Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json)
Hash identifier: kl8MZaRJxTnJRJb0QfFr3cNWnnK8e+kv+q29ajwxWTU=
Subject key identifier: BF:B3:43:0B:54:03:FA:ED:27:9E:D0:BC:07:F5:5C:17:29:F4:6F:09
Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403
Certificate serial: 019874871FD3D74428BE6A9ED7144289A033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
Manifest number: 07F6
Signing time: Mon 04 Aug 2025 10:01:09 +0000
Manifest this update: Mon 04 Aug 2025 10:01:09 +0000
Manifest next update: Tue 05 Aug 2025 10:01:09 +0000
Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: yplgKvTsvV3xSuSe2oZ3+CxM4VmNl+zbJF+FZ6mdBFA=)
2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=)
3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:1f:d3:d7:44:28:be:6a:9e:d7:14:42:89:a0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403
Validity
Not Before: Aug 4 10:01:09 2025 GMT
Not After : Aug 5 10:01:09 2025 GMT
Subject: CN=bfb3430b5403faed279ed0bc07f55c1729f46f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:d2:cf:8c:6c:f5:5c:b0:81:84:36:53:83:
25:fe:f9:0a:40:2b:d7:74:9e:1e:80:76:be:39:57:
4e:df:e6:21:e6:92:cf:17:96:f9:6b:28:85:32:04:
8b:0e:60:d5:6e:53:70:13:e6:70:ec:06:3d:f5:2a:
43:72:4b:f8:99:de:b1:fe:6c:a5:4e:c7:2a:9c:a3:
38:a5:1c:ac:7a:9e:b4:d1:27:8f:44:f9:fe:7d:af:
9e:75:1b:08:87:c7:ff:b9:9b:9b:30:f1:b2:80:d9:
22:37:81:db:70:b3:b7:7d:0a:a1:88:76:23:a2:ff:
6c:d9:99:5d:4c:8b:d2:74:3c:32:0f:08:b9:82:6b:
4c:2c:0c:87:bc:2a:ec:c7:3e:b4:a0:c5:a7:40:da:
ff:9a:18:c2:be:7a:dc:a5:af:c7:55:bb:b5:55:a4:
ea:88:cc:dc:1f:0a:02:b0:30:c5:79:94:56:d3:9f:
30:aa:89:5d:39:2f:0a:bf:e6:84:53:18:a8:ba:2a:
96:80:28:29:50:24:74:df:08:23:78:8a:99:c6:da:
b0:df:86:b6:7b:ae:3e:3b:8d:be:d2:22:64:fe:7f:
90:0a:35:c1:b8:dc:0a:7b:28:0f:39:c0:3e:7f:4d:
10:5f:5b:47:d4:b3:4c:be:08:51:bc:b2:29:45:89:
3b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:43:0B:54:03:FA:ED:27:9E:D0:BC:07:F5:5C:17:29:F4:6F:09
X509v3 Authority Key Identifier:
keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0d:fa:af:3a:a1:f0:6c:3b:4e:a2:57:31:58:72:dd:0c:0b:
f6:5c:32:a2:38:9a:84:9b:f2:ad:c1:69:3c:ac:ee:db:71:a0:
cd:27:9b:38:ab:c7:31:cb:7c:73:6f:6d:63:56:55:b1:58:a8:
d4:30:84:ed:22:e0:33:b5:22:fb:c9:ea:e2:bb:6e:3a:2c:86:
6a:f7:33:a7:c7:81:4b:ef:d3:7d:f4:c9:26:4a:70:69:36:dd:
98:b6:89:a2:5d:6f:d1:a6:ff:99:ef:ec:da:7b:39:46:71:9d:
60:69:5e:2e:15:d0:1e:1d:d5:13:36:b1:e3:62:39:2c:e1:52:
31:25:6f:48:cb:6c:f2:d6:91:a5:34:db:2c:8b:bf:cd:4a:cc:
a8:34:62:4f:ad:33:89:d9:55:c7:5c:22:ab:8a:a7:c9:f0:7d:
50:e1:90:98:3f:75:33:be:f4:6f:a6:22:8c:89:f3:4d:27:91:
30:d8:8e:16:ef:be:86:d5:8c:f3:71:30:9a:e1:05:7e:14:d7:
85:38:09:e2:1f:6f:e4:29:68:55:35:81:8c:e8:5c:c6:a5:95:
02:60:c7:90:11:df:16:2a:07:c5:cc:b6:47:05:54:a2:5d:fd:
df:a2:21:b4:5b:2c:76:56:4b:9d:47:a3:47:4e:05:92:df:63:
5d:5c:87:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:00:30 2025 by rpki-client