Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: TTUF1Q66Wlzh20QoSbGfL6t7YeqzVjHGdbZAgmChNoA=
Subject key identifier: 6C:3E:01:62:4C:14:D0:D0:6A:62:F3:1C:5F:66:66:79:96:5E:16:D2
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 019960219FB07FD9955D3617AE9E029C9629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 0870
Signing time: Fri 19 Sep 2025 04:00:40 +0000
Manifest this update: Fri 19 Sep 2025 04:00:40 +0000
Manifest next update: Sat 20 Sep 2025 04:00:40 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: VdPSPEsSHdfrWKmbAu+2qie0U7cSAEBM6ds+lKI0KMg=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:21:9f:b0:7f:d9:95:5d:36:17:ae:9e:02:9c:96:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Sep 19 04:00:40 2025 GMT
Not After : Sep 20 04:00:40 2025 GMT
Subject: CN=6c3e01624c14d0d06a62f31c5f666679965e16d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:bd:f8:1f:65:a0:26:d9:a1:ca:30:0d:d4:
02:04:06:a0:ce:0a:a2:7e:79:66:c8:f9:5e:23:d8:
b4:db:44:ec:e3:8e:0e:a4:3f:b7:20:c4:c9:f9:36:
56:ca:34:ee:c1:a3:de:9a:3e:c0:a3:08:13:49:42:
ab:84:f9:9b:17:dc:3d:67:83:26:c6:4c:b9:20:d1:
a8:1c:cb:4c:95:31:8f:2e:61:8f:29:e8:fa:0a:7d:
e8:0f:d3:8a:5c:59:f1:e6:a4:91:32:fd:1e:97:8b:
4f:e4:2c:f1:e1:0d:39:28:e3:e7:b6:79:64:99:11:
3f:c0:f6:34:40:f4:17:0b:9d:fc:f5:06:c4:a4:03:
0f:49:d7:52:ab:ef:18:6e:46:77:4d:04:21:0a:ae:
6e:f2:bd:5e:df:fa:b1:a9:82:73:a0:52:49:b2:0e:
76:05:15:6d:9c:9a:b1:89:bb:8c:a7:28:36:81:96:
c7:e8:4a:63:15:35:d5:a5:20:ff:02:fe:ae:a5:3c:
50:b1:53:0d:87:f6:e5:5f:1f:55:bc:8d:be:a0:5e:
5a:13:9a:42:02:37:f5:e8:9a:75:02:53:c5:75:bd:
cc:e3:00:86:29:e8:3e:04:45:c1:85:8c:70:47:a6:
1e:20:bb:b9:7f:2d:9a:4a:4f:4d:1b:d3:db:22:16:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3E:01:62:4C:14:D0:D0:6A:62:F3:1C:5F:66:66:79:96:5E:16:D2
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fd:d3:00:9a:b0:80:c4:17:6e:81:db:ca:6a:75:d5:a0:d1:
36:0d:ab:27:00:af:f1:29:00:06:bc:3b:b5:5b:41:e1:df:90:
8e:62:f3:44:25:1f:cd:91:79:8a:47:87:ec:86:1f:f6:2f:66:
5e:8a:12:fd:78:8f:83:99:70:67:80:c2:da:84:59:45:b8:5e:
5f:b3:1a:2b:b2:38:62:3e:13:e5:84:d7:85:54:cd:2a:60:a1:
ca:df:cb:01:ff:30:a7:28:1f:78:22:da:89:02:dd:ec:50:8b:
77:59:de:5d:fa:9f:41:f4:ef:e3:65:67:a2:d6:5a:1d:75:dd:
43:d0:da:1f:7d:6c:59:b6:69:2a:98:f1:0c:37:61:07:0b:38:
ac:dc:1b:81:ab:1e:fa:89:0d:96:85:e5:ae:29:5d:ae:cc:fa:
85:ca:9f:70:14:92:a5:24:ee:a6:da:6e:12:76:81:5f:12:49:
d1:67:23:8c:80:59:1f:f4:ab:2f:b0:53:c9:b5:d7:18:10:60:
96:78:86:a3:dc:0a:75:85:47:ac:e8:0a:dd:4d:45:79:e4:5a:
ae:0c:e5:ac:60:e2:a0:7a:e0:78:f5:c2:8a:34:4c:40:22:8f:
2a:a7:43:02:c0:be:0e:0a:dd:bf:18:9d:c1:82:10:45:ba:d8:
d7:7f:e7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:22:40 2025 by rpki-client