Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
File: WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json)
Hash identifier: dqcw9mXPgpYk6SLMVjTS1hrUWi0C01HYXY7rOxhCJY0=
Subject key identifier: 28:09:CE:3D:79:44:2B:53:52:38:74:07:E0:BC:D4:AB:0E:20:AA:C6
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial: 0199345B84B5B80D58551F5538FFEFC9F319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
Manifest number: 167E
Signing time: Wed 10 Sep 2025 16:00:36 +0000
Manifest this update: Wed 10 Sep 2025 16:00:36 +0000
Manifest next update: Thu 11 Sep 2025 16:00:36 +0000
Files and hashes: 1: VxmO12w306gaXQmH0gdTcOIKrpc.roa (hash: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=)
2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: B3j4+pToUmt8ARVNIWsFhIS1FiDJcsqF9fdaqziZ6uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:84:b5:b8:0d:58:55:1f:55:38:ff:ef:c9:f3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Validity
Not Before: Sep 10 16:00:36 2025 GMT
Not After : Sep 11 16:00:36 2025 GMT
Subject: CN=2809ce3d79442b5352387407e0bcd4ab0e20aac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:b0:a3:59:fb:d0:69:47:93:fa:61:5a:05:
d9:eb:2f:58:03:f9:08:d0:cf:6d:18:56:b0:a4:2c:
f1:f3:ad:f5:e1:74:17:6c:3a:40:80:b0:a4:af:4e:
8a:6e:d4:b4:d0:b1:0b:05:76:8e:c5:35:af:ec:39:
7d:25:0d:3e:9a:fb:4a:f0:01:0d:6a:9c:4e:2e:44:
58:48:3f:59:90:28:5f:ec:6a:f2:71:e0:ea:56:1d:
2c:23:37:83:e0:1f:95:12:c5:84:12:24:63:ec:96:
9d:e7:0c:34:11:ff:0c:59:98:c1:95:87:5e:31:d7:
08:d0:19:e8:4f:38:e3:7c:dd:62:2c:d1:82:03:c4:
04:62:05:bc:a4:4d:df:56:bb:e2:bf:1c:40:f4:25:
38:fe:d7:af:4c:fe:ee:24:5f:49:b8:97:87:03:01:
99:6a:7a:09:32:a7:6d:cf:19:1a:79:71:91:11:4c:
4e:93:31:8c:15:4d:9f:43:af:95:21:95:62:56:53:
84:7b:b4:dc:28:64:66:ae:23:da:01:8a:b3:c4:64:
68:07:17:30:96:67:1a:f9:62:a2:2b:d8:04:40:c8:
c4:90:85:c3:dd:96:f3:82:57:1e:81:17:08:f3:c5:
43:1c:31:f1:ff:29:1c:85:85:af:7a:83:57:76:a2:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:09:CE:3D:79:44:2B:53:52:38:74:07:E0:BC:D4:AB:0E:20:AA:C6
X509v3 Authority Key Identifier:
keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:af:f2:80:c6:78:de:aa:72:18:d8:72:a6:95:88:b3:c6:51:
5a:1b:25:81:8b:11:4e:47:30:e1:15:56:98:1d:fe:43:e4:d1:
b4:90:8b:02:1e:fa:d6:72:d2:e5:e6:43:08:6c:67:73:4d:e4:
d8:44:27:29:a9:5e:95:a4:fb:8d:cc:87:72:d6:8d:5c:5f:6a:
39:35:22:72:9d:8a:39:a1:9d:ad:0b:c7:02:31:a8:f4:68:e6:
7f:57:ef:1a:2b:91:6c:3a:57:9b:03:70:31:39:70:7a:d4:a6:
18:c1:cb:9c:5a:4f:ff:36:5c:b3:92:84:3e:df:bc:73:e1:e4:
82:e9:66:3a:8a:f5:55:23:d0:da:42:e1:81:f6:7d:c6:3e:2d:
ec:64:0a:d7:36:76:e5:c8:f2:c2:64:e8:cf:6f:d1:7c:90:f1:
b2:62:a7:68:0b:77:85:36:89:0c:72:68:2d:e3:8f:26:70:41:
ff:86:e2:b3:89:d5:5e:19:ee:3e:c5:6b:a0:7d:32:63:60:44:
c8:c2:cb:af:55:e4:64:85:13:e5:f5:0e:d8:e6:4a:11:0c:70:
3f:15:fa:9f:76:1a:99:3a:94:b6:34:e9:7b:4b:16:58:9c:15:
a5:ea:10:2e:58:4d:3c:a8:2a:02:57:44:ce:89:ce:4c:14:bf:
4b:6f:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:17:05 2025 by rpki-client