Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
File: wbsILYb1B7_635GSqmdqt9onDUI.mft (raw, json)
Hash identifier: GabRCOc3C9Jt5v7G5SV3d960Z9pjsLRK+TfxL6VDq28=
Subject key identifier: D5:5E:3B:28:D2:9E:1A:13:6E:FC:36:C3:1E:A3:01:4C:9C:CD:F9:83
Authority key identifier: C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
Certificate issuer: /CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Certificate serial: 0197B820FEFC9CCB0ED8C22033312D142AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: oQclDl8_JxNhzqNyrIJDWCORZJA.roa (hash: JcEUx0LCrdDEqt2JdZzmeRRb5CPjlWwu7xHPm1S7f5w=)
2: wbsILYb1B7_635GSqmdqt9onDUI.crl (hash: rn0HWyy2eN4ZztrWRNSTQumA5d2awNp6ll6kWFD2I/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:fe:fc:9c:cb:0e:d8:c2:20:33:31:2d:14:2a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=d55e3b28d29e1a136efc36c31ea3014c9ccdf983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:03:b0:38:48:d7:36:86:7c:83:9e:cb:98:69:
7e:b4:8e:f8:c0:63:aa:d2:c4:c0:c8:cd:98:e6:f5:
20:2c:b5:ad:d5:7e:a8:58:04:e3:f1:2d:bf:a7:b3:
fd:07:be:d5:ae:c8:f3:18:c1:33:d7:ca:a3:cf:b9:
72:1e:2c:65:45:f0:4b:e4:b9:d2:1f:eb:aa:9f:2b:
a7:48:2a:81:39:1c:ea:75:fe:e2:42:06:f2:8c:aa:
c3:0f:9a:b6:8c:d9:dc:84:51:e0:a3:cd:c6:0b:9d:
13:87:dd:75:4a:53:7b:b1:8c:2f:2f:f8:6f:fd:97:
14:11:4c:7d:a3:81:74:9b:36:5c:28:8f:55:0f:bc:
f9:4a:ab:97:13:78:52:b5:6a:11:81:06:0d:72:61:
40:1d:64:95:18:56:ed:1a:f6:33:28:82:ab:32:e5:
80:0f:9d:60:41:1e:66:d7:5f:18:67:c7:9b:5e:ac:
0f:95:20:79:7f:3b:7d:1d:f6:3f:9c:d6:7f:f2:6a:
de:d7:96:a7:fb:48:1c:f0:34:4a:32:aa:81:d0:25:
4b:8a:b2:c0:a0:ee:c4:f0:68:aa:8e:2d:37:b8:0c:
ef:b1:05:fd:95:03:10:16:75:0c:91:93:65:61:72:
4a:4d:74:c2:ef:a1:63:b5:9b:31:a0:54:84:ce:31:
53:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5E:3B:28:D2:9E:1A:13:6E:FC:36:C3:1E:A3:01:4C:9C:CD:F9:83
X509v3 Authority Key Identifier:
keyid:C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8f:2e:49:0e:3f:f3:79:45:dc:04:d8:8c:a7:0a:58:bb:66:
78:2f:d8:a4:1b:48:15:5b:30:d3:19:7b:fe:25:70:92:38:5a:
7d:e4:d9:15:27:a7:27:40:f4:98:a6:4d:3e:a4:d0:64:b3:d3:
98:c4:a7:e3:93:ca:e2:a2:d2:26:d6:c6:2e:a4:15:10:2b:7f:
7c:93:c9:c5:37:aa:4a:2f:73:19:06:4b:ee:93:14:04:b9:7b:
91:07:b9:7d:9f:28:f5:2c:a8:14:f0:8e:be:67:c5:2c:54:93:
3d:55:77:57:55:e4:f3:8a:8f:1a:d7:83:bb:13:00:5a:30:0b:
d5:4c:18:ce:ea:82:1b:62:da:7c:5e:a5:f3:31:51:d6:87:97:
71:41:21:39:e0:29:7c:82:57:b1:1f:96:d6:a2:1e:8e:a2:e6:
79:92:25:0f:cb:fb:6f:1b:79:dc:b4:5a:97:fc:eb:4f:79:0e:
34:80:9c:97:d7:0b:55:48:36:c0:88:d8:5e:3c:5d:45:88:d4:
95:a7:3b:cc:d5:16:bd:4f:86:6d:db:c0:bc:ca:e1:da:a4:05:
1a:84:55:ba:59:7c:d5:6e:b1:98:81:58:68:9a:34:e6:f0:de:
de:22:25:72:27:ad:39:c4:3d:89:c9:83:29:52:cc:9f:6e:e8:
11:6c:77:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IP78nMsO2MIgMzEtFCq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYmIwODJkODZmNTA3YmZmYWRmOTE5MmFhNjc2YWI3ZGEy
NzBkNDIwHhcNMjUwNjI4MjAwMDU5WhcNMjUwNjI5MjAwMDU5WjAzMTEwLwYDVQQD
EyhkNTVlM2IyOGQyOWUxYTEzNmVmYzM2YzMxZWEzMDE0YzljY2RmOTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQOwOEjXNoZ8g57LmGl+tI74wGOq
0sTAyM2Y5vUgLLWt1X6oWATj8S2/p7P9B77VrsjzGMEz18qjz7lyHixlRfBL5LnS
H+uqnyunSCqBORzqdf7iQgbyjKrDD5q2jNnchFHgo83GC50Th911SlN7sYwvL/hv
/ZcUEUx9o4F0mzZcKI9VD7z5SquXE3hStWoRgQYNcmFAHWSVGFbtGvYzKIKrMuWA
D51gQR5m118YZ8ebXqwPlSB5fzt9HfY/nNZ/8mre15an+0gc8DRKMqqB0CVLirLA
oO7E8Giqji03uAzvsQX9lQMQFnUMkZNlYXJKTXTC76FjtZsxoFSEzjFTQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVeOyjSnhoTbvw2wx6jAUyczfmDMB8GA1UdIwQY
MBaAFMG7CC2G9Qe/+t+RkqpnarfaJw1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzIt
ZTg3YzlmNGJhOTdkLzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzItZTg3YzlmNGJhOTdk
LzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbY8uSQ4/
83lF3ATYjKcKWLtmeC/YpBtIFVsw0xl7/iVwkjhafeTZFSenJ0D0mKZNPqTQZLPT
mMSn45PK4qLSJtbGLqQVECt/fJPJxTeqSi9zGQZL7pMUBLl7kQe5fZ8o9SyoFPCO
vmfFLFSTPVV3V1Xk84qPGteDuxMAWjAL1UwYzuqCG2LafF6l8zFR1oeXcUEhOeAp
fIJXsR+W1qIejqLmeZIlD8v7bxt53LRal/zrT3kONICcl9cLVUg2wIjYXjxdRYjU
lac7zNUWvU+GbdvAvMrh2qQFGoRVull81W6xmIFYaJo05vDe3iIlcietOcQ9icmD
KVLMn27oEWx3fw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:20 2025 by rpki-client