Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File: WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier: H5vfb/N6ScMPps1+r1QSTfU0yRKaFcKAItNxDjircLY=
Subject key identifier: 30:38:87:EE:92:E4:39:0E:E0:AF:E3:DB:31:4F:00:9D:AE:A7:54:A8
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial: 01992E9051B64105DAE29D8E8ECD9AE357D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number: 0590
Signing time: Tue 09 Sep 2025 13:00:33 +0000
Manifest this update: Tue 09 Sep 2025 13:00:33 +0000
Manifest next update: Wed 10 Sep 2025 13:00:33 +0000
Files and hashes: 1: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: 9SsV2970ryTat6JUhe1Ow3XKfdhS5WbkI1givDWGoSg=)
2: kaNw-FHXt38Mw3A3i3ZxTrdgH0U.roa (hash: ED9csh7TrZ7bmaYOf//aESLX76NQ2OO78tAxi9fibZE=)
3: zTtBYZjfsC0VO3m1kQopjfHbzCI.roa (hash: 1RfpmUJ+OhBzj8PIsZiJ3NArFEOu01QxVGauoTNckNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:90:51:b6:41:05:da:e2:9d:8e:8e:cd:9a:e3:57:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Validity
Not Before: Sep 9 13:00:33 2025 GMT
Not After : Sep 10 13:00:33 2025 GMT
Subject: CN=303887ee92e4390ee0afe3db314f009daea754a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:ea:08:a9:b0:4f:d9:36:1b:51:c0:5e:ab:
5b:78:9f:29:af:b2:65:38:55:0d:c9:e9:e6:69:d8:
14:13:d0:71:4a:26:de:31:8b:eb:09:7f:98:27:15:
3c:cd:ea:10:90:f7:74:49:66:6e:9e:60:4b:10:50:
7f:30:a6:be:69:63:30:59:2e:6d:05:72:17:6a:fa:
ba:5c:71:ce:78:cd:8a:3c:15:46:dc:5e:ce:95:69:
51:7c:57:50:f4:83:7e:87:6a:ca:03:07:a0:38:1f:
62:a4:34:84:c0:30:be:98:9f:ca:de:70:a0:c5:a3:
40:ab:c8:fc:a8:68:40:02:9d:81:b4:34:77:44:20:
69:0d:33:b8:24:5b:b2:ba:02:fc:05:fa:8f:43:82:
cd:3f:e0:e6:f9:fe:f5:8b:a4:ac:43:e3:60:1c:d8:
e4:81:82:e8:21:2f:d2:b3:1b:9d:3a:82:60:3c:03:
91:69:57:38:9f:d6:b1:9b:83:24:2e:45:df:11:27:
9e:80:b3:52:cb:f5:6c:28:f4:e0:80:11:e6:2b:fc:
9f:c7:43:f1:9e:37:4b:47:da:17:8f:f2:83:42:99:
23:a4:62:df:72:1c:ed:b3:98:54:a5:d2:61:04:42:
91:37:28:c5:3e:88:31:a6:35:5f:01:79:96:f8:4f:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:38:87:EE:92:E4:39:0E:E0:AF:E3:DB:31:4F:00:9D:AE:A7:54:A8
X509v3 Authority Key Identifier:
keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c8:3e:a3:19:0a:52:92:42:86:f6:74:10:d1:89:96:a1:a8:
41:d0:7a:d1:ba:9b:a0:ea:89:1e:0f:68:80:00:df:8d:c9:aa:
47:69:a4:1e:2b:cf:50:37:a9:17:46:9d:e6:4e:c1:7d:63:28:
c0:e3:81:0c:6c:74:09:34:4d:fd:d9:45:52:1f:ca:37:f8:10:
88:4a:38:54:bb:94:61:0e:d4:27:f0:81:f2:e8:0d:e5:03:e3:
ba:54:de:d4:bf:92:e6:ef:cd:8b:27:e9:51:29:1e:df:46:59:
e0:c6:34:26:a6:c7:30:6e:8e:4f:40:d9:3c:64:91:b2:58:b8:
d7:3e:f8:ee:17:47:a8:b2:a1:d3:85:ad:1e:c9:e5:62:49:5c:
d4:6e:ad:d4:d1:14:48:f3:93:1e:fb:05:b6:2c:c7:aa:34:fb:
3b:85:ff:b0:69:b6:93:9b:af:ec:04:0e:b3:05:60:7e:c5:5b:
6d:73:c0:e3:dc:1a:9a:3a:7b:f5:91:7f:62:74:cc:6b:36:40:
70:14:f4:b7:8f:14:8a:d2:42:08:14:e9:00:23:b5:d6:29:b0:
95:e3:75:e0:ba:f1:65:58:64:a6:dc:9e:c3:a8:b9:70:18:71:
2f:d2:1b:ac:1f:35:ed:14:d6:8d:02:df:25:5b:7c:29:28:c7:
85:81:90:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkukFG2QQXa4p2Ojs2a41fUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5
ODYyNDMwHhcNMjUwOTA5MTMwMDMzWhcNMjUwOTEwMTMwMDMzWjAzMTEwLwYDVQQD
EygzMDM4ODdlZTkyZTQzOTBlZTBhZmUzZGIzMTRmMDA5ZGFlYTc1NGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwizqCKmwT9k2G1HAXqtbeJ8pr7Jl
OFUNyenmadgUE9BxSibeMYvrCX+YJxU8zeoQkPd0SWZunmBLEFB/MKa+aWMwWS5t
BXIXavq6XHHOeM2KPBVG3F7OlWlRfFdQ9IN+h2rKAwegOB9ipDSEwDC+mJ/K3nCg
xaNAq8j8qGhAAp2BtDR3RCBpDTO4JFuyugL8BfqPQ4LNP+Dm+f71i6SsQ+NgHNjk
gYLoIS/SsxudOoJgPAORaVc4n9axm4MkLkXfESeegLNSy/VsKPTggBHmK/yfx0Px
njdLR9oXj/KDQpkjpGLfchzts5hUpdJhBEKRNyjFPogxpjVfAXmW+E/oKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDA4h+6S5DkO4K/j2zFPAJ2up1SoMB8GA1UdIwQY
MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt
MDZkZjFkYzAzMzY3LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3
LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8g+oxkK
UpJChvZ0ENGJlqGoQdB60bqboOqJHg9ogADfjcmqR2mkHivPUDepF0ad5k7BfWMo
wOOBDGx0CTRN/dlFUh/KN/gQiEo4VLuUYQ7UJ/CB8ugN5QPjulTe1L+S5u/Niyfp
USke30ZZ4MY0JqbHMG6OT0DZPGSRsli41z747hdHqLKh04WtHsnlYklc1G6t1NEU
SPOTHvsFtizHqjT7O4X/sGm2k5uv7AQOswVgfsVbbXPA49wamjp79ZF/YnTMazZA
cBT0t48UitJCCBTpACO11imwleN14LrxZVhkptyew6i5cBhxL9IbrB817RTWjQLf
JVt8KSjHhYGQeA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 18:43:21 2025 by rpki-client