDHdovD7RKK
EV4AmMoU1q+FjDO1JOawQBUDadw0uxyYGHOV+9IRuky/GUfaI8pIs7L1ZQ3hkL4u
UXNgtgXwUBBNLpmXa3G7Up4vCDjYxAMUDHOlxaVg2FwHHPgCQtJE+hwueq8ot8/F
9U2RGn9UnT6rlg==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:49:36 2025 by rpki-client