Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File: WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier: B0e7cNk1UsjbAIrF0/MewIZK3Y5tb5QidDNnxt2hHx0=
Subject key identifier: 97:9D:77:D2:64:3C:A7:B6:53:38:6A:A1:A2:79:F5:0C:07:46:A6:70
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial: 0197B7EA439B03241F2EFDFD9BE83191BD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number: 04CE
Signing time: Sat 28 Jun 2025 19:01:12 +0000
Manifest this update: Sat 28 Jun 2025 19:01:12 +0000
Manifest next update: Sun 29 Jun 2025 19:01:12 +0000
Files and hashes: 1: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: hwidA5iijRFrWAMZGOqzj1sQmDg9qbNXtoX87JrAqko=)
2: kaNw-FHXt38Mw3A3i3ZxTrdgH0U.roa (hash: ED9csh7TrZ7bmaYOf//aESLX76NQ2OO78tAxi9fibZE=)
3: zTtBYZjfsC0VO3m1kQopjfHbzCI.roa (hash: 1RfpmUJ+OhBzj8PIsZiJ3NArFEOu01QxVGauoTNckNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:43:9b:03:24:1f:2e:fd:fd:9b:e8:31:91:bd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Validity
Not Before: Jun 28 19:01:12 2025 GMT
Not After : Jun 29 19:01:12 2025 GMT
Subject: CN=979d77d2643ca7b653386aa1a279f50c0746a670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:3f:f1:a0:1c:ec:1e:c0:b3:96:2a:19:80:
bb:81:83:14:fd:3c:cd:11:12:0b:cc:fd:23:6c:7e:
c2:bb:00:26:89:c4:e0:dd:38:c7:8b:8d:27:51:98:
52:ba:45:77:1a:12:45:c5:81:8e:50:98:58:f4:b7:
7e:fd:dd:fe:27:78:03:85:f1:1e:ff:99:ba:62:41:
71:0d:e0:be:80:e8:28:22:0b:b3:5f:03:13:d9:b8:
d4:88:26:f9:20:62:78:27:c1:f6:e8:2e:3d:55:0a:
fd:5c:53:3e:47:f8:73:3a:81:67:9d:d8:69:db:1e:
f5:93:2f:d4:98:d5:43:22:cb:cc:b1:86:2c:2a:5d:
96:2a:e3:b2:c4:fb:44:a8:07:f6:29:62:56:3c:2a:
ac:46:03:f3:be:27:d9:c5:65:19:a0:c2:a1:26:f6:
5d:73:e1:8c:8f:24:ea:41:a2:26:9a:3b:26:0c:84:
61:0e:76:c8:6d:76:4a:51:f9:8c:85:05:f7:a8:5b:
93:66:91:28:16:d0:e4:c9:c6:08:d6:d6:f7:c6:8c:
29:58:f3:83:69:76:81:d3:e2:95:ed:7d:cd:f1:02:
8a:76:b3:3c:ff:13:ee:db:2d:96:ed:c5:24:e9:1c:
d6:7f:30:6a:d1:ff:34:b9:e3:9e:19:9b:e7:97:8a:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9D:77:D2:64:3C:A7:B6:53:38:6A:A1:A2:79:F5:0C:07:46:A6:70
X509v3 Authority Key Identifier:
keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:66:fc:e8:c4:0c:49:d2:74:ab:4e:82:3a:bc:45:f1:8f:ea:
ef:e0:22:ab:5d:93:c5:a2:19:72:42:07:0e:7d:b6:00:9b:dc:
00:83:4d:8b:da:d2:ed:ab:33:11:69:e9:5a:cb:5f:bc:a3:e4:
5c:0e:ce:ba:ce:f5:7e:14:df:9f:76:56:a8:e0:b3:16:ea:46:
9b:2e:6b:ae:9d:54:e8:4d:9e:ce:1c:24:a3:f9:ef:8c:b9:18:
cd:3a:f0:0a:7b:3a:b9:0d:26:7a:8b:51:88:83:14:94:9d:1f:
a2:eb:c8:83:08:5a:c0:62:cd:94:28:fe:4e:d3:c5:b8:cf:ac:
6e:c8:8f:4c:88:55:7e:00:b9:fb:b3:e1:81:27:7c:8f:f5:71:
48:64:c0:07:63:a9:56:7d:10:23:c9:9f:81:0b:12:70:e6:da:
48:c5:99:46:93:03:80:d7:e4:70:81:c5:8a:e7:22:49:a0:9c:
c2:01:b6:b6:f0:6d:de:34:2f:25:ce:ed:33:9e:ce:ca:d1:e1:
48:3d:ef:65:6d:31:7d:a7:bc:bf:bc:df:90:10:5b:bc:d7:6b:
43:e8:85:30:55:de:5a:63:9b:05:02:f2:cf:a6:9b:79:88:a4:
2c:f1:35:6e:ae:bb:d4:b8:d8:fc:29:b3:35:00:cf:3b:7a:e5:
09:0a:d6:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36kObAyQfLv39m+gxkb03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5
ODYyNDMwHhcNMjUwNjI4MTkwMTEyWhcNMjUwNjI5MTkwMTEyWjAzMTEwLwYDVQQD
Eyg5NzlkNzdkMjY0M2NhN2I2NTMzODZhYTFhMjc5ZjUwYzA3NDZhNjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjU/8aAc7B7As5YqGYC7gYMU/TzN
ERILzP0jbH7CuwAmicTg3TjHi40nUZhSukV3GhJFxYGOUJhY9Ld+/d3+J3gDhfEe
/5m6YkFxDeC+gOgoIguzXwMT2bjUiCb5IGJ4J8H26C49VQr9XFM+R/hzOoFnndhp
2x71ky/UmNVDIsvMsYYsKl2WKuOyxPtEqAf2KWJWPCqsRgPzvifZxWUZoMKhJvZd
c+GMjyTqQaImmjsmDIRhDnbIbXZKUfmMhQX3qFuTZpEoFtDkycYI1tb3xowpWPOD
aXaB0+KV7X3N8QKKdrM8/xPu2y2W7cUk6RzWfzBq0f80ueOeGZvnl4r7sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJedd9JkPKe2UzhqoaJ59QwHRqZwMB8GA1UdIwQY
MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt
MDZkZjFkYzAzMzY3LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3
LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2b86MQM
SdJ0q06COrxF8Y/q7+Aiq12TxaIZckIHDn22AJvcAINNi9rS7aszEWnpWstfvKPk
XA7Ous71fhTfn3ZWqOCzFupGmy5rrp1U6E2ezhwko/nvjLkYzTrwCns6uQ0meotR
iIMUlJ0fouvIgwhawGLNlCj+TtPFuM+sbsiPTIhVfgC5+7PhgSd8j/VxSGTAB2Op
Vn0QI8mfgQsScObaSMWZRpMDgNfkcIHFiuciSaCcwgG2tvBt3jQvJc7tM57OytHh
SD3vZW0xfae8v7zfkBBbvNdrQ+iFMFXeWmObBQLyz6abeYikLPE1bq671LjY/Cmz
NQDPO3rlCQrWdg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:59 2025 by rpki-client