Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File: WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier: 9STZQCoCstHK6vWFFNADawCwGAgmABhrjZ8wvgq5K68=
Subject key identifier: 26:49:B4:EC:D0:43:29:65:EA:42:7A:4B:95:F7:E4:76:9C:93:04:14
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial: 01976C9901818DEE1850CB01293E5CEAB51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number: 04A7
Signing time: Sat 14 Jun 2025 04:00:56 +0000
Manifest this update: Sat 14 Jun 2025 04:00:56 +0000
Manifest next update: Sun 15 Jun 2025 04:00:56 +0000
Files and hashes: 1: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: VUvg2/1bBIqzyz48pvJ4aSEaEoCd7zBBhOHaVXR0FAQ=)
2: kaNw-FHXt38Mw3A3i3ZxTrdgH0U.roa (hash: ED9csh7TrZ7bmaYOf//aESLX76NQ2OO78tAxi9fibZE=)
3: zTtBYZjfsC0VO3m1kQopjfHbzCI.roa (hash: 1RfpmUJ+OhBzj8PIsZiJ3NArFEOu01QxVGauoTNckNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:01:81:8d:ee:18:50:cb:01:29:3e:5c:ea:b5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Validity
Not Before: Jun 14 04:00:56 2025 GMT
Not After : Jun 15 04:00:56 2025 GMT
Subject: CN=2649b4ecd0432965ea427a4b95f7e4769c930414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:1d:cd:56:36:b7:1e:f7:3a:a2:4d:a6:46:
ce:96:48:b9:38:6f:58:c9:19:29:16:ad:ad:a0:bd:
46:05:3e:ec:08:24:40:c0:9a:66:a5:7c:14:7e:35:
be:6c:9f:db:f7:e7:74:5f:ab:44:79:04:af:a6:82:
3e:e0:ff:48:6e:eb:a9:3e:68:98:3f:3f:19:8a:b5:
ae:0d:6c:d1:da:d7:16:98:16:65:84:77:5b:a3:ec:
a5:17:fe:54:d7:89:92:58:20:59:a1:95:24:c5:ec:
36:71:31:4a:39:db:e8:bf:7d:a3:2a:51:b1:65:5b:
17:fe:dd:10:24:51:56:59:ec:31:eb:f8:a3:ab:0d:
28:2a:a1:e1:10:a9:b0:55:73:27:5e:43:2b:b4:b4:
f3:de:7d:09:22:6f:3c:d8:ee:d5:c8:f3:6d:29:40:
62:21:59:7c:24:78:ca:ad:e0:dc:c4:df:13:4d:7a:
38:7e:98:50:ed:18:0a:9f:7d:12:e2:4d:f8:8a:76:
7f:49:29:12:3d:7e:4b:a1:f6:78:39:1f:6a:ef:cc:
e9:b8:a9:02:d6:6e:8c:1d:8d:1e:04:e4:2e:19:dc:
27:ed:d1:2a:0c:1e:92:09:44:ef:6d:e4:08:77:b5:
37:2e:ef:7d:41:e4:86:db:97:ce:6a:8e:c2:96:16:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:49:B4:EC:D0:43:29:65:EA:42:7A:4B:95:F7:E4:76:9C:93:04:14
X509v3 Authority Key Identifier:
keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4f:91:3e:89:cf:a7:a5:a3:58:fd:a7:e0:a8:0d:ce:cb:8b:
7d:7c:0b:d7:ff:a8:4f:9c:f9:65:55:4c:55:ef:9a:57:19:d1:
60:d6:c3:19:ae:fd:ce:5a:6e:15:de:78:b1:28:da:d9:47:16:
9f:c1:0b:91:09:ae:9a:04:52:a9:2a:72:f6:65:d6:cc:49:d5:
8f:c9:47:58:fd:f6:80:d2:98:b5:55:1f:5b:0c:a8:aa:f0:21:
f7:bc:6f:a4:a9:c2:f0:cc:5f:85:9f:85:05:56:c0:30:cd:24:
d0:89:06:d8:54:1f:74:be:80:32:e9:ef:c4:ee:a4:4e:0e:bf:
64:e8:28:b0:48:b9:b6:76:ce:6e:9f:e2:86:78:16:d4:d9:d9:
46:0a:30:b3:92:74:78:7a:14:d9:e1:b5:f6:a3:2a:b4:62:42:
09:59:dd:d1:30:d2:19:c5:9a:eb:0a:6f:8e:f1:b9:18:c9:2a:
54:8e:34:69:24:32:a7:7b:0c:85:32:98:6c:bd:ac:a8:2a:fe:
29:e7:06:21:02:a0:ea:20:d5:e2:dd:9f:4e:eb:19:4f:0b:da:
04:93:2f:a8:58:fb:13:91:ab:4a:8a:d0:da:13:d8:9c:f9:11:
15:1a:a3:2c:1b:50:8e:4c:a9:e3:9a:d2:ab:3b:fd:d0:81:7d:
15:4b:43:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:33 2025 by rpki-client