Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: TRD3J8k55nu8NEjAARzDf/q3nciMa2PXUrP6ANEee3A=
Subject key identifier: 3F:E2:31:A9:4A:71:31:06:17:03:16:5E:E8:6B:22:78:E9:7F:35:00
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 019872986B1EA5633F7FFEAEE9A9C8C827D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 0D71
Signing time: Mon 04 Aug 2025 01:00:48 +0000
Manifest this update: Mon 04 Aug 2025 01:00:48 +0000
Manifest next update: Tue 05 Aug 2025 01:00:48 +0000
Files and hashes: 1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: brj/hhHp7b5nEel9xWvlmZ4oH5+9juJubQYS68LjjMI=)
3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:6b:1e:a5:63:3f:7f:fe:ae:e9:a9:c8:c8:27:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Aug 4 01:00:48 2025 GMT
Not After : Aug 5 01:00:48 2025 GMT
Subject: CN=3fe231a94a7131061703165ee86b2278e97f3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:4b:74:2f:36:8f:c0:70:0c:9a:df:23:ce:
34:bd:de:dc:0a:ba:7c:16:c1:78:5d:e9:16:68:40:
a3:39:ce:15:75:3f:2f:5e:4e:5e:7f:38:a2:c7:17:
e8:17:d4:6e:66:cd:85:c8:d7:db:d9:06:25:10:84:
2d:d0:71:9f:29:de:f2:42:26:e7:5a:18:e1:14:e0:
1c:44:88:1c:a7:3b:85:8a:55:ce:da:13:df:ad:40:
8c:f7:b6:2c:fe:62:95:52:31:83:2d:58:59:94:90:
e7:c2:67:62:89:d8:3c:2f:d4:80:5e:b4:a7:9b:87:
c4:32:a2:c9:c0:d9:f6:a6:2a:e0:eb:b4:23:7e:88:
9a:7c:37:b7:e4:5f:24:95:20:12:0c:7d:9e:93:d9:
be:cf:62:eb:b7:71:14:22:0b:08:64:4d:63:b0:63:
24:7b:ec:35:1b:3f:20:04:db:27:9b:91:de:c9:c7:
fb:d5:3a:b3:9b:8a:ca:04:f6:6d:cb:ea:c5:fa:25:
71:4a:6e:b2:c1:f8:60:2d:70:f7:dd:82:42:96:69:
70:0f:bf:88:f6:6d:7f:99:93:f7:42:d4:c7:d0:68:
48:a3:07:01:6e:00:ed:8d:a8:bf:cb:dd:87:e5:8d:
f9:2f:b9:e2:47:a3:85:a4:ec:3d:ef:86:95:22:ce:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E2:31:A9:4A:71:31:06:17:03:16:5E:E8:6B:22:78:E9:7F:35:00
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:18:21:ca:fc:09:ac:0e:be:56:b2:2f:f2:f7:8d:4b:e3:a0:
68:08:d9:a5:0b:e2:40:e4:3e:3e:35:2f:0b:6b:25:c6:3f:9a:
64:a7:28:f0:46:50:c5:49:d8:fd:82:e3:7c:35:d3:a9:bc:0d:
b8:b2:9e:fa:05:a6:4a:65:8f:4c:02:a9:ef:72:dd:07:92:47:
23:63:f9:de:1a:30:e5:e6:12:a8:7d:ad:a0:5a:8b:5e:d3:8d:
f3:4c:4e:d9:d8:0f:f2:b8:48:fd:9d:9d:4e:f9:b4:66:94:78:
16:d1:7e:92:7d:e0:34:2d:3d:13:f7:56:51:a6:35:46:64:3d:
11:75:f1:ba:20:05:62:84:02:c0:b3:a2:6e:33:fb:6d:45:a2:
aa:22:31:df:20:7d:57:e3:04:51:33:ec:6b:78:ab:69:b8:e0:
8f:56:e5:41:93:87:c7:4e:ca:5c:41:ae:ff:c1:19:b1:08:53:
16:e4:db:01:0c:c2:43:71:81:e2:e5:5a:c4:b6:fa:7d:24:02:
33:cc:af:f4:6a:bf:55:65:c4:6b:1f:89:53:3e:91:2e:0c:15:
f5:c6:a0:66:9e:0d:25:42:0b:14:58:1a:4f:06:db:d0:01:47:
f3:35:57:7f:23:81:97:6a:f1:ae:e0:21:28:21:85:cc:2c:12:
4a:02:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:23 2025 by rpki-client