Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: hLYyX+8T9KmfYW+M9oEoOd/RzcjFFoscixAS9wj4YDg=
Subject key identifier: 08:A5:A3:2E:4E:C9:A7:96:E5:CF:1E:29:2E:24:E0:2D:5E:7C:92:A3
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 01967C4526DE1156A8C7BA20BC61632BC5B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 151C
Signing time: Mon 28 Apr 2025 12:00:28 +0000
Manifest this update: Mon 28 Apr 2025 12:00:28 +0000
Manifest next update: Tue 29 Apr 2025 12:00:28 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: DfaDcvrbPX2hJxAVcVKeMccu8iYuSMIe1raJ6b2Hnrs=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:26:de:11:56:a8:c7:ba:20:bc:61:63:2b:c5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Apr 28 12:00:28 2025 GMT
Not After : Apr 29 12:00:28 2025 GMT
Subject: CN=08a5a32e4ec9a796e5cf1e292e24e02d5e7c92a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:26:e4:80:92:50:ef:63:80:5d:37:e4:5f:
d0:2b:91:d7:47:df:5d:15:a9:e8:52:9e:8a:4e:17:
fd:99:a5:33:95:c5:89:f3:d6:57:c4:51:63:14:53:
c7:d5:62:59:83:43:a4:0d:5e:8f:11:df:8a:18:c1:
cb:7b:65:a2:98:51:bd:20:7b:0c:60:3f:43:99:47:
dd:a6:3f:b0:66:a9:bb:ef:1f:98:d8:89:16:a8:7f:
38:26:e5:73:39:16:71:59:cb:6d:50:88:1d:dd:82:
c0:fa:a4:fe:65:ac:99:a1:e8:0d:c0:36:38:5c:1f:
0d:4a:32:38:0d:7f:37:98:67:fe:55:61:ac:5b:8c:
28:66:c9:1b:97:18:c1:ad:78:15:47:50:6a:91:52:
c0:f7:21:1e:8f:09:fa:b4:5e:00:1b:28:64:84:ad:
53:17:1e:4b:4c:a2:dd:f3:26:d2:7f:38:cb:c8:cf:
03:77:cb:f8:49:62:45:21:f1:69:9a:38:97:67:0f:
5d:6c:b3:7b:95:1f:af:94:e4:d3:7c:28:52:3d:47:
72:45:08:e6:ca:66:59:ca:45:9d:80:ab:5b:55:72:
22:70:0a:4c:ea:4d:52:09:9e:da:cc:9a:6b:6e:db:
51:0e:6f:d3:0f:30:01:5a:39:d3:45:25:fe:79:67:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:A3:2E:4E:C9:A7:96:E5:CF:1E:29:2E:24:E0:2D:5E:7C:92:A3
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c3:d1:8e:cd:f4:ee:a4:94:ed:c5:f9:43:77:bc:cd:63:0a:
07:19:64:70:23:ff:95:da:4b:f3:4d:47:54:1d:1c:83:8a:2e:
f4:c2:70:91:70:31:b5:91:79:f6:43:d5:ed:52:61:5b:2b:92:
51:cb:1e:1b:68:1c:af:e8:da:3c:9c:4f:2b:e7:97:cc:3f:12:
5f:35:c8:75:40:9f:46:f5:72:7f:9b:33:f0:36:19:2d:cf:2d:
7a:dc:d0:7c:31:7d:0a:74:b6:60:46:0d:5f:b2:a9:b8:6d:90:
74:15:9f:55:5f:62:54:da:06:e6:39:3b:4a:0a:99:0c:e3:17:
e9:77:35:a6:1c:16:03:42:41:de:a4:95:f3:42:66:d5:9f:e3:
e0:cb:65:0f:1e:24:ee:15:ce:06:ac:e0:ef:56:bd:a6:69:4a:
6a:a6:34:bf:4e:54:2e:43:91:aa:b7:26:77:cd:95:47:10:96:
0c:8f:c4:41:3f:3d:05:b8:6c:a5:d8:e9:4c:84:0f:d5:10:1d:
15:7f:3b:59:a1:fb:9f:f2:f1:75:22:27:1a:b2:ac:20:81:80:
54:5d:3f:e2:18:93:32:49:9c:f8:c5:95:cd:08:a4:b2:84:68:
6b:64:e4:da:f8:1b:b6:f9:8c:c9:22:fc:ba:f5:1e:fd:00:19:
f7:76:86:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ8RSbeEVaox7ogvGFjK8WwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MWVjYzFhNzRjZjkyYWI2MTljNWY3MTAxMjM5MzdjZTUw
ZDljNDMwHhcNMjUwNDI4MTIwMDI4WhcNMjUwNDI5MTIwMDI4WjAzMTEwLwYDVQQD
EygwOGE1YTMyZTRlYzlhNzk2ZTVjZjFlMjkyZTI0ZTAyZDVlN2M5MmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgsm5ICSUO9jgF035F/QK5HXR99d
FanoUp6KThf9maUzlcWJ89ZXxFFjFFPH1WJZg0OkDV6PEd+KGMHLe2WimFG9IHsM
YD9DmUfdpj+wZqm77x+Y2IkWqH84JuVzORZxWcttUIgd3YLA+qT+ZayZoegNwDY4
XB8NSjI4DX83mGf+VWGsW4woZskblxjBrXgVR1BqkVLA9yEejwn6tF4AGyhkhK1T
Fx5LTKLd8ybSfzjLyM8Dd8v4SWJFIfFpmjiXZw9dbLN7lR+vlOTTfChSPUdyRQjm
ymZZykWdgKtbVXIicApM6k1SCZ7azJprbttRDm/TDzABWjnTRSX+eWfv9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiloy5OyaeW5c8eKS4k4C1efJKjMB8GA1UdIwQY
MBaAFFgezBp0z5KrYZxfcQEjk3zlDZxDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYt
ZGE4OGI2YmRiMzE2LzEvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jNzFkYWYtZGQ2Ni00MWQ4LWIwNGYtZGE4OGI2YmRiMzE2
LzEvV0I3TUduVFBrcXRobkY5eEFTT1RmT1VObkVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsPRjs30
7qSU7cX5Q3e8zWMKBxlkcCP/ldpL801HVB0cg4ou9MJwkXAxtZF59kPV7VJhWyuS
UcseG2gcr+jaPJxPK+eXzD8SXzXIdUCfRvVyf5sz8DYZLc8tetzQfDF9CnS2YEYN
X7KpuG2QdBWfVV9iVNoG5jk7SgqZDOMX6Xc1phwWA0JB3qSV80Jm1Z/j4MtlDx4k
7hXOBqzg71a9pmlKaqY0v05ULkORqrcmd82VRxCWDI/EQT89BbhspdjpTIQP1RAd
FX87WaH7n/LxdSInGrKsIIGAVF0/4hiTMkmc+MWVzQiksoRoa2Tk2vgbtvmMySL8
uvUe/QAZ93aG/w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:45:32 2025 by rpki-client