Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: QwM0vEVZnxGns3ZtltjKcMO1C1KmvyGzNl0ms2dzQVw=
Subject key identifier: 6B:F0:C7:BE:B6:B7:A5:57:E7:6C:DD:59:5D:B6:96:2F:5E:99:E3:88
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 019849D2F45C19A6A7D8C7D470B2C3DA2C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 160B
Signing time: Sun 27 Jul 2025 03:00:18 +0000
Manifest this update: Sun 27 Jul 2025 03:00:18 +0000
Manifest next update: Mon 28 Jul 2025 03:00:18 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: jsNA2k6wdcvdM74EPNAIjF9deWhaougFSRWUAjo7jXk=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:f4:5c:19:a6:a7:d8:c7:d4:70:b2:c3:da:2c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Jul 27 03:00:18 2025 GMT
Not After : Jul 28 03:00:18 2025 GMT
Subject: CN=6bf0c7beb6b7a557e76cdd595db6962f5e99e388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:0e:29:51:e0:e0:31:53:db:11:c5:7b:30:
10:d8:32:fe:ae:5f:ba:f5:09:e5:f8:ed:24:b7:0c:
14:30:78:39:4d:53:80:0a:f9:26:22:9e:93:6b:7d:
b8:66:6b:d5:8e:e9:43:78:a5:d9:86:86:a8:22:1a:
82:81:21:d7:ec:93:f3:1a:a6:10:c8:47:cc:1c:27:
74:3d:f0:8e:cd:af:a8:f0:f6:cf:6a:db:88:dd:b0:
ac:a0:7f:bf:e4:11:f7:33:c9:c5:31:32:50:03:f8:
b8:51:9b:96:76:d4:45:47:eb:d0:92:b0:00:6d:22:
9c:96:45:23:d2:b6:f0:ad:59:44:36:01:39:0d:6e:
63:c8:54:68:87:27:43:2a:51:c5:95:94:42:24:18:
a3:52:87:a3:19:19:8b:4c:83:7c:70:20:7f:62:7c:
80:50:ac:ba:aa:42:1b:52:60:c1:64:23:35:7d:00:
9a:fd:24:e7:50:52:aa:b9:81:98:9f:b5:86:cc:5a:
9c:e6:d7:f3:0a:1c:0c:3d:ff:da:61:0d:98:96:35:
87:37:28:b3:87:58:c7:ad:3c:12:86:fe:93:e8:84:
4c:33:73:f5:6c:cf:dd:f7:c0:5f:1a:da:28:c8:61:
c4:b5:69:d6:d5:37:11:11:8a:da:6a:e9:eb:2b:f5:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F0:C7:BE:B6:B7:A5:57:E7:6C:DD:59:5D:B6:96:2F:5E:99:E3:88
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:13:11:28:bd:ca:ea:29:33:e4:c4:ee:2e:e7:92:0f:ab:0a:
5c:7f:e3:ad:80:d3:15:d9:5f:04:ba:67:c9:b9:93:38:e2:04:
59:c2:e4:b1:25:09:54:5b:c3:45:4c:3d:79:67:00:d3:0c:02:
d7:ee:b3:c8:6d:d8:a7:92:92:d6:17:f1:62:8b:21:fb:0f:54:
a3:f2:8a:26:20:61:6b:bc:c1:98:4c:53:40:11:c1:61:c0:c9:
3c:a4:e8:ce:06:c8:12:2c:88:1d:e3:c3:09:2f:ac:72:02:19:
87:05:c1:22:66:63:83:31:35:9a:97:50:04:26:20:ae:a9:08:
aa:78:a3:02:df:fe:44:e0:54:c8:92:b1:ed:bc:09:56:69:e5:
bb:1c:d6:1a:3c:60:bb:3c:fe:bd:be:d1:2f:6c:bd:67:a3:de:
a9:04:9a:c5:64:86:1b:b7:8c:cf:4d:e3:c6:6b:91:22:56:19:
e9:a8:b9:e7:95:26:79:9e:a8:22:f0:28:30:db:1b:8a:5a:76:
84:46:58:12:f5:bf:97:2d:4c:f1:06:96:0e:e9:dc:37:1d:b0:
56:bf:7e:d9:54:50:6e:4b:c0:a7:0f:d1:cd:c7:3b:f0:56:d4:
5a:35:7a:02:cf:0b:32:7b:82:70:6b:5b:17:76:c5:e7:68:30:
de:1b:ef:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:56 2025 by rpki-client