Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: wgdG9IUTUdw1fbCp1U7WV6PcdW+9jk02QnzyoT0ye40=
Subject key identifier: 50:1B:EC:BA:C8:E5:D1:65:39:97:48:EB:E0:AF:E8:3C:9A:14:E2:B5
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 0197B6A1C33CF4D109BF66B4FBBA6FE722B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 04C7
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: C4UNDyV6EPjHk+MTt+CQnVoKXcXlD8vEVuYwki8D4E4=)
3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c3:3c:f4:d1:09:bf:66:b4:fb:ba:6f:e7:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=501becbac8e5d165399748ebe0afe83c9a14e2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:36:55:ca:ef:a0:66:f4:e7:70:e3:c5:67:
18:b2:5e:da:74:f7:fd:28:3a:ff:9a:a3:e7:80:9c:
41:fc:15:45:a3:e0:9d:e3:88:ab:70:4b:4f:17:72:
53:71:ab:f4:b3:6d:a8:24:af:9a:4d:3e:25:0c:09:
8b:fd:b6:3a:0a:dc:00:03:49:26:e4:a4:20:0e:53:
98:ad:a4:37:24:30:f5:b7:6b:eb:b1:e1:ca:67:13:
b0:08:d7:3e:d5:1f:bf:21:62:cb:84:92:8d:52:68:
93:82:2a:0e:6e:2d:ea:75:b6:cb:40:fe:e6:c9:50:
63:af:67:52:2b:86:fe:92:f0:24:f5:22:1c:83:e3:
58:4a:47:f4:e2:f6:3a:5a:f9:28:92:3a:81:5b:11:
c6:6d:6f:7f:0d:9b:7d:af:f0:df:ec:dd:4f:d8:22:
2c:8c:7e:f7:43:a9:8f:a1:c1:8d:d8:26:56:6d:14:
f5:2e:ff:9c:59:76:5a:25:1f:75:27:52:5f:0d:6a:
39:f8:f8:bc:cc:14:48:22:10:9e:04:78:f5:6c:17:
e6:f4:2f:68:8b:53:85:fb:0f:42:9c:3f:0a:fc:c0:
e6:ff:3b:88:9f:27:30:18:35:b8:6d:17:e2:1b:9a:
68:0e:fb:7f:7e:05:db:07:76:ea:d4:91:cc:66:94:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:EC:BA:C8:E5:D1:65:39:97:48:EB:E0:AF:E8:3C:9A:14:E2:B5
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2b:26:a5:59:3f:19:7c:2c:be:3c:f9:47:f1:c4:5a:6f:35:
fc:70:bd:78:18:de:4b:a6:91:e6:3a:7e:3d:6b:00:89:16:7d:
1c:8d:15:f7:68:59:17:1b:e1:9f:e1:06:c8:05:60:7b:8b:aa:
61:26:0a:3f:29:42:1f:e5:af:61:d9:17:ed:6c:a5:23:c2:e1:
e7:bf:40:04:b6:5e:bd:6b:fc:39:c9:e1:51:79:52:23:18:cb:
11:ad:69:0b:ea:35:60:79:d7:3d:ac:4c:68:4e:00:ce:ef:e1:
77:81:34:81:fe:37:30:74:48:16:b3:27:ae:6b:4f:72:36:33:
04:49:16:ad:7e:0a:32:d4:2a:f9:f7:83:ad:04:17:14:2e:2a:
3a:14:e9:e3:03:26:df:93:ed:86:63:32:79:52:fc:ef:87:c1:
06:40:cc:06:24:f5:00:28:28:81:cc:5e:91:58:3f:37:dc:2a:
b2:63:b2:e3:81:35:92:a8:a4:a7:4f:c6:22:52:4f:4e:c2:9c:
cb:3f:d7:01:ca:ee:bc:78:45:61:37:cd:ee:c9:03:2d:a3:61:
36:8d:1d:1f:8b:0b:cc:59:25:a8:36:2d:ff:dd:e4:f0:8f:29:
c4:8b:7a:40:c6:8a:7a:2a:2f:97:9e:07:21:50:ee:92:d4:ee:
f2:69:b2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:40 2025 by rpki-client