Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: hQv9MtjId3TcJxgOKSWyPgHPG3AQ+d1p0k8RJtumSG4=
Subject key identifier: 0F:1D:7C:69:4C:7E:65:F0:17:3D:2D:1E:F2:D2:03:40:26:9E:1A:CF
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 0197B74536A8644AB23E462F319D73B1209B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 0D10
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: SzuPN8Etw5VUUeFNJkMaFZuVUDZ762Nv/Dec15I1bNg=)
3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:36:a8:64:4a:b2:3e:46:2f:31:9d:73:b1:20:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=0f1d7c694c7e65f0173d2d1ef2d20340269e1acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:cc:cc:bf:b0:e7:46:f8:af:59:5a:ae:d0:
ac:46:08:8a:e8:a5:3e:eb:1b:95:d3:99:0d:1e:6b:
c7:dd:41:3e:71:4d:91:20:23:3b:de:5d:8f:e0:f6:
d0:b1:d2:ac:66:63:e7:fa:f3:ee:36:fe:4f:c5:96:
60:ab:71:61:c1:50:23:55:82:27:17:d3:0d:8c:08:
17:45:d6:67:01:7c:37:53:22:f0:d2:47:72:44:c5:
2f:24:e0:60:a3:26:c8:b3:a0:47:5d:b9:31:75:39:
c7:ba:83:98:1e:d2:e6:be:c7:98:56:bc:c8:79:14:
59:12:eb:8c:83:2c:88:aa:79:be:2f:11:dc:eb:9c:
9c:b0:17:6b:ad:07:cb:4c:1f:45:a3:a4:6e:58:87:
82:6e:73:a2:fa:23:35:f7:25:50:35:4d:7c:5e:d2:
b4:c4:0a:88:cd:94:cc:fe:ed:44:25:eb:0e:f9:dd:
98:2c:9f:8a:e1:8a:c0:b3:92:0f:ed:7b:3e:8e:11:
5e:9c:26:b9:20:2d:8e:37:f0:c0:29:ca:64:89:6c:
dd:57:5f:ea:82:92:f1:18:63:76:02:66:ac:7e:43:
88:13:0e:88:4f:7f:9b:03:46:ef:8d:62:d5:6d:64:
b8:c4:eb:b1:60:a3:65:1b:26:e3:4a:5d:6b:7b:92:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1D:7C:69:4C:7E:65:F0:17:3D:2D:1E:F2:D2:03:40:26:9E:1A:CF
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c8:ea:43:3d:08:17:9b:9e:4c:0a:08:ec:7d:ed:e3:c5:a7:
11:e6:59:11:8e:06:47:21:d4:d6:94:ec:36:f6:58:57:0e:3d:
9d:8a:cf:1f:ce:45:c7:ca:57:86:a6:da:82:b3:7d:7e:89:f3:
f3:31:77:44:11:b7:c4:ff:b8:99:35:82:e7:f0:23:19:ef:de:
36:2b:48:7c:dc:4f:55:27:6f:5f:35:2e:d2:f0:bb:e2:2a:de:
e0:c5:37:cf:2c:e0:c5:fc:5a:94:58:46:f2:79:ae:0f:16:64:
bd:97:cf:b6:03:28:40:6b:ed:f9:dd:a1:f6:48:68:ee:df:29:
2e:f7:04:cb:ac:16:40:d1:9c:62:cf:8a:11:fe:88:a7:e9:85:
b1:7a:26:27:2d:7e:6a:b9:ce:b5:23:79:12:75:0e:28:5b:0c:
75:6a:22:3a:e8:1a:29:b0:6f:65:c0:e1:71:da:90:96:33:35:
90:0f:08:3d:fe:f1:01:b1:c5:6b:08:0c:6b:03:8b:50:08:45:
29:ce:83:38:b4:6c:20:23:a0:a1:cc:6d:fb:5f:ac:ea:d4:46:
b5:4e:98:c5:05:24:cc:bb:ee:c3:de:1e:6b:a2:3e:cc:2b:6f:
95:52:ca:d0:69:f9:8c:be:8f:01:96:da:68:cd:4c:86:a8:51:
47:d3:84:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RTaoZEqyPkYvMZ1zsSCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjNlMDk1NmE5ZDQ4MTdjZDkyODUyYzI3YTI3YjdkMmYx
MTEzZGIwHhcNMjUwNjI4MTYwMDU1WhcNMjUwNjI5MTYwMDU1WjAzMTEwLwYDVQQD
EygwZjFkN2M2OTRjN2U2NWYwMTczZDJkMWVmMmQyMDM0MDI2OWUxYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzPMzL+w50b4r1lartCsRgiK6KU+
6xuV05kNHmvH3UE+cU2RICM73l2P4PbQsdKsZmPn+vPuNv5PxZZgq3FhwVAjVYIn
F9MNjAgXRdZnAXw3UyLw0kdyRMUvJOBgoybIs6BHXbkxdTnHuoOYHtLmvseYVrzI
eRRZEuuMgyyIqnm+LxHc65ycsBdrrQfLTB9Fo6RuWIeCbnOi+iM19yVQNU18XtK0
xAqIzZTM/u1EJesO+d2YLJ+K4YrAs5IP7Xs+jhFenCa5IC2ON/DAKcpkiWzdV1/q
gpLxGGN2AmasfkOIEw6IT3+bA0bvjWLVbWS4xOuxYKNlGybjSl1re5IzyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8dfGlMfmXwFz0tHvLSA0AmnhrPMB8GA1UdIwQY
MBaAFFmz4JVqnUgXzZKFLCeie30vERPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYt
YzQ3MTcyZDVkODgyLzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYtYzQ3MTcyZDVkODgy
LzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsjqQz0I
F5ueTAoI7H3t48WnEeZZEY4GRyHU1pTsNvZYVw49nYrPH85Fx8pXhqbagrN9fonz
8zF3RBG3xP+4mTWC5/AjGe/eNitIfNxPVSdvXzUu0vC74ire4MU3zyzgxfxalFhG
8nmuDxZkvZfPtgMoQGvt+d2h9kho7t8pLvcEy6wWQNGcYs+KEf6Ip+mFsXomJy1+
arnOtSN5EnUOKFsMdWoiOugaKbBvZcDhcdqQljM1kA8IPf7xAbHFawgMawOLUAhF
Kc6DOLRsICOgocxt+1+s6tRGtU6YxQUkzLvuw94ea6I+zCtvlVLK0Gn5jL6PAZba
aM1MhqhRR9OE2g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:25:02 2025 by rpki-client