Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier: B8ZYzqsNTE0+Hsxo7gjtz6rg5Mp6ZfMiDBxOgXxHQdM=
Subject key identifier: DA:72:5E:91:F9:F6:F8:87:F4:53:EE:4D:FE:B0:5D:C8:86:E9:6E:CC
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial: 0199345BBA9763DF07B142DA3FA60EA21153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number: 0533
Signing time: Wed 10 Sep 2025 16:00:50 +0000
Manifest this update: Wed 10 Sep 2025 16:00:50 +0000
Manifest next update: Thu 11 Sep 2025 16:00:50 +0000
Files and hashes: 1: QEzw4CiK6CiHgldhyTg0boyDFI4.roa (hash: ffDuLw/6EUMQBC9wlTrHOAlboOryP+rRmytNZtNkFZU=)
2: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: UJILA6Ixrl2PmG54cMxye8f2uHyMZDSDvVlCBVqYyGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:ba:97:63:df:07:b1:42:da:3f:a6:0e:a2:11:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Validity
Not Before: Sep 10 16:00:50 2025 GMT
Not After : Sep 11 16:00:50 2025 GMT
Subject: CN=da725e91f9f6f887f453ee4dfeb05dc886e96ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:61:ae:76:28:4d:05:d2:c5:47:fb:ce:63:2d:
3a:10:37:0d:f2:5d:4e:62:cd:95:7d:8e:78:58:4f:
fe:34:7e:51:68:93:11:9c:a8:a8:c1:eb:49:39:e6:
4f:18:f8:e3:7e:b4:b2:d3:63:41:e8:01:1b:c5:5a:
c4:5b:b8:75:9e:d9:ac:34:76:c0:d2:a7:a9:65:01:
dd:1a:8e:bd:be:7d:59:85:27:33:1c:07:9f:2b:ba:
8e:4e:7c:db:3e:e9:c9:38:ce:cc:30:fd:58:b1:1a:
93:03:be:fd:64:2c:cc:0b:76:67:d2:04:a8:6a:bf:
4f:22:62:85:56:ed:c8:5b:20:ff:16:e5:f8:07:d3:
af:64:ed:e1:4f:ad:00:e9:4a:09:0b:1f:a3:21:b7:
4f:76:01:75:3a:e0:81:4b:6e:d7:6c:74:1b:ae:b8:
96:d3:78:7b:dc:db:89:67:d7:f4:bb:55:f8:0b:75:
2b:ba:35:4b:17:fc:a1:5e:43:0e:63:a3:fb:5d:41:
96:e7:42:3e:97:ea:34:1e:ac:2d:70:c7:c5:7d:5f:
8f:7f:1a:45:6b:75:a4:5b:e3:f5:e1:d6:0e:bf:51:
63:77:10:e7:69:12:e9:b1:65:60:ff:74:b6:fa:f4:
25:9d:75:c5:9a:b8:74:bc:5f:64:19:0c:94:50:ed:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:72:5E:91:F9:F6:F8:87:F4:53:EE:4D:FE:B0:5D:C8:86:E9:6E:CC
X509v3 Authority Key Identifier:
keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:42:c7:e7:47:8f:14:fa:6f:c3:96:75:c4:29:47:78:ad:a8:
2e:e0:e6:a2:eb:71:02:c0:99:c9:9e:70:15:3f:1d:37:fa:91:
a4:85:e1:8e:e1:6a:18:a1:3f:0a:10:85:4e:e8:2a:73:a9:3c:
ac:17:57:f7:bc:80:e4:7d:04:dc:70:f4:c4:fa:a4:36:b9:83:
ab:65:d3:31:ff:f3:e0:a9:88:04:3c:be:73:af:8b:bf:f7:40:
ed:c0:4f:1f:91:d6:25:67:2e:39:44:dc:25:cb:90:11:88:70:
fc:54:2a:a0:42:44:db:de:72:45:1c:c7:f7:07:89:25:37:13:
93:94:00:c4:80:0c:a7:e9:2b:6c:02:3a:d7:b4:23:f0:4e:d6:
86:77:a6:11:ba:27:5d:d1:c6:89:df:1a:cf:b4:e8:b2:e7:b1:
e4:83:56:c9:7d:51:73:9d:5e:f1:ae:0c:9c:9e:18:56:34:43:
27:2e:86:b9:81:a5:eb:9f:f3:30:18:c1:d5:3f:0a:d4:1a:7e:
1a:9a:a4:94:01:e6:3b:64:88:fe:87:6e:93:81:33:80:c8:3f:
f5:6f:95:74:ac:85:29:ac:fd:34:00:fa:f0:ec:72:82:7f:d0:
73:d7:2f:ea:87:5b:bb:e5:24:23:45:0b:c9:a5:0d:23:1a:30:
10:c2:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:06:41 2025 by rpki-client