Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File: WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier: z7+joZKkrtlREnwni5m1E0Kjvaxmcsolo0I2xeqwE/I=
Subject key identifier: B6:6A:70:BA:10:EE:46:38:4E:6E:06:A3:20:9E:70:81:CC:1C:FB:9A
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial: 0197B6D78A3A6CF4E34D1DEDA9E51B2B5F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number: 0B50
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: UfSXSDvg0nDpvnBYP0h1HKU8CWTuSe3mjuKG9bMwHc8=)
2: sPVz6CXeimsgpxuXKMYY5ra1yXI.roa (hash: uGVCkdoP9XZVNq6UA53Y8OgwaBktr5jNaHV/XYvmoPk=)
3: xlkkoDtcxpoL9470SYUwdesBd0U.roa (hash: E5i1JoD4+1v4NgDajZkbyhzpzTtWx/xCOYZCaaoJ38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8a:3a:6c:f4:e3:4d:1d:ed:a9:e5:1b:2b:5f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=b66a70ba10ee46384e6e06a3209e7081cc1cfb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:61:a4:59:10:a9:62:e4:10:e3:93:08:3a:
e6:25:35:05:e6:b6:c2:07:83:41:7b:4f:c2:1d:ec:
9e:10:92:df:b9:3c:a0:56:4f:69:ea:0a:f0:00:f7:
9c:a8:be:8b:e0:8d:85:ea:ef:84:38:e3:55:45:37:
00:bc:c1:f6:7b:b0:f1:da:81:0b:8b:ba:cc:a6:9d:
0a:36:0b:02:84:4a:90:36:d2:95:2c:92:45:7f:0b:
62:24:36:fa:32:8b:1d:97:d5:22:74:18:9b:34:0b:
5f:3f:32:65:e8:4b:a4:15:9a:1c:8d:48:72:ec:89:
ac:10:d6:f5:9c:22:d4:4c:da:41:df:f2:d9:ef:b3:
61:44:76:a3:fc:70:2e:d2:78:7f:18:06:53:56:41:
95:53:01:c9:61:89:3b:1c:57:94:c9:fb:b8:6c:3e:
88:6f:02:ec:61:e4:2b:44:ac:6d:c2:95:a3:fe:fc:
14:ce:7b:da:40:81:ba:32:db:c6:ae:3a:d9:2f:8a:
4c:2e:be:1a:8e:94:49:e8:45:fb:4e:23:96:39:a4:
31:71:23:51:73:e3:91:b2:5a:cf:be:2c:f7:6c:42:
9c:0b:c1:62:a9:c2:d0:a4:88:c0:64:88:3d:a1:fe:
da:93:d0:df:b8:49:02:df:b8:39:d4:f6:ff:6a:1e:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6A:70:BA:10:EE:46:38:4E:6E:06:A3:20:9E:70:81:CC:1C:FB:9A
X509v3 Authority Key Identifier:
keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:95:6f:d9:c1:c2:d1:bf:32:d8:d8:f2:3a:3a:f3:ef:55:7d:
6d:1a:f5:0b:25:5e:08:44:55:4a:71:5b:f4:d4:3a:95:06:e7:
ce:7d:e0:75:4d:cf:df:ad:f1:95:c8:9c:b6:94:4e:b1:9f:5a:
8f:4f:55:5f:f2:bf:b4:19:9b:12:cd:59:08:a7:8c:92:7b:82:
74:f4:93:aa:a3:63:16:ef:ce:1b:93:5b:f0:82:eb:43:20:ac:
32:9e:1e:62:1f:8f:84:12:53:b4:7b:ee:6d:34:55:5c:f3:e6:
97:e1:35:01:a4:82:7e:e8:e5:ac:e4:a2:9a:a8:9a:5c:9d:ff:
37:b0:b2:58:25:92:ae:e4:f2:90:f6:85:31:62:82:77:94:e3:
c8:ac:65:b3:b9:6e:cd:90:a3:83:9a:65:80:c0:93:99:57:fe:
9b:b4:03:4c:4b:b9:2b:6f:95:c8:07:72:eb:c2:ff:15:c4:6f:
a1:5e:59:5b:e3:ae:8f:ec:14:31:ee:00:6e:35:bd:07:e5:e5:
e8:63:48:9b:6d:91:7b:20:30:25:fd:f4:e4:a2:c8:f1:88:41:
f6:45:4a:dc:52:b7:c0:06:f2:e8:b1:0e:49:79:0d:04:28:fb:
19:ee:55:c6:4f:ea:98:fc:3e:e4:c3:28:a7:77:9f:0d:65:fd:
ef:9f:df:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214o6bPTjTR3tqeUbK1+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjI5ZTdiOGEwZGRiOWMzNmM2ZTBlM2Y0OTU3NzgxN2Iw
ZWEzYTYwHhcNMjUwNjI4MTQwMTA4WhcNMjUwNjI5MTQwMTA4WjAzMTEwLwYDVQQD
EyhiNjZhNzBiYTEwZWU0NjM4NGU2ZTA2YTMyMDllNzA4MWNjMWNmYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCphpFkQqWLkEOOTCDrmJTUF5rbC
B4NBe0/CHeyeEJLfuTygVk9p6grwAPecqL6L4I2F6u+EOONVRTcAvMH2e7Dx2oEL
i7rMpp0KNgsChEqQNtKVLJJFfwtiJDb6Mosdl9UidBibNAtfPzJl6EukFZocjUhy
7ImsENb1nCLUTNpB3/LZ77NhRHaj/HAu0nh/GAZTVkGVUwHJYYk7HFeUyfu4bD6I
bwLsYeQrRKxtwpWj/vwUznvaQIG6MtvGrjrZL4pMLr4ajpRJ6EX7TiOWOaQxcSNR
c+ORslrPviz3bEKcC8FiqcLQpIjAZIg9of7ak9DfuEkC37g51Pb/ah6CdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZqcLoQ7kY4Tm4GoyCecIHMHPuaMB8GA1UdIwQY
MBaAFFiynnuKDducNsbg4/SVd4F7DqOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUt
ZWU3M2ZlMjFlZDIzLzEvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUtZWU3M2ZlMjFlZDIz
LzEvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5Vv2cHC
0b8y2NjyOjrz71V9bRr1CyVeCERVSnFb9NQ6lQbnzn3gdU3P363xlcictpROsZ9a
j09VX/K/tBmbEs1ZCKeMknuCdPSTqqNjFu/OG5Nb8ILrQyCsMp4eYh+PhBJTtHvu
bTRVXPPml+E1AaSCfujlrOSimqiaXJ3/N7CyWCWSruTykPaFMWKCd5TjyKxls7lu
zZCjg5plgMCTmVf+m7QDTEu5K2+VyAdy68L/FcRvoV5ZW+Ouj+wUMe4AbjW9B+Xl
6GNIm22ReyAwJf305KLI8YhB9kVK3FK3wAby6LEOSXkNBCj7Ge5Vxk/qmPw+5MMo
p3efDWX975/ffg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:17 2025 by rpki-client