Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: Xd6TG2pgWqr8/lobCjs1hfl0DRBSKKGDMjXl+T9ZU0s=
Subject key identifier: B0:D0:62:FB:D3:C5:30:B6:11:D1:34:2A:06:EF:28:4A:40:84:36:E0
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 0196B8231CA2C784D61E92051D3BDD790459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 153B
Signing time: Sat 10 May 2025 03:00:30 +0000
Manifest this update: Sat 10 May 2025 03:00:30 +0000
Manifest next update: Sun 11 May 2025 03:00:30 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: RfrdOg8W4OOjDlJtc1226mO6dEW+3e+lW/cJCkxVzQY=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:1c:a2:c7:84:d6:1e:92:05:1d:3b:dd:79:04:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: May 10 03:00:30 2025 GMT
Not After : May 11 03:00:30 2025 GMT
Subject: CN=b0d062fbd3c530b611d1342a06ef284a408436e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:7e:52:ed:55:50:d1:bf:2c:2c:28:79:1c:
1e:30:02:c7:35:39:50:b7:ce:b6:61:20:62:4e:78:
52:39:20:e8:44:49:04:1c:8e:d3:69:a0:b2:88:d1:
5a:a8:44:50:c0:14:ec:9e:a3:a6:db:38:53:bd:96:
89:53:72:7c:ca:b5:11:d1:a3:02:34:ac:d6:4d:96:
dd:a1:d2:d2:2d:b9:40:e9:1c:3f:4b:30:6a:ce:71:
a7:b7:39:5f:4a:65:90:9d:e7:75:14:87:46:3d:62:
fd:93:7d:8c:6c:64:dd:ea:97:f8:19:66:bc:d1:5f:
29:f0:00:5c:dd:fa:f3:2f:ba:61:66:5f:a7:8a:f1:
6c:76:5e:b9:8c:28:94:c0:a5:ee:36:ec:42:79:dc:
e9:c6:33:05:33:83:ff:50:86:cf:e9:90:47:6d:3a:
95:7e:55:c7:d4:86:1c:f2:94:89:ac:9d:4e:c0:04:
81:05:65:df:d8:be:92:10:89:f8:b7:4d:75:23:9b:
b3:ab:f7:d1:9d:47:07:37:b5:e8:a9:8a:eb:4e:c0:
c7:f6:66:6a:3f:60:97:c7:d4:b7:70:77:88:c4:24:
28:69:7a:6c:e0:51:b0:5e:1e:e2:e2:cd:86:0c:f6:
8a:42:53:50:65:f1:ab:ba:56:53:b5:7d:3c:23:a5:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D0:62:FB:D3:C5:30:B6:11:D1:34:2A:06:EF:28:4A:40:84:36:E0
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d2:ea:c0:14:80:45:1a:73:b0:28:fb:e2:de:53:de:84:d7:
39:17:85:74:b5:77:de:21:cf:a0:70:73:f9:b6:2a:52:bb:02:
ca:93:46:06:df:51:0a:82:97:81:b1:fe:d7:49:be:7d:57:67:
41:8c:dd:3c:ec:c8:53:65:94:bf:a3:3e:ae:68:92:8e:09:a3:
14:9a:11:0d:70:3d:ee:9f:6a:93:48:b6:7a:8f:75:1e:01:05:
4a:67:ce:66:10:95:ec:d0:c6:59:1c:2e:7f:b5:2e:b4:17:55:
d7:98:ad:d1:94:77:9f:cd:9e:9b:f4:5c:3b:e4:1b:7e:1f:c7:
eb:20:c0:32:b2:ea:15:db:c6:d9:2b:ce:a4:2d:0a:ca:fd:66:
94:d2:0a:27:60:b5:32:b6:b7:12:c7:60:13:84:5d:89:01:97:
64:b6:1e:92:b5:20:0e:20:3b:d4:31:67:ab:52:ee:bc:20:c8:
aa:41:6c:ed:99:6f:b1:a0:72:1f:4a:14:b7:27:9c:a2:82:d8:
30:b9:0a:63:2a:37:bb:03:41:4d:aa:46:2f:dd:85:d0:69:35:
12:8a:c0:6a:11:86:73:5a:28:11:92:8f:09:c3:c3:10:e2:55:
9c:76:7c:36:9b:bb:cf:f4:8a:c0:87:33:1a:a8:13:67:a4:de:
2d:cc:d2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:13:42 2025 by rpki-client