Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: gICrop2xWUMlM4EbbzrvJNrCmJWBssSv22dV/5Aogzo=
Subject key identifier: 0A:93:6F:F6:32:7B:A7:F6:51:6E:F6:D9:A9:9B:14:23:24:4E:20:DA
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 01976FD11C3D3BCE948F788413D259CA3C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 0CEB
Signing time: Sat 14 Jun 2025 19:01:04 +0000
Manifest this update: Sat 14 Jun 2025 19:01:04 +0000
Manifest next update: Sun 15 Jun 2025 19:01:04 +0000
Files and hashes: 1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: Qq9Yi6rfF+tTZSz7EI3aO71/Ftvtv/od0+Uy3EFs2PU=)
3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:1c:3d:3b:ce:94:8f:78:84:13:d2:59:ca:3c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Jun 14 19:01:04 2025 GMT
Not After : Jun 15 19:01:04 2025 GMT
Subject: CN=0a936ff6327ba7f6516ef6d9a99b1423244e20da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:6b:e4:48:dc:fa:15:69:54:2d:fe:eb:38:
da:46:5b:db:22:c8:4c:80:5d:62:8d:ba:5f:cd:1c:
ee:ce:f7:85:b1:84:5f:e4:0e:8d:03:80:92:61:03:
dc:c8:5a:9f:26:58:c2:14:60:f7:dd:01:38:5a:c1:
88:7d:64:19:6d:7d:6e:2d:10:ef:46:e1:33:ff:a5:
34:60:5d:5e:ff:ca:b2:ba:78:de:5b:a3:e2:9a:5e:
39:ca:b7:5a:73:08:45:04:5e:f0:16:07:71:b9:ca:
cc:66:5a:59:e5:17:f8:92:25:39:a0:99:0f:c5:76:
90:f7:08:3f:1f:2c:6d:90:4b:33:09:b2:7f:cb:7e:
c5:37:02:37:11:7f:6e:8d:00:d1:0c:ca:d6:91:60:
af:79:b3:ba:76:54:20:95:4c:59:77:94:5b:50:93:
a7:e5:9d:d2:a5:05:55:2e:2d:52:c6:62:fb:74:3a:
dc:f4:1f:cb:18:53:61:62:28:6d:57:c4:15:cf:06:
78:79:46:0a:cc:a9:1e:df:e9:55:ef:45:de:03:4d:
2d:a4:21:04:d1:b5:e3:56:86:56:0d:b4:6e:9b:e6:
60:d5:c6:60:1e:69:f3:b2:88:c9:c4:90:a2:e7:41:
91:e7:c3:2d:e9:46:79:6b:77:fa:b0:27:15:87:d2:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:93:6F:F6:32:7B:A7:F6:51:6E:F6:D9:A9:9B:14:23:24:4E:20:DA
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2e:ec:ee:9a:c5:51:a2:66:e7:b3:76:40:75:6c:be:3f:c6:
a0:de:04:d7:85:9d:95:ba:a0:90:f6:04:49:54:bf:1f:76:83:
31:da:0f:7d:3f:54:28:6c:d7:bb:5f:6f:53:b5:2f:72:70:f0:
55:25:8b:29:51:74:10:fb:3d:59:9f:95:ac:01:d4:85:10:88:
64:65:d2:24:6a:a2:3e:ba:5b:83:db:51:3a:e1:cf:36:a0:42:
f2:c9:76:28:8b:f0:8c:1a:d9:42:2f:47:e1:80:50:93:b3:4b:
da:45:d9:10:c7:2d:d2:54:77:32:e8:3a:85:36:3a:74:9e:ac:
f6:d4:89:a2:28:cf:b9:d1:14:79:af:12:36:83:d4:1f:e3:71:
d8:bc:91:58:53:e2:6e:00:ef:d1:19:77:54:5b:41:55:42:b0:
b2:23:a3:d7:99:91:07:e2:cd:6e:63:84:93:36:6f:c4:20:91:
2c:1a:33:54:20:eb:80:24:27:20:8d:07:4f:8e:57:ca:30:92:
2e:2a:a8:0b:54:35:29:aa:42:38:d3:92:f3:4b:ce:3d:c5:a0:
a5:0d:37:06:88:0b:5c:36:6d:5c:9f:8f:0e:50:64:4b:16:20:
59:7f:ca:53:db:d3:52:e3:37:13:bd:ed:63:51:59:0f:5f:2d:
09:3f:99:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0Rw9O86Uj3iEE9JZyjybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjNlMDk1NmE5ZDQ4MTdjZDkyODUyYzI3YTI3YjdkMmYx
MTEzZGIwHhcNMjUwNjE0MTkwMTA0WhcNMjUwNjE1MTkwMTA0WjAzMTEwLwYDVQQD
EygwYTkzNmZmNjMyN2JhN2Y2NTE2ZWY2ZDlhOTliMTQyMzI0NGUyMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbtr5Ejc+hVpVC3+6zjaRlvbIshM
gF1ijbpfzRzuzveFsYRf5A6NA4CSYQPcyFqfJljCFGD33QE4WsGIfWQZbX1uLRDv
RuEz/6U0YF1e/8qyunjeW6Piml45yrdacwhFBF7wFgdxucrMZlpZ5Rf4kiU5oJkP
xXaQ9wg/HyxtkEszCbJ/y37FNwI3EX9ujQDRDMrWkWCvebO6dlQglUxZd5RbUJOn
5Z3SpQVVLi1SxmL7dDrc9B/LGFNhYihtV8QVzwZ4eUYKzKke3+lV70XeA00tpCEE
0bXjVoZWDbRum+Zg1cZgHmnzsojJxJCi50GR58Mt6UZ5a3f6sCcVh9IWXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqTb/Yye6f2UW722ambFCMkTiDaMB8GA1UdIwQY
MBaAFFmz4JVqnUgXzZKFLCeie30vERPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYt
YzQ3MTcyZDVkODgyLzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYtYzQ3MTcyZDVkODgy
LzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaS7s7prF
UaJm57N2QHVsvj/GoN4E14WdlbqgkPYESVS/H3aDMdoPfT9UKGzXu19vU7UvcnDw
VSWLKVF0EPs9WZ+VrAHUhRCIZGXSJGqiPrpbg9tROuHPNqBC8sl2KIvwjBrZQi9H
4YBQk7NL2kXZEMct0lR3Mug6hTY6dJ6s9tSJoijPudEUea8SNoPUH+Nx2LyRWFPi
bgDv0Rl3VFtBVUKwsiOj15mRB+LNbmOEkzZvxCCRLBozVCDrgCQnII0HT45XyjCS
LiqoC1Q1KapCONOS80vOPcWgpQ03BogLXDZtXJ+PDlBkSxYgWX/KU9vTUuM3E73t
Y1FZD18tCT+ZQw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:58:21 2025 by rpki-client