Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: 8WexGaht5USdUpGCb6slBnq+QOYcoo/2yo9cZq0T01I=
Subject key identifier: C1:72:68:A1:64:4C:59:C5:47:07:D5:BD:43:C0:DF:BB:74:0B:EB:7A
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 01983427C5A884F1CB92A890612199DA4748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 0508
Signing time: Tue 22 Jul 2025 22:01:18 +0000
Manifest this update: Tue 22 Jul 2025 22:01:18 +0000
Manifest next update: Wed 23 Jul 2025 22:01:18 +0000
Files and hashes: 1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: t+8lw/nB2bRwqzzAiVxWqFnpypwgL19zmrlKdZEanJA=)
3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:27:c5:a8:84:f1:cb:92:a8:90:61:21:99:da:47:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Jul 22 22:01:18 2025 GMT
Not After : Jul 23 22:01:18 2025 GMT
Subject: CN=c17268a1644c59c54707d5bd43c0dfbb740beb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:bc:20:c4:87:f5:2c:38:c6:51:ad:9c:4e:
51:b6:34:ba:71:91:ea:4f:7e:1a:09:70:5f:0d:3c:
2c:ce:70:f6:44:03:77:53:fe:19:c3:13:bb:c0:d0:
0f:36:8e:e2:48:13:5f:7b:a9:0a:f8:45:13:9c:13:
f9:d3:40:bb:4a:f0:48:ff:ab:e1:bd:4d:7f:e7:c0:
f7:c6:76:b8:f4:32:eb:41:0d:24:45:0f:73:63:b6:
74:92:f6:14:3f:77:9e:ac:7e:68:7d:65:cc:5a:ae:
2b:cb:11:9b:b7:d8:63:e8:c1:58:90:3b:8d:9a:75:
84:fb:7e:1b:12:95:95:cb:ac:66:58:1b:17:e7:32:
36:b3:0f:72:e1:9d:6e:bf:b9:f8:19:f8:64:a1:00:
9e:5a:15:47:aa:b8:ff:4d:5a:81:bd:38:c0:b2:e9:
96:3b:ed:2f:21:71:be:64:1c:aa:78:16:0a:c8:e4:
52:6e:13:7e:83:30:69:80:4f:9b:72:1f:c2:23:76:
0b:7b:d9:4b:10:0e:7d:c6:d0:be:c9:37:08:74:45:
b8:60:bc:84:93:54:66:7f:16:c6:87:78:a6:f5:b4:
78:12:da:17:3a:65:de:2d:0d:9b:81:5e:84:e1:1f:
e6:a4:2c:cf:e5:10:40:4d:ff:b1:36:0f:63:8f:e6:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:72:68:A1:64:4C:59:C5:47:07:D5:BD:43:C0:DF:BB:74:0B:EB:7A
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:31:cd:73:ae:63:b6:71:79:08:86:f5:ba:be:b6:77:01:4a:
d4:4c:77:10:c9:d6:01:f6:9b:9c:81:6e:04:1e:3f:af:b8:e3:
65:3b:d4:21:54:73:4e:77:10:54:73:bb:e8:a3:b1:46:50:70:
59:68:d9:09:c7:fb:df:9d:9a:bd:e8:78:bf:b7:f8:cc:92:16:
82:b4:de:49:1a:41:f8:d6:0f:c6:cb:58:7d:54:df:50:e3:e0:
86:db:7d:63:20:8f:a9:c2:93:4d:93:37:1e:97:58:ec:d1:09:
55:d1:48:84:19:c9:7f:63:cf:21:ef:e1:1d:77:23:f2:1c:a3:
df:33:01:5f:2e:1a:59:ce:2e:95:99:95:01:11:56:a9:7f:e5:
6b:b3:78:89:4a:0e:f7:0a:67:98:2c:f3:b6:5d:d0:70:8e:02:
5c:6f:91:76:1d:82:4f:1d:48:bb:9e:fc:65:f5:bb:2a:3f:f1:
cc:d4:7d:81:63:1a:a8:15:fa:5b:2a:92:12:6d:10:e9:16:a4:
72:e6:e1:9e:dc:f0:e8:f7:4c:c9:44:4e:b0:2f:83:50:15:99:
86:dc:db:ae:e2:80:8c:fc:d9:4e:41:7e:78:e9:ce:7f:00:2d:
92:d3:99:d8:d2:66:bb:36:36:1c:06:51:18:4b:52:38:89:75:
2d:af:7f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:22:53 2025 by rpki-client