
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: EN1/fXDKoVvKq2MtxozZ3fRL2bqeKSjm8uq2YKGCzjU=
Subject key identifier: EB:7B:CB:AA:4D:8C:D7:B1:95:E6:BE:CC:8A:EF:A1:00:E6:A8:66:E2
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 0198733DB59B70AA1A914B51364159C2EE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 0219
Signing time: Mon 04 Aug 2025 04:01:20 +0000
Manifest this update: Mon 04 Aug 2025 04:01:20 +0000
Manifest next update: Tue 05 Aug 2025 04:01:20 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: JQknLfRY+jJDBuwIgR/nrWxj+GzOqQCsTTZvgzpjxXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:b5:9b:70:aa:1a:91:4b:51:36:41:59:c2:ee:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Aug 4 04:01:20 2025 GMT
Not After : Aug 5 04:01:20 2025 GMT
Subject: CN=eb7bcbaa4d8cd7b195e6becc8aefa100e6a866e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:4e:61:10:6d:6f:ef:dd:6a:05:d4:65:3f:
a7:11:27:cd:ab:47:68:67:b9:6f:3c:2d:6d:3f:55:
d7:47:73:3d:1d:dd:54:96:6b:11:cc:3d:51:72:40:
87:46:3b:07:fa:9e:23:d0:4d:80:ab:4b:45:4c:16:
fb:e6:aa:43:fa:0d:69:f2:fe:20:f8:37:0a:e6:87:
00:ad:f0:d2:b2:11:49:7a:cd:55:8e:b9:0e:b4:99:
e5:e4:3b:66:e1:81:c3:5f:14:59:75:d1:53:92:3c:
69:7d:87:eb:09:a7:6d:d3:0c:35:c7:33:77:42:91:
2d:dc:e8:6e:0e:dd:f4:5f:77:1f:a3:fe:22:b6:e1:
79:c9:3a:9d:4e:b5:b7:46:ac:c3:df:9f:b3:a9:29:
d6:ce:b5:b3:69:55:da:89:92:8b:d7:a6:0f:be:15:
0c:27:39:b3:14:a6:b5:d8:79:a5:f3:27:21:a3:2c:
de:45:37:27:90:ea:f1:69:6e:a5:d1:0d:f1:fb:ec:
76:33:e7:d8:95:5e:8f:46:10:9b:42:85:ab:77:69:
b7:ef:95:c5:2d:c8:b8:2b:02:90:5d:0c:18:80:7c:
dc:91:36:bf:46:bb:d7:e9:47:e5:01:c9:37:e8:44:
a9:e4:c9:28:b8:4d:3c:33:c4:d7:e5:cd:4a:60:3c:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7B:CB:AA:4D:8C:D7:B1:95:E6:BE:CC:8A:EF:A1:00:E6:A8:66:E2
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6e:3d:e2:87:56:78:bc:e0:34:2e:c0:4f:63:3b:0a:d1:61:
84:b9:ff:94:e2:c4:0c:77:6c:92:21:c4:dd:40:ef:6b:2a:bc:
a6:5e:37:2b:1b:45:36:2e:21:09:ac:b2:5e:1f:68:b5:5b:47:
fa:7a:21:ff:23:6a:52:18:8d:21:5d:23:b8:12:77:c0:4b:14:
c7:d0:eb:fc:1f:4a:3d:1e:7e:ea:c7:72:e2:30:e4:63:49:69:
17:73:44:b2:5c:0f:7d:06:dd:e5:c3:18:e8:c2:05:3a:30:d4:
eb:04:7c:b0:f7:82:46:0a:59:dc:b5:67:a7:4c:a2:48:58:4c:
cf:f1:5b:69:98:80:2c:b0:5f:6b:bf:74:5d:d1:4c:ae:87:4a:
bf:e3:a7:2c:15:52:fc:68:07:e2:06:13:a6:57:1b:e9:90:16:
ca:54:45:eb:eb:38:80:20:4d:53:52:36:9f:aa:f4:60:86:22:
e5:86:b1:ba:15:49:a2:dc:51:d4:5b:18:29:a6:c0:00:73:6a:
25:ba:be:20:40:4c:fe:7d:32:62:3b:50:73:14:46:09:47:eb:
35:53:4f:c5:bb:69:bd:2b:cb:c4:a8:f2:c9:c1:47:d2:e6:b6:
98:10:81:5b:e0:80:bd:4e:19:28:cd:e1:77:f6:3d:2e:53:21:
b6:bd:f0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:17 2025 by rpki-client