Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
File: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json)
Hash identifier: xb85KRs6GMVAjfjq38Bgxze7T3c284BdhAf5cJtkzlk=
Subject key identifier: AF:47:6B:F8:90:BF:5F:D2:3D:58:96:88:9B:F9:BE:F0:35:93:50:5E
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Certificate issuer: /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial: 01992C6AFD4263D48886D93FE38A2628ACD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
Manifest number: 167D
Signing time: Tue 09 Sep 2025 03:00:33 +0000
Manifest this update: Tue 09 Sep 2025 03:00:33 +0000
Manifest next update: Wed 10 Sep 2025 03:00:33 +0000
Files and hashes: 1: KOtOprlo9eWM-S3ee18Bkra0s7U.roa (hash: YzsVJr77Droy7DJXTIqItUpDk3Xa+3GyD3WsTRtaj84=)
2: PnDAeBphB2kiD9o4b1TlFW_oiEw.roa (hash: 80HIEeMh1J7mTJAl8xWdqZV3GTcdBhba2s3G/UCvDhk=)
3: VJASrMOyLg85AblR9YiVSWxHxZs.roa (hash: REvGVujT8OfpbkY6GeJPSg8UwmOkMcFqkev3bGvsPwQ=)
4: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: s9B3P/MmrIqjX6o8weIimbZgRF3AIxs0Bb+uoFocDyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:6a:fd:42:63:d4:88:86:d9:3f:e3:8a:26:28:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Validity
Not Before: Sep 9 03:00:33 2025 GMT
Not After : Sep 10 03:00:33 2025 GMT
Subject: CN=af476bf890bf5fd23d5896889bf9bef03593505e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:4e:20:e9:3d:e6:b5:51:64:8b:82:56:97:
28:08:c9:41:53:6b:b9:bc:26:1b:7e:f6:06:f6:bd:
0b:ac:1b:17:c4:26:91:04:94:61:66:c4:e0:89:04:
64:4b:fc:03:85:c2:7a:c8:a5:86:f7:08:eb:c0:88:
e5:52:91:c5:03:76:11:06:d7:40:1b:74:9e:2a:28:
c8:58:a7:75:26:bc:9e:fc:ac:3c:d7:5f:ee:e4:cd:
e6:6c:dc:64:51:15:39:fe:88:f7:3a:49:5f:34:4d:
7a:56:bf:c3:63:f0:86:d8:53:de:db:75:36:e5:3a:
d8:b4:d2:5a:9b:9a:1a:2d:e3:c6:ff:80:cf:f4:b2:
7f:ed:fd:10:33:63:99:d1:66:8d:bf:69:07:96:a5:
34:8f:67:b7:11:dd:98:e3:6e:fb:bc:59:7b:bf:88:
5d:55:5a:70:43:0a:f6:f6:3c:ef:3b:93:a1:d9:4a:
90:15:6f:0c:14:6b:84:8a:1f:02:9f:bd:5a:ee:8a:
55:33:cd:97:2b:f6:2b:e2:95:c5:6f:1a:5f:04:fa:
13:47:e8:1a:38:e0:3b:ac:69:0b:65:1e:48:7f:e8:
20:cc:6b:06:fb:f3:f2:71:fa:d3:58:45:ed:6c:10:
94:24:98:de:b9:0f:2c:c0:5e:97:2a:e2:be:14:b1:
2b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:47:6B:F8:90:BF:5F:D2:3D:58:96:88:9B:F9:BE:F0:35:93:50:5E
X509v3 Authority Key Identifier:
keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:00:a3:a7:6c:c8:78:fb:93:5a:35:d5:ae:cb:f4:5d:5f:6e:
57:0a:c1:06:66:69:19:67:d3:9f:34:c7:6d:67:34:85:0b:35:
d2:ca:e1:f9:0f:a8:3e:db:c5:bc:34:70:93:d7:2f:e1:5e:93:
7d:fd:85:ef:80:b2:71:d6:e0:74:b3:19:0d:f2:e4:be:79:60:
b7:4a:c4:d7:ed:79:8e:18:a3:79:d5:9a:e2:05:b7:b7:77:31:
5a:49:54:95:22:23:5c:33:a2:32:4f:a8:66:da:8a:c9:07:9b:
89:9e:de:25:46:ad:82:bd:39:b2:00:ac:32:86:0c:d7:2c:46:
e8:01:a6:bc:fc:7d:4d:a8:9b:af:7b:57:58:95:14:b9:39:76:
44:1b:89:47:20:14:be:c5:8b:4c:e2:82:b2:f8:5f:ba:af:8e:
ac:a0:c6:24:77:50:47:6f:bf:04:39:2e:da:d3:e6:42:6a:bd:
b9:de:ca:07:51:94:8d:da:7c:8c:ac:43:f3:48:7e:89:d9:bc:
c8:43:6f:85:cf:cc:40:f4:66:5d:31:07:43:c5:3c:00:9f:1a:
f6:2e:d4:d7:56:8a:4a:fe:b3:db:e1:e5:a0:74:1d:af:c8:ab:
15:cc:6f:4b:29:1d:37:80:89:ec:4b:97:2a:54:35:ed:d5:9a:
10:d2:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:54:51 2025 by rpki-client