Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File: WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier: ndnAxxHOxke3p6r+kfJ8fwsCVVhm/ozbBDdVmovLBdQ=
Subject key identifier: F1:3E:39:F0:2F:4D:8B:C9:0F:04:00:9C:79:F8:0D:85:1F:95:7A:83
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 019921E77D20893D8B53D5B526C4FA2CFDB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number: 1681
Signing time: Sun 07 Sep 2025 02:00:42 +0000
Manifest this update: Sun 07 Sep 2025 02:00:42 +0000
Manifest next update: Mon 08 Sep 2025 02:00:42 +0000
Files and hashes: 1: UZBTwDwhsdeE6L8tM7LMgk2vcQQ.roa (hash: c7iWfc2h0xfZuOGmHIC37VdlCYWmVoLvyubnSxmqlrQ=)
2: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: UZGYGt5PmL75td0MJisPMsDTubKVhNVRtZSTamKQcGw=)
3: gfUQxZf716-HSp7xPfSbqE7VvUQ.roa (hash: r1nBveRpIdnYjv06tCcb1Umx8XxX6zqSuPOa3WYDsmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:7d:20:89:3d:8b:53:d5:b5:26:c4:fa:2c:fd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Sep 7 02:00:42 2025 GMT
Not After : Sep 8 02:00:42 2025 GMT
Subject: CN=f13e39f02f4d8bc90f04009c79f80d851f957a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:84:8f:a3:e5:34:a2:68:93:07:9d:29:73:
69:78:82:e6:6a:8f:ed:53:7e:0a:d0:7c:6e:27:ac:
9d:4d:d4:86:2c:8c:af:ac:75:97:b1:b3:b8:78:32:
3e:7c:60:d3:f9:97:55:33:77:48:9b:38:0e:1c:02:
fc:c3:7e:27:80:c4:c0:0c:f1:ec:52:dc:ab:f8:0f:
ff:30:ef:32:e8:f6:db:e0:39:51:ca:22:65:c0:85:
cd:ba:74:0c:2d:f1:59:8e:29:25:a5:9f:59:59:12:
b3:60:85:7d:15:3d:b6:a8:48:f9:c8:15:54:9f:fd:
f7:0c:8c:07:8c:5a:7f:49:2b:9f:6a:f4:a0:53:93:
3e:56:fa:ff:9f:34:69:ae:a7:aa:53:d6:e5:fc:44:
92:db:d3:e5:5c:49:ee:ee:8b:20:26:45:18:1b:bc:
94:27:c7:ad:16:7d:86:9d:34:01:5a:ec:3f:ff:5d:
c5:0d:ae:36:e2:8f:52:5c:82:3c:d2:38:b3:a0:29:
ec:a8:fc:50:0b:b7:52:c6:d6:3c:fe:95:45:75:44:
a8:fc:4f:86:05:cf:bb:03:82:af:b1:52:e5:eb:d3:
11:3b:ff:ad:14:76:fb:06:fa:35:2c:a6:76:91:00:
f8:62:b5:69:fe:aa:f7:92:80:f5:8b:6c:2e:a5:3a:
6c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3E:39:F0:2F:4D:8B:C9:0F:04:00:9C:79:F8:0D:85:1F:95:7A:83
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a0:93:5a:b5:5e:35:99:9a:db:91:45:46:b1:6e:e7:6d:c8:
f1:fd:c5:f5:c4:8b:4f:56:86:86:49:a2:86:05:5b:00:b4:8c:
c9:e2:3f:37:0e:c1:67:bf:67:65:ab:99:70:41:00:0f:9b:f1:
9d:b2:27:22:8b:ec:3e:65:25:c8:3f:ec:ea:b2:18:21:1e:ed:
e3:fd:0a:eb:e4:83:90:4e:e8:21:54:fe:2e:23:f5:e9:51:e2:
88:1f:3d:0a:57:95:9a:c6:3d:57:3c:fa:e8:61:a4:cb:bb:d7:
ff:5e:3b:6b:86:62:4c:25:64:b1:c6:a4:bc:86:1e:27:ab:05:
86:ec:88:cf:a6:b6:5a:92:da:26:9a:4d:df:d2:23:37:08:11:
f2:e8:8c:94:12:10:64:32:62:f6:45:7a:e3:bd:3a:6c:55:1f:
66:2e:3f:90:f3:e3:0c:23:b3:1d:72:ef:c1:7e:51:30:82:0b:
77:f9:a7:f9:c8:bf:09:d9:21:1e:07:cb:f0:02:8d:fe:63:0a:
ba:a2:d0:fd:19:b6:67:d2:b3:65:25:d3:14:68:ca:0b:de:09:
dc:1a:bd:9d:6f:65:04:4d:60:8a:7f:2f:c1:fa:a1:8b:04:a8:
f6:a7:08:e9:c4:b7:e3:74:c6:99:c6:c9:ac:65:ef:f4:db:1f:
40:9e:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:09 2025 by rpki-client