Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier: vY7NFzX1QiJTfBoJnUkuFecDrCi4wPRjWvoqZ/cISYU=
Subject key identifier: 51:F6:12:0D:53:C6:69:56:57:BB:85:D4:41:12:B6:B9:F8:EC:45:78
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial: 0199270E32656A1E611EA2AC7FD3D5526393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number: 0129
Signing time: Mon 08 Sep 2025 02:01:05 +0000
Manifest this update: Mon 08 Sep 2025 02:01:05 +0000
Manifest next update: Tue 09 Sep 2025 02:01:05 +0000
Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: JxS2JK0smnBMzJ3AGgYYeKL0C1kgo1xQu3ku1JPWH74=)
2: wNDSq8yZE9PBcRFzNVbL2mjY9tI.roa (hash: +CAo2P8QJyLpdrdtqSl+fQIj2IGhG8nr3/YTjB35bgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:0e:32:65:6a:1e:61:1e:a2:ac:7f:d3:d5:52:63:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
Validity
Not Before: Sep 8 02:01:05 2025 GMT
Not After : Sep 9 02:01:05 2025 GMT
Subject: CN=51f6120d53c6695657bb85d44112b6b9f8ec4578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:df:92:c9:eb:03:2a:e1:15:e7:36:d1:0c:
7d:77:0f:db:d1:56:c8:f6:dc:f5:e4:09:00:03:e7:
28:c7:38:06:ca:7f:17:4f:a4:7a:c8:3d:ad:7a:d0:
35:bf:8f:ac:c0:88:61:87:a1:1e:08:da:ab:3a:08:
2a:5b:19:90:f7:ea:13:f6:0d:59:1a:e9:50:2d:26:
16:09:fc:2e:28:02:4a:08:69:fe:91:d8:18:0f:0a:
8f:93:13:57:f8:2e:75:54:54:62:d9:7a:35:a4:46:
b6:b5:5e:c3:c1:ab:82:65:73:f4:95:d5:8d:00:02:
75:82:9d:35:93:5c:cc:3d:ca:9e:4c:d6:57:90:72:
61:5a:4c:c3:ea:f4:81:c4:ef:be:2c:2b:b9:60:7a:
0b:f5:4f:93:03:5c:08:45:63:cf:ff:d3:45:0a:b4:
fd:2d:6f:57:21:dd:38:43:6d:16:d8:ee:4b:90:81:
4d:3a:95:ff:03:ed:2d:c9:89:bf:89:a0:ac:a2:c0:
96:2e:e0:6c:79:dc:4d:44:c8:95:8e:a9:b3:6a:d7:
f5:dc:84:f2:4e:1b:df:1c:bb:72:14:96:2b:39:2c:
53:51:e5:53:4d:ff:ee:e2:12:ac:72:d8:09:b2:78:
4e:45:a3:73:fc:15:06:5a:78:45:6c:04:3e:39:d5:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F6:12:0D:53:C6:69:56:57:BB:85:D4:41:12:B6:B9:F8:EC:45:78
X509v3 Authority Key Identifier:
keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:52:9c:be:08:ce:b8:9e:eb:1d:a6:ba:2e:6c:ae:7b:ea:d1:
88:08:f0:11:41:ae:32:39:0e:69:78:f2:ec:79:5a:f5:fd:fa:
d5:e8:1d:ac:5d:5c:ce:d7:9a:26:be:f4:fb:23:75:5c:5c:7c:
4b:e6:0c:4a:20:93:fd:ca:b5:3e:73:42:74:21:19:3e:a6:b7:
4f:49:9c:29:d4:2a:61:03:48:58:de:07:88:a5:95:0e:31:58:
d5:c7:84:87:7a:2d:d8:92:ca:6e:ec:f6:4f:c5:39:4a:19:57:
3e:71:d5:0f:a5:91:74:56:fd:68:6b:59:d1:95:28:fe:b8:52:
58:a8:e2:46:a1:69:08:97:9d:d9:1f:98:35:4b:ab:3e:b3:1b:
fd:80:1e:ec:f7:ef:ce:5f:b8:3f:11:6c:cd:1f:03:89:a2:79:
3a:e9:54:83:4c:2e:61:18:1b:7f:e8:f5:a3:7b:92:e5:6a:2b:
b9:77:bf:76:0c:86:a0:00:c4:bc:4b:e0:ab:d8:6b:2c:41:58:
94:08:9d:63:6b:fe:f8:60:43:2c:b5:26:97:67:80:bc:e7:b6:
82:c6:23:1f:5e:09:c1:fb:e0:9a:82:98:80:ad:98:7d:01:85:
01:c3:d5:47:13:95:6c:70:1b:91:9a:0d:55:66:c3:c1:01:1f:
0c:f1:fa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:36:51 2025 by rpki-client