Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: C5k+OgDULfoXymdDYnUU4ZKZunbq23E+E/FeThTfRxA=
Subject key identifier: EB:B4:0F:FF:61:4B:67:84:75:05:AA:15:93:59:FA:8C:8B:96:AE:CE
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 0198D4E0BADC3A51A5ABDC55113DF623D1A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: jw0Sr4ytgANab4I7PvstekNS95tJJ/w5ZPEpc0Rq53s=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ba:dc:3a:51:a5:ab:dc:55:11:3d:f6:23:d1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=ebb40fff614b67847505aa159359fa8c8b96aece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:0e:93:70:12:d5:10:f3:0d:ed:93:1f:3c:
f4:d7:c1:dc:37:ea:67:d6:50:a0:53:56:43:20:c3:
0f:b6:d1:04:b9:d8:91:8a:eb:83:c6:04:19:87:f2:
e2:b0:64:c5:d9:5f:4e:ba:f0:7a:b7:68:c7:5e:fd:
80:f2:a4:b3:7c:41:9d:cc:c9:65:32:b5:75:e3:4b:
5f:0e:a1:ca:c5:d5:3c:87:49:ac:de:d1:d0:f2:2a:
92:e0:fb:f4:f9:cb:d8:ec:89:ae:2b:83:f4:fb:2b:
0e:99:84:2e:ba:0f:28:fd:b3:0b:d8:bc:7a:1d:a9:
48:08:50:e3:e0:68:70:5b:e0:32:cd:c1:c7:29:8b:
08:1d:8e:1d:b9:e5:92:f3:a6:dc:32:38:33:cc:16:
8e:1a:ba:9c:3f:2e:4d:9d:d4:c2:ae:ef:65:dc:8e:
98:71:9b:d8:36:60:f4:ed:28:fb:4e:ad:43:91:d8:
20:03:60:81:47:d4:35:57:a1:3b:95:70:5c:8a:57:
33:ed:74:43:5b:1d:56:12:4b:1e:f3:9d:16:8f:89:
34:64:1c:0c:d2:bc:e7:e1:5a:97:11:83:04:54:e3:
3a:97:af:70:3d:2b:90:dd:12:9e:8d:27:40:5f:96:
67:fb:13:96:60:dd:48:62:30:7e:9b:3b:64:a2:b8:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B4:0F:FF:61:4B:67:84:75:05:AA:15:93:59:FA:8C:8B:96:AE:CE
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ef:e3:86:22:dc:f3:22:fe:fa:07:8b:6b:cd:c9:04:4a:21:
9c:5b:62:37:cf:26:c8:f2:e2:e1:e7:24:f9:25:08:b6:87:ab:
99:d2:fe:ba:0a:a3:6e:37:37:0c:1c:84:ef:35:40:49:d3:7b:
c5:de:77:37:86:95:55:27:70:65:72:61:d2:31:0c:91:ea:8f:
05:c7:91:66:d0:f4:72:c8:3b:a9:0e:40:3f:24:6f:cc:e2:c5:
01:92:79:ef:de:a6:e8:2f:b7:dd:7d:84:34:7c:de:97:a1:c2:
ac:7a:52:24:0e:ca:9a:5e:e0:42:27:99:20:96:99:13:7e:6f:
0f:80:72:53:67:1d:0a:fc:64:00:4b:71:bb:58:c8:6c:e9:35:
28:00:d6:b7:6e:15:cd:e0:f2:f6:89:2b:2e:07:0e:ff:f0:f5:
74:03:db:85:5d:d3:e2:d9:08:f1:5c:79:a8:56:61:9e:54:9b:
3f:56:08:50:a1:17:19:6f:e8:b0:26:0c:3e:b2:ea:39:c0:6d:
39:bb:d9:6b:e9:65:12:76:98:74:8d:d2:04:6c:db:fd:0e:0e:
07:a0:df:8e:a2:76:af:ec:14:e7:44:30:1a:29:fe:6d:7e:68:
92:52:47:1a:2e:97:c0:3d:7a:e2:40:7f:dc:0f:9e:7e:db:50:
82:4a:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:30 2025 by rpki-client