Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
File: wbsILYb1B7_635GSqmdqt9onDUI.mft (raw, json)
Hash identifier: goIEOWQudLEA7B+pfIBlpoXnUf1qeqFTD9D07J9tAj4=
Subject key identifier: A0:31:A7:C4:CC:1F:64:C3:72:BC:1C:8D:D2:DE:87:B5:06:EA:3A:08
Authority key identifier: C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
Certificate issuer: /CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Certificate serial: 019770AC6E332DCA43AA23A10DDD2391A513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 23:00:37 +0000
Manifest this update: Sat 14 Jun 2025 23:00:37 +0000
Manifest next update: Sun 15 Jun 2025 23:00:37 +0000
Files and hashes: 1: oQclDl8_JxNhzqNyrIJDWCORZJA.roa (hash: JcEUx0LCrdDEqt2JdZzmeRRb5CPjlWwu7xHPm1S7f5w=)
2: wbsILYb1B7_635GSqmdqt9onDUI.crl (hash: Bzo0fBbuEnC7U8gK058DYFOOXlpmMGtzo0ZhI7Dht+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:6e:33:2d:ca:43:aa:23:a1:0d:dd:23:91:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bb082d86f507bffadf9192aa676ab7da270d42
Validity
Not Before: Jun 14 23:00:37 2025 GMT
Not After : Jun 15 23:00:37 2025 GMT
Subject: CN=a031a7c4cc1f64c372bc1c8dd2de87b506ea3a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:a9:6b:6b:2c:28:de:ed:d7:49:6d:51:98:
41:b5:82:39:1b:81:bc:e0:47:39:9a:d9:32:bb:1d:
e7:c2:31:ab:c0:c0:66:45:73:e8:fd:39:9e:5f:5b:
ef:7d:16:e0:74:69:0f:b0:90:1c:f7:46:84:88:87:
2b:01:ea:35:da:44:d1:d8:07:aa:ba:ad:60:d5:5a:
a1:6a:db:d3:ee:e3:bb:e1:e6:89:92:82:7f:8e:4e:
b7:84:9d:c3:d8:02:9b:45:65:df:52:61:6c:74:f8:
b2:03:6a:01:a5:3f:74:ac:07:c5:ed:1f:c4:57:9c:
43:1d:56:00:17:d4:c2:fd:29:0f:6f:d9:8f:e0:20:
bf:aa:f3:b8:5c:a4:87:9e:82:2b:a2:18:11:1c:ae:
7e:50:cb:68:c2:7c:bf:3d:1b:0e:51:83:a0:74:2f:
19:ce:9d:ee:06:cb:8b:ba:4e:4b:e9:35:1d:c0:b9:
77:07:b2:ac:0b:3f:48:f6:1c:10:8e:ac:98:06:a9:
73:32:09:d6:b5:57:d1:96:fa:fd:15:27:cd:ae:dd:
b8:f6:f8:cb:ae:f1:1d:d2:dd:46:cc:5f:27:d8:06:
d7:b6:02:38:57:dd:c1:b6:93:3a:ef:84:d1:3f:b4:
d5:7e:f1:58:b8:31:c2:07:aa:1c:bc:d0:68:1c:41:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:A7:C4:CC:1F:64:C3:72:BC:1C:8D:D2:DE:87:B5:06:EA:3A:08
X509v3 Authority Key Identifier:
keyid:C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6c:06:ed:4e:c3:18:6b:7d:e2:37:8b:b0:10:f1:5b:a9:f0:
93:e9:a9:f8:c6:7d:86:4e:39:a5:db:31:55:47:50:28:ff:bf:
d1:c7:c7:b3:e6:fc:36:8b:ed:f1:61:7e:8c:d2:bc:7c:20:f3:
83:5b:7a:ae:6d:f2:fb:8d:d4:a6:73:a7:81:fa:8d:2c:22:6b:
c2:9e:b1:6b:b2:68:01:29:f3:2b:8c:31:e0:76:fe:21:31:b2:
fc:ae:30:75:09:2d:51:84:f8:38:62:07:69:09:fa:80:5c:df:
95:10:ce:60:a6:8e:22:c3:81:af:71:bf:65:b0:bc:e2:6d:74:
04:05:62:30:82:33:2d:2f:a2:c1:a9:ce:8a:3e:85:a0:61:90:
cc:a9:44:02:cf:0e:96:b0:2e:0a:b9:5b:42:2d:aa:22:3d:10:
fc:5e:c4:dd:9b:d6:b1:b4:94:25:06:ef:8d:ea:16:69:f3:c1:
31:35:27:00:dd:7b:c0:c3:25:c6:8a:20:31:38:58:01:e5:6e:
8f:26:04:6e:eb:54:6c:a4:e4:59:9e:49:f5:35:4e:c0:f1:cf:
5d:d9:8a:75:6b:2f:f1:30:d9:df:a5:9f:0c:33:a4:04:59:3b:
e8:53:d2:d2:73:54:fd:23:0e:ca:25:2b:37:43:c4:2b:25:99:
d1:5a:d6:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwrG4zLcpDqiOhDd0jkaUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYmIwODJkODZmNTA3YmZmYWRmOTE5MmFhNjc2YWI3ZGEy
NzBkNDIwHhcNMjUwNjE0MjMwMDM3WhcNMjUwNjE1MjMwMDM3WjAzMTEwLwYDVQQD
EyhhMDMxYTdjNGNjMWY2NGMzNzJiYzFjOGRkMmRlODdiNTA2ZWEzYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoGpa2ssKN7t10ltUZhBtYI5G4G8
4Ec5mtkyux3nwjGrwMBmRXPo/TmeX1vvfRbgdGkPsJAc90aEiIcrAeo12kTR2Aeq
uq1g1VqhatvT7uO74eaJkoJ/jk63hJ3D2AKbRWXfUmFsdPiyA2oBpT90rAfF7R/E
V5xDHVYAF9TC/SkPb9mP4CC/qvO4XKSHnoIrohgRHK5+UMtowny/PRsOUYOgdC8Z
zp3uBsuLuk5L6TUdwLl3B7KsCz9I9hwQjqyYBqlzMgnWtVfRlvr9FSfNrt249vjL
rvEd0t1GzF8n2AbXtgI4V93BtpM674TRP7TVfvFYuDHCB6ocvNBoHEGG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAxp8TMH2TDcrwcjdLeh7UG6joIMB8GA1UdIwQY
MBaAFMG7CC2G9Qe/+t+RkqpnarfaJw1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzIt
ZTg3YzlmNGJhOTdkLzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzItZTg3YzlmNGJhOTdk
LzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWwG7U7D
GGt94jeLsBDxW6nwk+mp+MZ9hk45pdsxVUdQKP+/0cfHs+b8Novt8WF+jNK8fCDz
g1t6rm3y+43UpnOngfqNLCJrwp6xa7JoASnzK4wx4Hb+ITGy/K4wdQktUYT4OGIH
aQn6gFzflRDOYKaOIsOBr3G/ZbC84m10BAViMIIzLS+iwanOij6FoGGQzKlEAs8O
lrAuCrlbQi2qIj0Q/F7E3ZvWsbSUJQbvjeoWafPBMTUnAN17wMMlxoogMThYAeVu
jyYEbutUbKTkWZ5J9TVOwPHPXdmKdWsv8TDZ36WfDDOkBFk76FPS0nNU/SMOyiUr
N0PEKyWZ0VrWMQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:35 2025 by rpki-client