Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: Vq4xNsjbsenXhtDqyZJNLjowRME6SnWeQf04A1pOY3s=
Subject key identifier: 2F:7E:98:A1:A1:C5:12:E9:6E:A3:95:16:41:70:66:FA:B5:77:E8:8B
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 0198D73B7C767AAEADD9202ACD5F33002DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 090E
Signing time: Sat 23 Aug 2025 14:00:56 +0000
Manifest this update: Sat 23 Aug 2025 14:00:56 +0000
Manifest next update: Sun 24 Aug 2025 14:00:56 +0000
Files and hashes: 1: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: fSKbCVQW6+zevlQ+hL26jL+cDMiENyzB2Hz1kMSf4js=)
2: vdHTEb2gTWFnAUlb8EFFzZFOAyk.roa (hash: 7sUvaXCmkwC5CKTFltnkxSzQliSsm8MxQWVCiowpXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:7c:76:7a:ae:ad:d9:20:2a:cd:5f:33:00:2d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Aug 23 14:00:56 2025 GMT
Not After : Aug 24 14:00:56 2025 GMT
Subject: CN=2f7e98a1a1c512e96ea39516417066fab577e88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:1d:00:98:aa:bf:db:3c:b4:9c:ed:51:d1:
b6:95:b9:ec:90:1a:26:e1:ba:57:eb:27:61:4f:49:
84:80:e8:b6:f5:8f:9f:0e:97:f6:19:d4:a9:af:85:
49:58:ef:0e:a5:c1:28:49:37:1e:03:e2:a3:22:94:
ec:38:2d:81:87:d3:5d:0d:4d:be:1e:35:3d:c4:e8:
e2:fb:28:b9:15:cd:07:dd:9a:aa:56:a2:5b:e0:94:
6d:74:4e:15:80:38:eb:a9:c3:1c:29:f2:2f:4d:98:
2f:b0:cd:35:f4:45:ff:1d:e7:55:ac:8c:72:ba:02:
21:c8:4e:94:e5:db:58:64:cf:01:82:53:1a:2b:95:
4f:87:4a:48:1d:8d:05:27:65:c1:6c:a5:0d:3e:25:
e9:0f:3e:62:c1:34:ff:1b:be:3f:6c:08:5b:f4:39:
f7:ee:09:42:b7:60:62:5f:77:87:94:99:1f:bb:a2:
1f:00:8b:a5:0c:c7:d9:0b:1e:a8:01:9b:a9:b1:c7:
a2:1a:f6:7d:54:68:c3:36:4d:99:85:c9:ed:d5:14:
6d:af:9d:7f:6c:09:b8:41:a1:bf:48:63:de:bc:86:
d6:33:1f:72:98:14:f9:dd:a2:07:ee:23:bf:11:18:
63:e4:0b:dc:7d:43:06:aa:5b:f1:68:74:f7:5c:ea:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7E:98:A1:A1:C5:12:E9:6E:A3:95:16:41:70:66:FA:B5:77:E8:8B
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:05:a2:a0:a9:6f:7c:47:dc:fd:10:6a:12:7b:7f:cd:57:d8:
e7:8b:0c:e5:5a:c7:8f:b0:4a:a7:f4:27:c3:b1:5d:55:48:f2:
fe:80:36:7f:38:65:e1:ed:ea:5c:90:c9:68:10:2e:e1:5d:94:
aa:48:29:42:9b:87:43:41:63:22:15:fd:04:dd:f9:3c:41:5d:
bb:40:24:3f:b8:53:ae:6e:f1:bd:ac:db:1d:50:58:f2:4a:c2:
ac:6b:16:e2:59:2e:ef:1f:02:14:9a:fe:c0:d0:0f:13:f0:02:
59:d9:dc:93:a1:c2:0f:da:0e:1a:6e:4b:e1:2e:38:40:ff:8f:
58:6e:59:da:ac:86:70:88:79:46:ca:b6:3c:b5:50:60:36:ce:
61:6d:4a:be:6f:6c:71:ce:d0:0a:00:03:d4:62:d7:94:cb:1a:
28:09:31:ef:3f:4b:84:87:9c:2c:9f:30:d1:3c:17:18:d8:e3:
18:b9:92:54:2b:e6:da:be:21:79:8b:fb:f9:78:54:40:ae:b7:
c2:22:0f:78:0e:46:55:1e:7d:10:2d:d7:0b:c0:46:f7:7d:9f:
ba:6f:05:4d:4f:db:c9:88:a4:bb:d0:93:14:a2:47:42:65:4c:
e9:c3:63:82:fa:d0:e1:a9:cd:e5:16:04:4a:20:6d:1c:ae:3e:
1f:69:e4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:42 2025 by rpki-client