Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: 6/IQXbA61+BJ2EQhzQABVK6w2iH23xLgNbnfkyh77Dc=
Subject key identifier: D6:EC:33:17:7F:AA:7E:CC:E8:46:73:86:A0:9B:86:23:AF:8B:BD:6E
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 0197737678E97781CADB16D330358098FC5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 159C
Signing time: Sun 15 Jun 2025 12:00:33 +0000
Manifest this update: Sun 15 Jun 2025 12:00:33 +0000
Manifest next update: Mon 16 Jun 2025 12:00:33 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: dUjg1W4xo91m7fAvWnvJQvHYTM+qHLwUCB7gBmaZkyQ=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:78:e9:77:81:ca:db:16:d3:30:35:80:98:fc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Jun 15 12:00:33 2025 GMT
Not After : Jun 16 12:00:33 2025 GMT
Subject: CN=d6ec33177faa7ecce8467386a09b8623af8bbd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:56:65:f5:5b:6e:21:e0:ff:41:14:b4:b5:
53:82:f3:e9:e9:d2:db:48:31:1f:58:47:3d:db:08:
3a:b1:ea:62:45:47:23:b6:3a:c6:b4:c1:87:7a:4b:
9d:0c:78:b7:7d:59:fc:7e:fc:d1:a2:89:84:57:04:
f3:49:4e:82:36:50:0e:fd:9e:cd:67:ae:7e:d6:93:
97:34:1b:2a:5b:f6:1f:8d:94:22:42:06:b8:bf:86:
f4:ec:db:82:28:6b:68:d3:f6:8a:4b:27:53:a6:ca:
c3:35:41:a5:37:03:20:e8:74:e3:ad:c3:04:8d:6e:
78:91:12:7e:7f:d5:75:03:e2:3e:0d:e2:5d:85:be:
2b:40:b9:39:11:88:42:d9:77:ec:fb:6b:4c:db:a3:
ea:7a:27:d4:91:5c:94:b5:dd:e4:8e:e1:bf:85:b1:
da:48:dd:a6:24:ac:f0:08:d0:ae:5f:b1:4e:a7:c9:
b6:36:d7:e8:6a:b0:10:98:8b:05:08:9b:84:95:90:
9c:04:a8:49:13:5d:6b:b9:f9:d2:b0:f3:cf:0e:73:
d9:9d:ad:90:e5:5e:0a:df:98:74:8f:a6:f1:c8:df:
7a:81:a9:04:d9:44:cc:d7:b9:c3:b1:55:b9:96:c7:
3c:df:97:e4:df:f7:bb:ed:5e:64:63:69:69:fd:ed:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EC:33:17:7F:AA:7E:CC:E8:46:73:86:A0:9B:86:23:AF:8B:BD:6E
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f7:93:76:e2:06:26:03:f9:fc:70:a6:43:b9:a5:13:a5:f4:
65:56:1b:f8:4b:d7:d7:b9:01:a3:e3:80:37:42:f3:82:16:4e:
d0:e3:2f:c8:24:0e:e7:db:b7:50:b8:ec:46:f8:d3:49:84:fd:
8f:66:55:e4:be:e1:84:0c:99:ca:c4:65:ad:2b:7e:ff:48:65:
18:d9:d0:14:67:f2:6e:c1:5a:60:4b:d3:a3:b0:d7:71:49:08:
8e:cc:6f:c7:34:95:39:e4:08:b3:3b:7d:38:cd:24:d8:fb:30:
b0:9e:48:a1:2b:66:b6:ca:ff:b7:6f:05:74:1f:ad:bf:ea:4f:
f1:8e:50:c0:47:3d:0a:8a:e5:2a:35:a4:55:b5:37:b4:5d:cf:
1e:3c:b4:eb:65:5d:1f:9b:1c:64:21:81:c3:31:64:92:bf:fa:
db:0d:2d:eb:2f:84:51:67:fc:c0:8c:63:38:22:7e:a0:12:02:
21:4c:27:a5:50:8d:d5:25:ad:c2:27:b6:0f:30:cc:38:d2:49:
53:e7:4c:89:f0:f0:ae:44:65:b6:f0:69:58:b1:6f:0a:e3:95:
4f:ef:0e:03:39:c2:72:4a:20:97:e2:e7:30:5b:15:91:78:1f:
ad:43:e5:1e:6a:02:0e:a5:6a:fc:59:15:fc:a7:86:c1:d1:cc:
e0:9a:1e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:38:27 2025 by rpki-client