Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: CNPa/aGXeje+B77PkXISlWwLJ/r6NxGzjnwz5ojulFs=
Subject key identifier: 35:5E:5A:69:C7:51:64:55:0C:A0:2C:A8:B7:0A:51:C1:09:44:76:BE
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 0197B5FC70F0264DE9F746B8EC66E3727A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 01B7
Signing time: Sat 28 Jun 2025 10:01:49 +0000
Manifest this update: Sat 28 Jun 2025 10:01:49 +0000
Manifest next update: Sun 29 Jun 2025 10:01:49 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: lMWUjkiWHvZIHE98Bxvhs7IKMOWX44bGHDMyt68gxtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:70:f0:26:4d:e9:f7:46:b8:ec:66:e3:72:7a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Jun 28 10:01:49 2025 GMT
Not After : Jun 29 10:01:49 2025 GMT
Subject: CN=355e5a69c75164550ca02ca8b70a51c1094476be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:49:49:f8:8d:6a:75:66:68:68:13:db:35:
d1:d6:0e:95:12:d5:dd:76:d0:5f:91:a0:57:68:e1:
dd:68:f2:35:27:22:84:89:97:8b:05:3d:a4:3d:97:
00:dc:9a:6c:9f:f3:0e:c7:e0:6d:fe:9b:55:45:08:
7d:3d:b1:9a:fd:c7:f1:95:94:d4:94:14:2c:5c:40:
d5:f6:06:e5:ad:32:23:bc:bd:27:0a:80:f0:d7:d9:
62:7f:cb:cd:24:bd:d9:35:a6:58:54:86:17:d0:ff:
3f:8e:ef:e7:ae:21:5f:b4:70:89:ac:35:b2:54:0d:
73:53:fe:b4:66:01:83:6e:f8:32:5d:36:73:69:c4:
12:1e:0c:ed:95:79:60:cc:70:78:08:15:96:8c:34:
02:78:56:e5:03:43:cd:81:da:d9:a1:13:8d:54:05:
68:9a:63:be:97:f4:b6:49:de:fb:3b:da:8d:28:ed:
34:76:60:05:e8:49:9b:99:93:db:81:14:0a:09:22:
e7:0f:fd:d4:a7:d7:af:4e:da:bd:b8:24:6b:02:c5:
73:bc:79:2d:44:39:f5:70:4f:e1:9e:37:4b:a8:67:
f2:8e:79:26:46:e2:e1:6b:05:16:c3:e6:19:8e:d5:
95:24:d4:a2:cb:a7:31:30:3b:9b:a4:34:01:4b:09:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5E:5A:69:C7:51:64:55:0C:A0:2C:A8:B7:0A:51:C1:09:44:76:BE
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fc:ca:1b:56:9a:f5:b2:36:05:a7:b2:2a:9c:51:f7:5a:1a:
66:db:eb:1c:ea:ea:b4:6f:33:67:34:e8:46:a5:7e:80:f3:29:
fa:6a:ae:f4:f7:da:f3:e4:fe:95:18:b1:a2:ae:cd:d4:a8:36:
27:bc:95:d5:8a:09:62:09:c2:c0:21:c0:84:97:24:44:ab:ed:
a1:d0:67:d0:a7:c3:73:14:8d:1f:b6:fb:ee:fd:ef:a5:d0:a8:
33:f8:d8:9a:05:c9:08:82:86:b2:e0:f8:6e:9a:bd:c2:1d:32:
3a:89:a0:68:e8:f6:7a:33:ad:63:9a:46:a1:aa:d9:34:e1:72:
b0:83:85:6b:1e:69:b4:f8:e0:1b:b3:1f:7e:4f:0b:86:87:68:
dd:7a:c1:a0:45:69:36:fa:bb:0c:09:91:fb:d5:24:af:5d:69:
3a:84:ba:be:24:09:13:99:d3:e5:8b:59:fb:2c:37:e2:0e:52:
8a:3a:64:4c:ff:9b:93:66:30:e4:b0:41:17:7a:b2:d4:74:be:
d9:b0:b0:41:c7:12:ea:9e:ba:b6:5e:93:ac:a8:60:1c:eb:6c:
31:a6:02:7b:45:5a:f1:3b:6d:eb:22:d8:43:cb:30:4f:5c:c0:
ce:d6:a6:c0:26:4d:cc:78:57:a8:b1:51:99:70:5d:94:4b:b1:
2b:98:1e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/HDwJk3p90a47GbjcnqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2VkYmE2N2E0NWI3MzdkOGFkMGY3YTc4NGMzNTBkODZk
NjcxMTgwHhcNMjUwNjI4MTAwMTQ5WhcNMjUwNjI5MTAwMTQ5WjAzMTEwLwYDVQQD
EygzNTVlNWE2OWM3NTE2NDU1MGNhMDJjYThiNzBhNTFjMTA5NDQ3NmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLZJSfiNanVmaGgT2zXR1g6VEtXd
dtBfkaBXaOHdaPI1JyKEiZeLBT2kPZcA3Jpsn/MOx+Bt/ptVRQh9PbGa/cfxlZTU
lBQsXEDV9gblrTIjvL0nCoDw19lif8vNJL3ZNaZYVIYX0P8/ju/nriFftHCJrDWy
VA1zU/60ZgGDbvgyXTZzacQSHgztlXlgzHB4CBWWjDQCeFblA0PNgdrZoRONVAVo
mmO+l/S2Sd77O9qNKO00dmAF6EmbmZPbgRQKCSLnD/3Up9evTtq9uCRrAsVzvHkt
RDn1cE/hnjdLqGfyjnkmRuLhawUWw+YZjtWVJNSiy6cxMDubpDQBSwlrcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVeWmnHUWRVDKAsqLcKUcEJRHa+MB8GA1UdIwQY
MBaAFFjO26Z6Rbc32K0PenhMNQ2G1nEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWIt
NzBjNzcwYjEwODdiLzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWItNzBjNzcwYjEwODdi
LzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/zKG1aa
9bI2BaeyKpxR91oaZtvrHOrqtG8zZzToRqV+gPMp+mqu9Pfa8+T+lRixoq7N1Kg2
J7yV1YoJYgnCwCHAhJckRKvtodBn0KfDcxSNH7b77v3vpdCoM/jYmgXJCIKGsuD4
bpq9wh0yOomgaOj2ejOtY5pGoarZNOFysIOFax5ptPjgG7Mffk8Lhodo3XrBoEVp
Nvq7DAmR+9Ukr11pOoS6viQJE5nT5YtZ+yw34g5SijpkTP+bk2Yw5LBBF3qy1HS+
2bCwQccS6p66tl6TrKhgHOtsMaYCe0Va8Ttt6yLYQ8swT1zAztamwCZNzHhXqLFR
mXBdlEuxK5geew==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:31 2025 by rpki-client