Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
File: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft (raw, json)
Hash identifier: HewZRr3PReIQyW6JiQAXz7MYxJw17Gg+R0C6ZcSw/lM=
Subject key identifier: 79:CC:5D:87:1C:57:69:15:ED:CC:89:99:BD:32:14:96:CF:66:3B:5B
Authority key identifier: 58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
Certificate issuer: /CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Certificate serial: 01993612ED78A54A46ACD39FD3E25879E5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
Manifest number: 1684
Signing time: Thu 11 Sep 2025 00:00:34 +0000
Manifest this update: Thu 11 Sep 2025 00:00:34 +0000
Manifest next update: Fri 12 Sep 2025 00:00:34 +0000
Files and hashes: 1: 4QXRAbNR3yAj5SaRnruidaQPNKo.roa (hash: phO8vfaPccH9SR7nce4AC0vjdKm6fZJc24zYaHvUQ+8=)
2: 9PCEGLXY6xCziVFP40kVixOzsgM.roa (hash: XwgSZPxwwBlT3GDonAYhaJ+Jud/pltUIiWMk+iraIZ0=)
3: WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl (hash: Lu2YL8QaCB8B83GOgYXb50c71XLDh98Zgxq1Pg9JRNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:ed:78:a5:4a:46:ac:d3:9f:d3:e2:58:79:e5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58667131d760b5db1de98ea20c0f82fc01c9f1d9
Validity
Not Before: Sep 11 00:00:34 2025 GMT
Not After : Sep 12 00:00:34 2025 GMT
Subject: CN=79cc5d871c576915edcc8999bd321496cf663b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:94:0d:e8:7c:a7:91:ee:bc:7d:6d:ab:cc:
f6:f9:cd:b4:21:8a:c6:3b:21:82:d5:1b:48:69:0f:
1f:24:47:ef:61:44:2e:1c:f5:3f:eb:e1:e0:10:f4:
18:24:3c:cf:20:60:29:c8:30:5b:14:f4:b3:ec:cf:
ef:07:47:2e:3e:07:24:2d:4b:47:ff:90:18:13:c2:
f3:cb:d1:d0:22:2a:0d:ba:54:7a:b5:45:a3:07:16:
49:a5:ee:07:0f:39:24:1a:9e:f0:6b:80:fb:61:94:
fc:bf:3c:77:30:fb:a7:fd:0f:a2:de:4e:a1:94:b2:
01:f8:5a:d6:85:79:2c:8e:63:50:5e:84:16:28:c7:
97:b6:64:77:35:ae:0d:51:2e:a9:1d:cf:59:5c:c1:
e9:7c:7d:55:3d:ad:62:34:de:53:eb:c2:12:ba:fe:
50:6a:31:3b:e1:5e:19:73:c5:c7:b7:a6:ea:04:eb:
07:31:53:5c:b3:c6:a2:a4:6c:ca:a3:bb:92:f3:af:
b7:f4:5e:ea:46:9e:62:3a:f1:0d:24:65:42:4a:ac:
d8:5e:95:1e:2f:13:6e:96:09:9d:a8:92:c6:53:94:
83:e0:e5:26:b4:40:4c:1b:ad:52:b8:b8:4e:ad:72:
21:02:53:cf:fe:b9:7e:90:c8:19:22:38:85:d9:a0:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CC:5D:87:1C:57:69:15:ED:CC:89:99:BD:32:14:96:CF:66:3B:5B
X509v3 Authority Key Identifier:
keyid:58:66:71:31:D7:60:B5:DB:1D:E9:8E:A2:0C:0F:82:FC:01:C9:F1:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/4a80e6-1d04-4647-a8d4-2481106f8b25/1/WGZxMddgtdsd6Y6iDA-C_AHJ8dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ab:ee:32:70:f8:55:b6:b6:90:0a:64:1c:1f:1d:e6:c3:8f:
