Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
File: wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json)
Hash identifier: A0dXJTjvgPZz2WpZYwwqMG+qelOcQ9n9t9DZkLaYbbo=
Subject key identifier: 17:C3:9A:71:B2:98:FA:5B:3F:42:64:01:6F:BE:9E:9E:2E:B7:2A:51
Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
Certificate issuer: /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Certificate serial: 0198537B3709FE7A18183813DF457DBE0D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 00:00:40 +0000
Manifest this update: Tue 29 Jul 2025 00:00:40 +0000
Manifest next update: Wed 30 Jul 2025 00:00:40 +0000
Files and hashes: 1: mOHhCAnpxR-dp3-6rcl-KfmxQF4.roa (hash: 3p2JZm+3j1SVt0MOxqOY+5HYmBdbi1aC8iIMBMpg4u0=)
2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: t4u8nI62HoFzDlUrwBLhuBzXGDAyfWd5ZWmTSFmMdfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:37:09:fe:7a:18:18:38:13:df:45:7d:be:0d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Validity
Not Before: Jul 29 00:00:40 2025 GMT
Not After : Jul 30 00:00:40 2025 GMT
Subject: CN=17c39a71b298fa5b3f4264016fbe9e9e2eb72a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:f7:ae:fb:46:25:4c:4d:2d:f1:b9:cf:5a:
ef:9a:81:23:37:43:7f:bf:d3:b6:38:6d:7c:a6:7d:
93:2f:e7:83:0f:bc:a6:bd:b1:21:a7:ec:e1:b0:76:
e0:ce:d7:dc:d3:09:75:85:af:51:3e:e6:4b:0f:0d:
3d:e5:eb:5c:b8:42:e4:b1:77:56:d3:b6:2b:bb:db:
c6:24:f2:cc:e2:88:07:e3:4a:5e:b6:17:a0:5b:cb:
c2:34:89:64:7b:c7:6a:ef:66:f2:a6:a4:0a:cb:52:
bc:8f:57:45:68:6e:ef:13:44:e8:4d:70:23:a5:b0:
82:ed:f8:87:ac:e6:ef:70:da:3e:dc:27:cd:67:d2:
32:96:ca:2b:52:e0:00:94:a0:14:dd:e5:f8:96:d4:
1b:bc:e6:c1:4d:9e:aa:06:c2:9c:e0:1a:21:90:c4:
6a:ff:50:db:4d:10:09:1c:d7:39:3b:bf:ce:51:8f:
21:7c:1c:05:d0:b7:d1:61:38:c0:8a:82:ec:e8:6d:
20:58:b9:54:19:e4:51:53:a5:69:da:63:8a:98:a1:
70:be:6f:1a:d7:7e:d3:a5:81:fb:de:7f:a7:39:fe:
a9:10:25:64:ff:9b:71:0d:51:ed:5e:e5:f1:cf:50:
87:ce:b5:74:4c:0c:9a:92:74:e7:55:a6:3b:b8:d3:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C3:9A:71:B2:98:FA:5B:3F:42:64:01:6F:BE:9E:9E:2E:B7:2A:51
X509v3 Authority Key Identifier:
keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2f:a3:25:ff:ba:66:a0:a7:a0:5a:80:e2:5b:f2:e6:ed:00:
25:91:54:85:95:1f:b1:8f:69:d5:6b:2c:2e:7c:50:23:09:89:
8e:fa:63:4d:c8:98:51:88:09:db:a4:54:2b:0c:96:dd:6e:0b:
75:b3:8a:de:56:d6:67:3b:05:9b:e3:78:4d:c4:34:41:2d:6f:
dd:2e:d3:05:de:3f:89:e6:19:d7:5b:a4:7d:ca:0f:63:05:aa:
c9:fe:4e:70:ab:78:e6:60:93:cd:b2:2e:d2:d6:49:ad:7a:a6:
f5:ae:dc:1a:f9:26:62:e1:7b:75:e6:12:9e:39:a0:30:7c:c7:
f1:be:e7:6f:5e:a0:86:da:6a:79:77:98:aa:df:76:87:61:e8:
c1:ba:d3:14:22:1a:7e:4a:c2:d4:75:51:e0:09:09:a6:c5:69:
2a:4f:4a:68:83:4e:e4:36:96:a9:ea:61:28:bb:ab:36:eb:91:
9d:92:65:6f:f8:b5:f3:b0:2c:f9:cd:d1:8b:5b:a9:fa:28:aa:
4a:3e:d4:83:5a:57:ae:a5:56:b3:15:65:29:be:fd:0c:c4:64:
31:53:aa:a0:1e:df:b2:48:ee:e7:a4:1f:0a:a1:ab:ad:a7:5a:
bc:ab:a4:11:d7:70:65:f7:14:6d:c5:a5:b3:39:e2:0f:f9:11:
28:57:54:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 08:46:54 2025 by rpki-client