Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: KqxsHuKz1zlmpxnyUbvEleAEYRVO/4lL82DaZQV7+Yc=
Subject key identifier: 49:9A:5D:42:86:BE:D8:B5:1D:34:EB:DA:14:12:E0:1B:8E:EE:8E:F1
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 0197B70F25CBE7880680A28D84D347D749DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 15BF
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: 07BN+4LuFM3CUpf3ypQs80juXtfa3if1jQiqWTHx1Xk=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:25:cb:e7:88:06:80:a2:8d:84:d3:47:d7:49:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=499a5d4286bed8b51d34ebda1412e01b8eee8ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:21:d3:2d:5c:89:34:ac:ba:8d:d4:88:d5:
db:56:e9:c4:9c:e1:0e:fe:c6:70:4b:c2:4d:8e:87:
b6:39:94:ed:b4:2e:d5:57:77:1a:61:45:f3:fb:0a:
54:ec:b2:a8:10:62:ce:67:f7:c2:ce:1a:b8:19:15:
2b:1e:bd:bc:8c:aa:94:2b:e8:bb:08:42:d3:45:3a:
69:46:f0:53:98:a2:01:89:e3:29:31:1b:00:8e:dd:
b1:44:82:6d:a4:e7:3d:1e:7a:a2:f9:f2:f2:63:2c:
6e:b7:48:23:e3:4d:2e:de:e9:1f:ad:39:12:28:55:
f5:30:a8:b9:35:10:82:a4:32:a3:fb:a6:cb:1a:4c:
fd:b1:95:3d:1b:73:a6:0e:3a:0c:8e:87:5a:7d:0d:
aa:5b:9c:0e:07:a0:b5:f4:e7:60:89:31:aa:f5:cc:
f3:05:59:02:9e:a7:29:aa:4d:93:3e:fa:4a:b0:c0:
e9:4c:47:9e:9a:ee:25:f5:69:4a:e1:be:7e:b9:6f:
2e:f1:4a:67:f5:5f:3c:d3:0d:ca:0f:58:77:94:12:
b3:0a:b1:f3:7e:cf:9b:a4:f0:65:01:58:0e:09:9b:
df:59:99:5a:56:d0:f9:46:09:b0:6c:b8:17:1a:94:
c1:45:8c:52:b5:cc:c4:89:61:14:30:9e:a6:da:30:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9A:5D:42:86:BE:D8:B5:1D:34:EB:DA:14:12:E0:1B:8E:EE:8E:F1
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:92:97:56:e4:81:87:54:ee:2a:61:b8:83:29:6b:36:c0:6d:
c4:8d:86:26:d1:e7:46:5f:89:f7:a2:4c:cf:de:2c:5f:9d:86:
4f:1b:fb:ae:67:62:61:2e:0b:71:b8:7a:c2:dc:df:62:ba:6c:
09:a5:a4:32:9a:62:0c:23:17:b5:ae:cf:3d:4c:7d:98:ec:c4:
4a:b1:84:52:75:8a:73:d7:cf:fa:eb:04:8e:d9:a1:35:c8:38:
f3:ea:ef:9d:96:0a:dc:57:e9:2b:0c:d0:fd:de:5f:53:6a:71:
8d:35:f0:32:c5:5c:c9:15:6b:48:88:5e:fa:64:f3:db:94:14:
08:0e:d8:27:75:a4:be:5d:96:c0:6f:8b:db:eb:2a:e2:66:d7:
a1:14:55:bf:12:3b:63:69:4e:98:d5:a0:5b:60:0f:b5:8d:8f:
59:f6:05:fd:f8:4b:8a:fa:f5:8a:4a:e0:ef:d8:7c:cd:b5:8e:
df:22:21:c5:bd:60:6b:84:34:f5:45:e0:45:a5:5a:70:2f:f8:
d5:dc:49:be:8e:0f:ea:01:ff:ab:0d:46:18:9c:27:28:d1:1b:
a4:8d:16:ae:c7:a2:d7:96:3c:c6:e6:68:26:93:ab:70:cd:a2:
2f:1f:a1:15:7e:51:a1:8d:0a:7b:43:a3:23:a0:1a:30:42:f1:
59:d0:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:48 2025 by rpki-client