Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: GgIqACpf9sRbXqtR96PhuSI7SEHDSCmoggY7DWL+ksQ=
Subject key identifier: 0D:5D:67:24:91:1A:E5:C5:04:DE:16:0C:80:F1:11:05:29:33:54:E4
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 019853E8C58581337DFA8F2FE0B12F7AE941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 08CA
Signing time: Tue 29 Jul 2025 02:00:20 +0000
Manifest this update: Tue 29 Jul 2025 02:00:20 +0000
Manifest next update: Wed 30 Jul 2025 02:00:20 +0000
Files and hashes: 1: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: TjwDFiQC3sGisO9qFPSRM0eeC/ymm5mLIla1ib6brVc=)
2: vdHTEb2gTWFnAUlb8EFFzZFOAyk.roa (hash: 7sUvaXCmkwC5CKTFltnkxSzQliSsm8MxQWVCiowpXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:c5:85:81:33:7d:fa:8f:2f:e0:b1:2f:7a:e9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Jul 29 02:00:20 2025 GMT
Not After : Jul 30 02:00:20 2025 GMT
Subject: CN=0d5d6724911ae5c504de160c80f11105293354e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:e1:0e:b8:98:47:ae:1a:da:41:16:d0:08:
df:2c:82:7a:ed:ef:19:63:c4:8f:0f:95:9b:6d:f6:
90:d1:6d:95:87:16:08:3d:8d:af:48:64:cf:92:19:
7d:a7:06:f0:29:b9:73:b9:95:c7:f5:5f:27:48:cb:
95:0e:67:4b:fe:98:1c:4b:b5:7f:24:fa:83:9e:eb:
5e:68:ac:54:be:20:52:20:c0:79:aa:20:a8:86:02:
a3:1d:fd:ec:40:1e:ab:1f:a0:8c:16:d0:33:d9:31:
b0:70:14:12:ff:b7:67:8f:9d:a8:86:39:df:c4:ae:
e4:5a:f0:d1:f1:77:e8:bd:64:e9:c1:dc:75:bc:de:
fa:fe:47:b3:85:b5:34:6b:eb:52:9c:c9:44:6e:a2:
8e:88:f8:fd:60:44:50:ee:e2:d2:8e:01:56:ae:0a:
6e:c8:83:7f:4d:ea:cc:06:03:46:f4:c0:e2:6f:32:
ef:1d:99:f2:65:f6:b2:ed:84:d9:4c:e3:c3:3b:23:
db:6a:19:d0:94:ba:1e:8a:bf:aa:d1:c1:d4:13:0a:
fe:81:bc:30:fb:ff:dc:0b:9a:23:df:e5:f6:44:5b:
c7:80:31:47:45:fb:7c:ed:a7:dd:f1:45:f9:87:96:
14:c5:f1:3d:dc:12:41:2d:2e:f8:e1:f4:3a:fb:98:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5D:67:24:91:1A:E5:C5:04:DE:16:0C:80:F1:11:05:29:33:54:E4
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2b:52:a7:fe:fd:fc:8a:ca:cb:f5:d6:85:f1:5b:ae:4c:15:
1b:10:f3:71:07:9b:ee:3c:0d:e2:04:5e:d8:bc:ab:d0:d9:1f:
b1:39:ce:35:4d:97:dd:0f:f7:ac:d6:31:14:87:ac:5a:b2:99:
fc:9f:8c:7a:5f:5b:10:81:9d:6b:75:92:c3:07:4a:c3:c8:3d:
da:59:75:42:dd:46:43:a3:25:b9:cd:81:42:50:4d:fb:c1:29:
49:3b:6a:ef:0e:a1:29:e8:89:29:11:a5:2b:37:b1:59:60:6d:
85:1d:5c:ee:00:56:83:ac:92:c3:f1:4d:4a:b7:02:df:68:ff:
f1:2d:b2:bb:c3:6f:3c:09:62:06:9c:4c:5e:b5:ad:4d:55:72:
56:c9:67:94:46:16:b7:94:56:d2:00:d1:6e:68:ee:ff:d2:7c:
0f:f3:b3:78:ee:91:48:96:fc:4e:33:64:44:51:2c:65:45:bd:
52:ea:57:d0:19:42:89:a6:5c:b5:76:c7:bd:d3:fc:6d:54:aa:
b4:0f:7c:bc:13:61:5c:79:4b:09:69:9f:07:c7:ae:da:b7:fb:
6c:90:8c:30:c7:eb:8e:fc:f0:3b:42:24:3e:6e:d2:ea:d9:37:
30:66:01:a3:04:08:98:4c:1b:37:64:1c:56:0f:72:db:7c:69:
2c:27:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:45:44 2025 by rpki-client