Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: YRiLc6nr/XTd/TjZ2pnSN/DhpEW7CqZBl43M+Y1Sbd0=
Subject key identifier: EB:6B:7C:FE:7B:E0:85:B5:28:0B:A3:07:99:21:0A:8D:F4:F4:12:D1
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 0197CEA91E7FFF97BB3F1E345C90D8FDF3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 0885
Signing time: Thu 03 Jul 2025 05:01:19 +0000
Manifest this update: Thu 03 Jul 2025 05:01:19 +0000
Manifest next update: Fri 04 Jul 2025 05:01:19 +0000
Files and hashes: 1: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: kh2Gn6v99ya2D9BDeM0RTfWmG9HELs0BQpCC6RRjUls=)
2: vdHTEb2gTWFnAUlb8EFFzZFOAyk.roa (hash: 7sUvaXCmkwC5CKTFltnkxSzQliSsm8MxQWVCiowpXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:a9:1e:7f:ff:97:bb:3f:1e:34:5c:90:d8:fd:f3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Jul 3 05:01:19 2025 GMT
Not After : Jul 4 05:01:19 2025 GMT
Subject: CN=eb6b7cfe7be085b5280ba30799210a8df4f412d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d2:88:10:98:21:b6:48:fa:83:59:db:0a:ab:
74:3d:50:81:dc:a5:b9:0d:eb:b6:d1:57:bc:d9:93:
27:fd:79:15:1d:27:68:d3:f2:f9:25:1d:4e:46:71:
87:08:85:05:79:49:44:f6:17:8d:8e:12:d3:8d:ce:
89:27:c5:69:a2:d8:63:bb:41:8a:32:9b:16:7b:6c:
55:22:a4:c8:10:c2:02:43:6c:e5:eb:d3:a6:d7:53:
38:73:ac:a7:36:ae:6c:55:14:18:5e:4b:b1:49:aa:
b7:19:3d:3d:32:52:fd:6f:c8:c5:c4:72:f5:27:db:
ac:67:7b:c1:24:6c:6c:17:cb:17:af:d0:c9:e0:c1:
42:22:c3:82:1e:95:35:ab:46:8c:8a:17:79:f2:b4:
7f:9a:b2:d9:f2:56:7b:b4:0c:06:79:f8:ea:94:90:
1a:86:62:39:68:3b:7f:e8:c0:33:2b:3e:1e:c3:af:
67:5e:ea:b9:bf:81:60:7f:7e:98:a4:e2:73:60:7c:
d8:0c:d9:59:a7:b3:09:fa:a5:a7:11:d2:64:6d:62:
86:a6:cb:1a:c5:01:15:23:43:72:02:74:a1:4c:9b:
a0:88:b4:4c:20:46:27:e8:20:ba:c5:e6:55:94:7f:
da:ad:b2:82:a7:d4:93:c7:7d:e4:8b:0e:07:28:fb:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:7C:FE:7B:E0:85:B5:28:0B:A3:07:99:21:0A:8D:F4:F4:12:D1
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:87:fd:99:64:ca:39:be:c4:e9:3e:6f:28:f1:83:44:d6:2a:
64:06:54:65:58:f4:49:3d:22:ca:e4:e6:b8:95:29:e5:6f:d0:
c3:b6:92:17:4e:a8:3e:b4:cf:30:bf:4a:b7:08:5e:34:40:2c:
0b:83:ad:3c:15:1a:9f:2c:42:69:97:89:33:b2:4d:84:92:0a:
a9:c1:f1:4f:26:32:04:e7:94:b0:d0:c1:f8:2d:35:49:30:2e:
4b:f9:da:11:de:45:3f:3e:e1:23:79:01:6f:75:32:67:f3:a6:
85:6d:2e:b2:75:99:2a:0d:a1:91:4f:10:a7:9a:e5:96:37:03:
28:ce:14:2c:b0:78:8e:7f:9b:86:f7:d5:a9:b5:ff:3d:e1:09:
1d:ed:0b:d1:d2:de:d4:59:7d:3d:f5:8e:e3:6c:31:ea:ef:2e:
98:01:e0:7f:bd:91:4f:19:c2:a1:9b:fc:2c:21:ee:6a:be:7a:
65:f6:8b:ba:4c:3d:9f:eb:5d:a8:c9:f0:46:19:19:79:64:4e:
b8:a3:d7:3e:50:22:ff:4f:8b:f2:b4:da:21:9c:a7:a7:11:ac:
1b:70:0e:2f:b2:77:5e:60:27:6b:60:71:e8:74:b6:69:5f:73:
bb:86:4a:5c:23:23:78:aa:70:70:10:4c:a3:d9:43:94:c4:ca:
07:a4:31:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOqR5//5e7Px40XJDY/fOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTMxZThmOWE0ODUwNDBkOWZjYWU3MTY3YTQyOGI4YTEy
ZjQ5ZWEwHhcNMjUwNzAzMDUwMTE5WhcNMjUwNzA0MDUwMTE5WjAzMTEwLwYDVQQD
EyhlYjZiN2NmZTdiZTA4NWI1MjgwYmEzMDc5OTIxMGE4ZGY0ZjQxMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptKIEJghtkj6g1nbCqt0PVCB3KW5
Deu20Ve82ZMn/XkVHSdo0/L5JR1ORnGHCIUFeUlE9heNjhLTjc6JJ8Vpothju0GK
MpsWe2xVIqTIEMICQ2zl69Om11M4c6ynNq5sVRQYXkuxSaq3GT09MlL9b8jFxHL1
J9usZ3vBJGxsF8sXr9DJ4MFCIsOCHpU1q0aMihd58rR/mrLZ8lZ7tAwGefjqlJAa
hmI5aDt/6MAzKz4ew69nXuq5v4Fgf36YpOJzYHzYDNlZp7MJ+qWnEdJkbWKGpssa
xQEVI0NyAnShTJugiLRMIEYn6CC6xeZVlH/arbKCp9STx33kiw4HKPuukwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtrfP574IW1KAujB5khCo309BLRMB8GA1UdIwQY
MBaAFFgTHo+aSFBA2fyucWekKLihL0nqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kNzQ0MjAtNjQyNS00MjcyLTkzYTIt
MzU4NjE2NGE3ZjQ0LzEvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kNzQ0MjAtNjQyNS00MjcyLTkzYTItMzU4NjE2NGE3ZjQ0
LzEvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaof9mWTK
Ob7E6T5vKPGDRNYqZAZUZVj0ST0iyuTmuJUp5W/Qw7aSF06oPrTPML9KtwheNEAs
C4OtPBUanyxCaZeJM7JNhJIKqcHxTyYyBOeUsNDB+C01STAuS/naEd5FPz7hI3kB
b3UyZ/OmhW0usnWZKg2hkU8Qp5rlljcDKM4ULLB4jn+bhvfVqbX/PeEJHe0L0dLe
1Fl9PfWO42wx6u8umAHgf72RTxnCoZv8LCHuar56ZfaLukw9n+tdqMnwRhkZeWRO
uKPXPlAi/0+L8rTaIZynpxGsG3AOL7J3XmAna2Bx6HS2aV9zu4ZKXCMjeKpwcBBM
o9lDlMTKB6QxYg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:52:09 2025 by rpki-client