Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: S9KeE4c5j4O5O+3J7nNpFY8bLYYelwhpx+dj2rkk5Vk=
Subject key identifier: EB:F7:D7:AD:7D:A6:46:0D:9E:16:C0:D4:D6:0B:51:A7:E9:7A:DB:66
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 0198D5160457253305C722C76DF17CBBD417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 0DA4
Signing time: Sat 23 Aug 2025 04:00:46 +0000
Manifest this update: Sat 23 Aug 2025 04:00:46 +0000
Manifest next update: Sun 24 Aug 2025 04:00:46 +0000
Files and hashes: 1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: izz8dGWAC3okT0FKL/sQHRDHBa0QUz3zVmFUJ5gSyvc=)
3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:04:57:25:33:05:c7:22:c7:6d:f1:7c:bb:d4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Aug 23 04:00:46 2025 GMT
Not After : Aug 24 04:00:46 2025 GMT
Subject: CN=ebf7d7ad7da6460d9e16c0d4d60b51a7e97adb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:97:09:56:11:1c:8a:df:f9:55:9f:aa:45:
b8:22:03:3d:68:a4:4b:ce:11:58:89:28:a2:ab:37:
48:90:de:c1:1d:13:df:66:6b:e2:55:1e:01:cd:26:
4c:a1:a6:ff:63:2d:93:2a:f9:26:b5:03:cb:06:1f:
c8:f6:99:31:3e:ad:82:c4:e6:f7:36:58:84:4f:0e:
68:19:c9:55:b4:c3:d0:73:57:ce:77:1e:29:6e:7a:
a3:84:d5:5d:cb:a0:6f:d9:ed:3f:9e:fe:55:e0:bc:
21:1b:8b:39:e9:94:59:a3:2e:49:ed:49:77:51:0d:
0d:f0:a9:00:d4:19:7f:5a:e5:ec:84:b7:6e:42:b1:
27:6c:32:7b:61:18:66:67:0c:ce:9e:a2:d1:6d:c4:
77:81:45:f2:d9:54:c0:a6:ec:2d:2c:59:07:56:1d:
86:08:41:98:09:ed:ad:ae:93:5e:91:f7:57:51:8e:
be:0e:53:b1:ff:df:8f:ad:86:26:e4:d8:62:c9:58:
02:05:0c:ff:4e:e3:0f:0d:f0:57:90:bd:83:9b:2e:
c9:17:5c:7d:6b:ad:b1:29:d5:00:d8:a1:6d:3e:92:
0f:74:c1:1f:a7:ae:1d:34:83:28:32:38:5e:ec:36:
aa:85:72:c5:d9:28:2f:5f:cb:b8:c2:dc:ae:cb:ef:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F7:D7:AD:7D:A6:46:0D:9E:16:C0:D4:D6:0B:51:A7:E9:7A:DB:66
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7a:f0:7d:97:29:22:4f:4a:05:90:4a:1a:bc:be:c3:82:fd:
39:c4:96:12:42:5a:e2:4a:e2:0a:f1:b6:fc:6c:da:e2:15:45:
a3:2a:1f:6a:a6:21:45:36:1f:0d:82:d1:4b:12:e3:da:e5:3f:
12:c9:a6:e1:25:4c:43:c8:a0:32:e1:31:c4:36:25:72:cf:73:
b4:21:f6:88:2c:b6:07:aa:15:5d:ae:d3:8c:26:65:1a:ee:0d:
ce:6a:8a:79:15:4f:ff:6a:38:14:17:4f:09:58:db:29:10:9f:
28:52:32:b7:d7:33:ed:68:0b:cd:02:43:7e:a9:9e:13:fb:8a:
52:69:ba:8f:a0:2a:dd:2d:cf:09:8e:ca:56:9f:6c:0a:b1:ef:
9c:71:da:8e:24:c0:33:c3:9a:cf:99:fa:47:1b:10:5e:28:01:
28:d8:47:18:b3:fc:89:76:fe:36:56:f1:6f:95:54:ba:51:10:
08:f7:36:ea:41:fb:65:68:47:96:86:ac:06:fb:6b:bc:16:03:
67:9f:ef:d8:dd:7c:ed:92:bc:00:bb:e2:fc:10:ce:da:1e:72:
e2:29:72:78:87:67:27:0f:9e:bb:41:ee:50:fc:ad:1e:b1:1d:
fd:8e:3d:e5:32:91:fc:e3:eb:37:14:57:03:7f:89:5d:b6:ce:
78:7e:f4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:32 2025 by rpki-client