Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json)
Hash identifier: O3sh5U3TJ2BmrJrpCwNQfJVSlCPV6tZEkjfazhgfyqM=
Subject key identifier: 6B:2C:11:73:02:7C:05:46:42:D3:EB:D2:8E:F0:58:72:79:8B:64:32
Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Certificate serial: 0197B6A03C6BA5088BBDD765F3843273FC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
Manifest number: 08D5
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: BTTvC8v66O2EpK1CYoUyKwsnmsY.roa (hash: 8Cg+TzwOE6bqFQKwpEVGr60uQJS1JrcoMWvltGsfhb0=)
2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: m6z/n0H/73ivfSrRYZGsws7MZhxr9DzlEHf197dv4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3c:6b:a5:08:8b:bd:d7:65:f3:84:32:73:fc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=6b2c1173027c054642d3ebd28ef05872798b6432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8f:12:55:4f:b6:23:37:9a:5e:c6:3e:16:d0:
e6:56:8c:f5:87:d7:d4:44:ce:43:24:6d:4d:cc:83:
65:ba:be:7a:68:7e:e0:68:9c:e8:84:f9:8e:7b:3d:
3b:a0:34:b9:e5:b6:62:5b:52:b6:a8:3a:83:d6:c4:
85:ff:99:4d:22:a0:18:c0:be:e2:8d:c7:cf:5b:02:
7c:d1:a8:21:91:b9:5e:e8:e0:17:c4:dd:26:73:86:
c3:d5:42:91:2a:21:27:71:8a:92:9f:28:d1:3e:45:
01:0f:4e:ec:cd:73:56:28:55:96:9c:37:24:c2:38:
e4:1d:5b:c6:a1:95:25:65:ba:41:e5:fc:b8:3b:bc:
88:67:9e:5d:69:6c:bf:b5:23:a4:15:b1:3a:b7:7f:
5d:3e:15:0c:73:df:56:c3:b4:5b:e1:31:ab:85:d0:
34:0a:47:10:1e:84:76:35:05:9e:dd:cd:e4:a7:b3:
02:70:4f:ab:82:a7:66:1d:5a:28:31:60:a8:d6:5c:
7b:7e:5f:51:7e:ce:0f:75:8e:98:a6:29:66:0e:ec:
c8:d1:a0:5d:e1:60:10:63:6b:8e:a4:e2:ae:98:ad:
6d:a8:2b:ea:c0:81:c3:94:8a:11:86:9d:d3:ca:20:
af:cc:af:e5:ee:aa:0f:da:7d:29:6a:7e:63:81:db:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2C:11:73:02:7C:05:46:42:D3:EB:D2:8E:F0:58:72:79:8B:64:32
X509v3 Authority Key Identifier:
keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ea:29:39:b1:c8:35:9f:a1:53:60:fb:1b:77:9a:51:ee:9f:
ad:35:a9:ec:0b:16:7e:b8:c2:66:9e:f6:56:1f:1f:e9:46:fa:
9c:c1:24:37:c5:34:1f:17:1f:fc:c8:d2:de:d2:05:cb:0d:24:
b2:5c:cf:ac:55:37:3d:e4:e9:5b:ed:29:51:5a:ca:da:06:20:
35:30:48:e6:a0:52:fd:ef:30:4c:f4:47:4c:e2:ad:88:07:d4:
c1:2e:fb:23:13:17:0b:97:27:4f:72:27:0b:9f:ac:4b:73:16:
48:ea:0f:4c:92:33:3a:27:df:79:f1:03:7e:ac:8d:6b:f7:55:
f3:b8:b1:99:cb:ce:9f:fa:28:46:3b:5e:f2:b8:fe:11:14:0e:
d1:8f:2f:6b:c7:d0:82:5d:dd:cb:c7:80:7b:23:ce:ba:8b:7d:
93:07:d2:48:be:11:98:d4:fc:43:06:41:ca:7b:b7:33:53:b9:
30:b1:a5:02:9d:b4:ff:41:de:bd:4d:6d:35:e0:8f:7b:93:03:
02:55:10:49:e9:0e:e5:61:8e:fa:2c:98:fc:45:f1:41:95:b7:
eb:c3:ee:05:ea:db:b4:5c:b3:be:e5:e7:2c:98:0f:a5:7a:85:
99:f9:20:29:ff:aa:72:3a:aa:a7:c7:28:bf:06:a6:19:b6:df:
35:c8:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:21 2025 by rpki-client