Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: 1ul+sq/gtoQOrm85cAUVMNZIG3Q4EL+ses2HRdMOnig=
Subject key identifier: 6C:EE:0E:5A:0C:E2:C2:B7:E7:E8:58:C2:C9:E2:65:04:9E:D4:5F:D9
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 01987B9CA3D5A138F1BCFE42DB70810EA12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 052D
Signing time: Tue 05 Aug 2025 19:01:59 +0000
Manifest this update: Tue 05 Aug 2025 19:01:59 +0000
Manifest next update: Wed 06 Aug 2025 19:01:59 +0000
Files and hashes: 1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: FUB+ys/IDs7NOfiXHsXJqr9tgXtfe1UNQ+Jxi3EtmMU=)
3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:a3:d5:a1:38:f1:bc:fe:42:db:70:81:0e:a1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Aug 5 19:01:59 2025 GMT
Not After : Aug 6 19:01:59 2025 GMT
Subject: CN=6cee0e5a0ce2c2b7e7e858c2c9e265049ed45fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a9:c2:90:5b:24:20:0a:e4:9f:f5:57:32:83:
ea:67:20:5a:cd:c6:f6:dd:77:3c:e5:9f:a9:ad:71:
d2:6a:40:28:ee:3b:c0:29:47:0f:60:be:01:59:95:
2f:5f:db:d4:e0:5b:95:99:9e:77:ac:9f:3c:69:0e:
de:2a:af:30:08:11:01:3e:ff:25:74:49:7b:ac:10:
22:45:81:12:74:68:99:fb:17:39:da:60:5c:c3:98:
03:19:c0:3b:14:cd:05:27:7b:18:35:95:27:89:2b:
b8:c1:dc:fe:f4:b9:28:4e:4a:84:6f:57:18:13:3f:
51:ec:ae:10:30:94:bf:75:24:47:0c:00:11:ba:d2:
0c:e2:cd:97:1c:50:e1:24:70:35:4b:5c:bf:dd:9b:
52:43:97:ac:86:51:f8:90:94:f7:a1:a3:f0:4f:a6:
57:90:64:13:ff:d3:a4:fa:de:03:97:f5:b6:8a:74:
d8:cd:5e:b1:fb:d2:f7:b1:53:88:96:a5:88:d6:76:
7f:48:d6:ea:e6:a2:15:87:d9:86:88:a8:47:c6:b3:
6f:4f:4e:7c:c2:cf:ed:82:f6:fa:bf:e8:d1:d2:28:
c4:95:80:9b:db:7c:c1:91:89:23:79:fb:00:4c:21:
fe:37:cc:1a:56:47:0e:39:43:5f:7c:df:b6:73:61:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EE:0E:5A:0C:E2:C2:B7:E7:E8:58:C2:C9:E2:65:04:9E:D4:5F:D9
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f8:2d:81:28:bd:ed:dc:60:d2:f0:f2:d5:64:fb:36:86:06:
25:d6:a8:de:94:20:a6:ce:7e:80:0a:33:b6:d8:96:27:1e:07:
ec:be:d0:4b:15:d8:96:53:23:a1:0c:1b:f3:e7:16:cb:87:4a:
63:d1:d9:65:21:1f:de:65:2f:a8:d2:d9:e7:4e:d4:ea:23:da:
b3:37:4d:f9:1c:4c:f6:d8:65:ef:6f:c4:7e:c5:ca:2c:4b:9d:
ee:d8:65:3a:cb:42:e1:9a:28:df:7f:3e:b7:90:0d:1b:dc:bf:
55:28:06:dd:69:e0:c4:00:90:6f:5d:3d:ae:0a:cf:e6:d3:7b:
8f:59:4b:94:25:bc:50:08:08:9d:f9:59:bb:78:b0:28:a3:8d:
97:af:e9:fb:a3:85:b9:cd:69:7c:03:59:7b:b0:8d:0b:fd:17:
68:96:ad:09:12:92:15:ec:56:23:bf:71:87:a0:ba:69:c0:41:
e7:ee:70:a7:db:47:d4:d2:c8:80:13:fb:24:e5:01:d1:5d:c1:
3d:5e:99:64:f6:60:c7:d2:f7:b8:38:ad:31:cc:a3:d3:45:15:
e0:90:f3:79:b1:71:52:aa:c1:52:dd:ca:97:1e:b2:24:49:a3:
53:39:92:32:a4:41:ec:81:d0:ee:70:fc:d4:dd:98:74:84:c8:
82:9f:c3:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh7nKPVoTjxvP5C23CBDqEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZjODA5Yjc2MDVmNmQ1Y2UxMjdiZDJkOGI3Njc0MzUw
YjhiMTEwHhcNMjUwODA1MTkwMTU5WhcNMjUwODA2MTkwMTU5WjAzMTEwLwYDVQQD
Eyg2Y2VlMGU1YTBjZTJjMmI3ZTdlODU4YzJjOWUyNjUwNDllZDQ1ZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6nCkFskIArkn/VXMoPqZyBazcb2
3Xc85Z+prXHSakAo7jvAKUcPYL4BWZUvX9vU4FuVmZ53rJ88aQ7eKq8wCBEBPv8l
dEl7rBAiRYESdGiZ+xc52mBcw5gDGcA7FM0FJ3sYNZUniSu4wdz+9LkoTkqEb1cY
Ez9R7K4QMJS/dSRHDAARutIM4s2XHFDhJHA1S1y/3ZtSQ5eshlH4kJT3oaPwT6ZX
kGQT/9Ok+t4Dl/W2inTYzV6x+9L3sVOIlqWI1nZ/SNbq5qIVh9mGiKhHxrNvT058
ws/tgvb6v+jR0ijElYCb23zBkYkjefsATCH+N8waVkcOOUNffN+2c2E7MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzuDloM4sK35+hYwsniZQSe1F/ZMB8GA1UdIwQY
MBaAFFgGyAm3YF9tXOEnvS2LdnQ1C4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNjhmNGEtMTJiNC00NzM3LThlMjct
YzMwNjY0YWVlYzE0LzEvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNjhmNGEtMTJiNC00NzM3LThlMjctYzMwNjY0YWVlYzE0
LzEvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvgtgSi9
7dxg0vDy1WT7NoYGJdao3pQgps5+gAozttiWJx4H7L7QSxXYllMjoQwb8+cWy4dK
Y9HZZSEf3mUvqNLZ507U6iPaszdN+RxM9thl72/EfsXKLEud7thlOstC4Zoo338+
t5ANG9y/VSgG3WngxACQb109rgrP5tN7j1lLlCW8UAgInflZu3iwKKONl6/p+6OF
uc1pfANZe7CNC/0XaJatCRKSFexWI79xh6C6acBB5+5wp9tH1NLIgBP7JOUB0V3B
PV6ZZPZgx9L3uDitMcyj00UV4JDzebFxUqrBUt3Klx6yJEmjUzmSMqRB7IHQ7nD8
1N2YdITIgp/D4Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:14 2025 by rpki-client