Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: lUGW5CzQMTdz9SkjoEdbNN6KLVR2ikS+zGuicoGDPmc=
Subject key identifier: C0:43:AC:77:7F:54:72:35:08:7E:38:CE:05:7C:30:33:7E:97:1C:6E
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 01992CA1EF61C56351FA315EE6ACE78681E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 0279
Signing time: Tue 09 Sep 2025 04:00:33 +0000
Manifest this update: Tue 09 Sep 2025 04:00:33 +0000
Manifest next update: Wed 10 Sep 2025 04:00:33 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: zB0s/zY8vzQ1a2ssQ6k41v/Glx0JX6rrxvbH+qKs3aI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a1:ef:61:c5:63:51:fa:31:5e:e6:ac:e7:86:81:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Sep 9 04:00:33 2025 GMT
Not After : Sep 10 04:00:33 2025 GMT
Subject: CN=c043ac777f547235087e38ce057c30337e971c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:ca:42:e8:17:9b:4d:f6:8f:a3:f2:8f:4e:
e9:25:82:59:80:b9:ff:26:bb:21:ba:ac:72:52:ec:
32:ed:08:e3:2d:a9:bb:94:7a:7a:a8:55:e5:69:f3:
10:13:2d:b8:13:97:8f:4b:1d:b5:6a:b6:a6:c7:90:
2a:6e:3c:2a:ce:f0:a4:fb:6f:3b:24:c6:d5:ba:d5:
e7:dd:ac:0c:26:5c:dd:ed:75:6d:96:da:b6:31:4e:
56:32:26:36:25:35:16:29:2e:53:5f:fd:3f:cb:c3:
ec:5c:33:dd:a7:be:95:aa:3f:9a:25:ad:57:17:34:
a5:36:a3:b4:c0:f8:91:5e:48:cf:d0:42:40:57:a0:
87:fb:ae:b6:71:75:1c:4e:2c:eb:04:d8:cb:7d:32:
33:2f:08:51:f0:81:92:3a:a7:cf:d2:f8:79:82:36:
38:26:74:18:af:1b:d4:6c:1f:a1:8f:02:91:1e:24:
5a:b8:e3:ed:ea:79:51:29:6e:34:46:98:18:9b:f5:
96:6a:0f:8f:60:91:a8:9b:c6:0f:f8:bf:12:1e:f5:
55:c1:a5:dc:d2:97:d1:e9:d6:c5:2d:4a:7e:f6:da:
35:21:84:48:77:68:b9:c1:86:7a:62:76:d3:14:42:
1e:f6:b6:6e:9e:b6:ee:2f:e7:8f:6d:9f:26:b3:03:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:43:AC:77:7F:54:72:35:08:7E:38:CE:05:7C:30:33:7E:97:1C:6E
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:51:6b:e7:78:6c:03:76:39:3b:84:a3:93:b6:91:3b:7f:52:
a3:03:a3:1c:7a:14:fd:5c:fb:fe:47:92:68:15:d1:c0:24:2b:
c4:04:28:c5:01:23:40:18:04:bc:05:65:4b:d2:dc:80:6b:c8:
24:d5:f9:0c:ba:a8:a8:15:f5:01:03:1a:48:5d:72:dc:2d:1b:
86:59:26:e3:39:0f:bf:61:f1:14:70:65:d5:88:29:2c:52:79:
4a:9e:e2:99:5e:96:33:78:6f:4b:db:be:e2:01:8d:31:25:a0:
67:b5:09:0d:0d:87:4e:b8:d1:29:2b:ce:44:06:de:dc:0a:81:
19:e0:5b:17:f6:d8:d4:ce:b5:4a:00:02:bf:6e:17:7f:80:82:
ab:02:8e:96:3c:25:fb:a6:9a:e0:57:53:91:76:58:47:85:ab:
33:c7:8d:73:ed:bc:85:a2:5a:3d:07:0c:64:b7:1b:c8:cf:f4:
b9:11:5a:a9:74:85:2e:f7:46:50:78:f7:78:3e:ae:3d:6e:31:
fd:72:cb:8b:ee:d3:d1:f5:f8:35:bc:fa:a1:74:c2:04:89:dc:
97:b6:4f:b8:8f:9c:54:06:0b:f5:f1:0c:71:b6:2d:7d:6d:c1:
98:fd:9b:39:9c:07:d6:ed:ca:53:76:3e:54:5a:6c:95:e9:fa:
d5:01:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 09:00:29 2025 by rpki-client