73:68:11:ab:6e:c8:18:6f:7c:db:fe:2d:43:76:66:f0:98:4f:
5e:dd:69:f8:9a:82:38:f1:a2:bb:d5:7b:f2:de:37:67:c9:d0:
b5:3f:ca:1b:47:a4:db:da:de:7f:f2:c4:97:b3:05:f9:aa:a9:
96:b6:6d:57:f8:71:bf:7b:3d:05:55:ff:83:a8:8a:99:d6:8d:
5d:00:53:90:2d:c3:71:fd:0e:1d:46:7e:40:36:d6:ed:95:0b:
07:2b:de:1b:5f:f5:c1:25:32:8f:78:1d:ce:11:6d:f9:8c:57:
96:3f:2e:06:61:b1:da:f5:dc:53:33:c9:fc:d8:22:22:0f:03:
f7:f3:36:a6:05:79:7f:65:bd:0b:18:f7:c9:42:d2:4d:cf:9a:
a9:f3:24:49:ae:84:31:22:83:56:88:2c:19:18:42:a8:9a:46:
18:5c:99:b3:62:b0:4d:42:31:4d:bc:f0:58:28:b6:bf:98:fd:
26:94:c3:50:16:47:04:f7:7f:c8:3a:73:73:c9:73:b8:08:2e:
6b:61:b0:86:e8:df:55:b5:5c:57:eb:bc:1e:59:93:d1:f6:d8:
48:c1:36:02:38:a7:4a:be:c7:f9:b7:9e:5b:9b:78:9a:b0:1c:
1d:7e:55:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk2Eu14pUpGrNOf0+JYeeXlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjY3MTMxZDc2MGI1ZGIxZGU5OGVhMjBjMGY4MmZjMDFj
OWYxZDkwHhcNMjUwOTExMDAwMDM0WhcNMjUwOTEyMDAwMDM0WjAzMTEwLwYDVQQD
Eyg3OWNjNWQ4NzFjNTc2OTE1ZWRjYzg5OTliZDMyMTQ5NmNmNjYzYjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGOUDeh8p5HuvH1tq8z2+c20IYrG
OyGC1RtIaQ8fJEfvYUQuHPU/6+HgEPQYJDzPIGApyDBbFPSz7M/vB0cuPgckLUtH
/5AYE8Lzy9HQIioNulR6tUWjBxZJpe4HDzkkGp7wa4D7YZT8vzx3MPun/Q+i3k6h
lLIB+FrWhXksjmNQXoQWKMeXtmR3Na4NUS6pHc9ZXMHpfH1VPa1iNN5T68ISuv5Q
ajE74V4Zc8XHt6bqBOsHMVNcs8aipGzKo7uS86+39F7qRp5iOvENJGVCSqzYXpUe
LxNulgmdqJLGU5SD4OUmtEBMG61SuLhOrXIhAlPP/rl+kMgZIjiF2aC7qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnMXYccV2kV7cyJmb0yFJbPZjtbMB8GA1UdIwQY
MBaAFFhmcTHXYLXbHemOogwPgvwByfHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0daeE1kZGd0ZHNkNlk2aURBLUNfQUhKOGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80YTgwZTYtMWQwNC00NjQ3LWE4ZDQt
MjQ4MTEwNmY4YjI1LzEvV0daeE1kZGd0ZHNkNlk2aURBLUNfQUhKOGRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80YTgwZTYtMWQwNC00NjQ3LWE4ZDQtMjQ4MTEwNmY4YjI1
LzEvV0daeE1kZGd0ZHNkNlk2aURBLUNfQUhKOGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKvuMnD4
Vba2kApkHB8d5sOPc2gRq27IGG982/4tQ3Zm8JhPXt1p+JqCOPGiu9V78t43Z8nQ
tT/KG0ek29ref/LEl7MF+aqplrZtV/hxv3s9BVX/g6iKmdaNXQBTkC3Dcf0OHUZ+
QDbW7ZULByveG1/1wSUyj3gdzhFt+YxXlj8uBmGx2vXcUzPJ/NgiIg8D9/M2pgV5
f2W9Cxj3yULSTc+aqfMkSa6EMSKDVogsGRhCqJpGGFyZs2KwTUIxTbzwWCi2v5j9
JpTDUBZHBPd/yDpzc8lzuAgua2GwhujfVbVcV+u8HlmT0fbYSME2AjinSr7H+bee
W5t4mrAcHX5VgQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 08:58:29 2025 by rpki-client