Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: UUoSnEgY41oXZD7QpY9g86fxz4AAqssjiwiMKhHk2wU=
Subject key identifier: 04:4B:D6:2D:77:E6:3E:F6:23:A6:B9:B4:6D:85:05:80:25:B0:13:E3
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 01992D46DE03C6B958A6B3262CD124E2704A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 0589
Signing time: Tue 09 Sep 2025 07:00:43 +0000
Manifest this update: Tue 09 Sep 2025 07:00:43 +0000
Manifest next update: Wed 10 Sep 2025 07:00:43 +0000
Files and hashes: 1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: sudDa9CmPu0rdrL9KN8a+27f6jB6IInw6h0awYOPlxc=)
3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:de:03:c6:b9:58:a6:b3:26:2c:d1:24:e2:70:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Sep 9 07:00:43 2025 GMT
Not After : Sep 10 07:00:43 2025 GMT
Subject: CN=044bd62d77e63ef623a6b9b46d85058025b013e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:47:85:5a:37:26:ec:9e:50:fc:0b:7c:d3:
ac:35:a0:d9:3e:86:f7:bb:3b:7f:af:90:2e:73:65:
6f:ac:70:38:b9:2b:f8:e4:34:d3:34:09:b0:76:dd:
ba:af:bc:85:2d:be:ef:13:a8:cf:d6:8c:93:74:26:
e4:dc:df:f3:7d:0d:f1:be:0a:e7:07:2f:b4:52:60:
a6:bc:f2:b2:f8:7e:9a:1b:21:c6:37:28:59:e2:10:
a3:36:97:c0:10:52:60:95:18:f2:c3:08:4b:d1:dd:
02:34:5d:39:03:ea:ec:7f:b4:9c:a0:5b:54:e1:35:
e7:a7:6a:8b:f6:a7:88:5c:81:bc:10:66:4f:b1:13:
e3:79:29:2c:fe:96:ad:f2:28:d8:88:c4:cc:7c:c8:
eb:bb:20:33:1a:06:b0:38:1f:10:3f:5f:70:66:6d:
1c:2c:d1:51:08:58:a6:99:66:33:62:6f:d2:91:36:
5e:36:c3:3c:be:da:95:2b:2e:e4:42:1b:49:76:4d:
e2:f3:81:e0:bc:6b:33:af:96:35:69:aa:20:2a:ef:
0e:b9:f1:f6:3f:18:55:4d:dd:3f:f0:f3:bd:b3:4b:
37:76:6e:d4:4e:67:13:99:55:0f:9e:07:93:07:f0:
57:87:f0:41:6d:ec:24:ad:1a:af:d8:7e:78:7f:a4:
3c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:D6:2D:77:E6:3E:F6:23:A6:B9:B4:6D:85:05:80:25:B0:13:E3
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a0:8c:ec:c5:3e:b2:d4:24:9b:cd:32:04:8d:64:8d:eb:56:
9d:9b:6d:60:e4:ca:9c:f0:dd:74:3f:06:1a:7d:a0:22:f7:fa:
06:98:c3:99:a1:71:18:07:7f:e1:06:42:29:fe:1e:cf:e1:6b:
47:06:4c:21:fc:82:bc:77:d7:a0:51:c8:27:7e:9d:41:39:c9:
ef:19:a3:3e:c4:d3:fb:25:19:99:80:69:5c:0e:e9:48:5b:d1:
26:79:8e:ff:96:a4:07:09:6d:a5:e6:e5:14:23:4d:7c:e3:5a:
8f:21:76:33:be:75:5b:81:c0:55:ce:9a:a2:92:c7:6f:b2:7a:
20:79:8d:30:66:74:fe:a2:31:48:18:ad:cb:68:b1:ee:ce:b2:
6e:3c:89:c3:75:25:ac:1a:7e:a3:2e:1e:38:e6:f4:2e:b5:06:
90:98:37:5c:c4:0a:7e:d0:da:02:90:8b:c8:fb:68:9d:2b:05:
df:5d:d2:2b:3b:15:b4:0d:81:47:4b:3a:59:7d:8d:70:46:fe:
d6:76:09:f6:68:29:3b:7f:60:c2:33:b1:33:63:d9:e6:83:dd:
5d:af:e7:55:07:7f:30:c4:ce:60:91:18:a3:72:87:21:f0:8e:
a1:d6:87:2e:02:71:0f:90:70:45:c9:67:27:b6:0b:e8:30:aa:
8b:a8:cd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:06:24 2025 by rpki-client