Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: 61Z8EjhTdPIk4Z+HSD+W9PcTmsKZBwe3FR8mB+lAvl4=
Subject key identifier: 18:CF:E3:52:DB:B0:7E:5F:8F:95:5D:C5:51:F4:47:3C:72:41:7A:51
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 01984A77D82F6CB95DC05C88F723E591C45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 06:00:24 +0000
Manifest this update: Sun 27 Jul 2025 06:00:24 +0000
Manifest next update: Mon 28 Jul 2025 06:00:24 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: a5F5oHT5tC/dXe5w3Fj7+9RYLwz/TCTLSfAVnrPdVxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d8:2f:6c:b9:5d:c0:5c:88:f7:23:e5:91:c4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Jul 27 06:00:24 2025 GMT
Not After : Jul 28 06:00:24 2025 GMT
Subject: CN=18cfe352dbb07e5f8f955dc551f4473c72417a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:4d:d1:89:7a:34:dc:9b:ac:8a:59:b0:a5:
89:7f:b3:d1:f0:8e:c1:c1:b9:0d:ac:68:f8:4d:17:
bb:34:92:f0:53:28:22:47:fd:03:b9:aa:52:8f:7c:
aa:f1:5c:70:03:36:ff:17:06:b0:de:b3:74:c5:2e:
a0:c3:80:a3:98:58:70:b6:b4:7f:6d:32:f8:1d:3b:
df:5f:ce:4b:8f:3a:f1:4d:72:b0:57:bf:3d:25:94:
79:f7:aa:66:53:b5:45:91:c9:9f:ae:61:b8:d3:c1:
a8:b0:9f:6b:df:d7:39:d9:9f:86:7c:eb:b1:34:ac:
31:23:ed:81:76:ed:a8:ad:37:98:26:8e:35:b9:93:
13:57:8b:8d:cc:71:22:f3:4e:cc:d9:3d:cd:2a:24:
00:33:80:34:a5:88:ba:b8:c6:06:59:1d:6a:88:3c:
86:4a:44:55:0f:e2:08:f2:d4:63:2f:c8:b5:82:d5:
02:9f:da:fa:fe:72:68:20:41:cb:99:15:2d:45:e8:
b4:ac:a3:88:b9:fa:82:ec:96:a1:5a:1f:4d:ef:49:
36:42:bb:89:8e:c3:58:69:5b:ad:af:8c:38:48:c0:
c5:b6:76:e9:ea:7c:60:1c:cf:b8:b0:32:4f:80:8f:
ba:b7:52:28:ff:ad:f4:46:53:a2:5c:d8:e6:dd:67:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CF:E3:52:DB:B0:7E:5F:8F:95:5D:C5:51:F4:47:3C:72:41:7A:51
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d8:b7:56:9a:05:75:54:a6:21:13:ee:97:70:1b:69:24:44:
79:ef:7d:6a:25:3d:e4:0f:74:8b:6b:c5:89:89:00:8f:ef:03:
8f:ab:9c:54:1a:38:79:d2:c9:68:ed:3e:10:09:cc:31:bb:83:
d5:14:e4:a4:b4:85:bc:90:e3:56:8e:62:5b:3e:c4:23:a5:34:
d1:35:32:b2:40:c2:8b:51:ab:6b:f6:22:e2:b8:e1:3c:ee:7e:
83:ba:9a:6e:b5:46:db:53:5e:a0:4a:2e:a1:28:8b:97:b5:81:
fc:a0:78:9c:11:d3:6b:ad:20:16:2d:07:81:01:40:97:db:24:
a6:cd:be:5b:fd:6d:91:7e:59:d6:0d:c9:3b:97:71:93:08:80:
78:f3:43:58:eb:c7:62:0a:6d:8d:fa:18:61:8b:63:fe:2f:0a:
c9:d4:f6:8a:3c:31:5a:ee:a3:5d:60:f9:e8:11:67:7f:40:57:
4d:44:47:86:d5:83:af:23:5e:66:c1:24:bd:55:91:f6:2e:f4:
08:b4:5e:fc:8c:b1:9c:6b:69:77:ce:ca:b8:f0:f3:a9:79:2d:
d5:1d:50:9d:b7:35:4c:6b:76:9b:0a:ff:7e:b2:82:1e:bb:ad:
bf:b5:d3:fe:fd:ab:8a:17:3c:c2:14:ec:ab:f6:b9:30:87:1a:
5e:2d:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:37 2025 by rpki-client