Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json)
Hash identifier: o5bOFfAELa/QLXTEwHh2qiKy0XK02Pmu7O8GBiv8YRE=
Subject key identifier: FE:B2:EC:CD:AB:65:C5:D7:1D:3A:97:BD:06:87:A0:DB:59:B2:72:BD
Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Certificate serial: 019757912148D2D3053ED2FCD79351D1CFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
Manifest number: 0BE4
Signing time: Tue 10 Jun 2025 02:00:18 +0000
Manifest this update: Tue 10 Jun 2025 02:00:18 +0000
Manifest next update: Wed 11 Jun 2025 02:00:18 +0000
Files and hashes: 1: nV-HLk-vNtMZyXYUE8luuJv4468.roa (hash: 02+QZOjgpDh+SF+gzgnBzWxE50MSq+IOFGGOIUAQpsk=)
2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: 7uNWXgvUBrMQpLV5ReUQWmOhtcY9xQH2wZ4kS3RPy5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:21:48:d2:d3:05:3e:d2:fc:d7:93:51:d1:cf:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43
Validity
Not Before: Jun 10 02:00:18 2025 GMT
Not After : Jun 11 02:00:18 2025 GMT
Subject: CN=feb2eccdab65c5d71d3a97bd0687a0db59b272bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:e1:21:43:2a:61:0c:48:55:3c:05:0f:af:
73:be:1d:87:86:85:5c:4d:0a:c2:c6:53:6d:95:5e:
20:a9:79:88:42:3b:d0:91:0f:c9:90:7c:7d:60:08:
52:bc:fe:6f:75:76:a3:74:6b:e6:94:2d:7f:76:64:
8b:98:c0:6d:9b:04:82:9c:30:4d:3c:70:a9:92:c0:
4c:5d:6c:7f:bf:ae:00:c8:a1:17:5d:31:bc:b8:8d:
79:09:73:53:56:72:0a:3d:1c:d4:c1:72:a0:b1:e8:
54:fb:06:ca:28:4b:5e:e6:c5:79:17:80:62:b1:af:
9a:a9:cc:65:84:79:6e:ed:b0:27:4a:e9:99:d4:c0:
42:1c:82:4d:6f:6a:29:1f:99:e1:a2:80:1c:34:4e:
93:9f:4b:9c:38:db:46:84:80:03:e0:c7:1c:75:0f:
7b:85:2f:c3:8f:ad:55:a1:30:36:1c:ac:2c:55:0e:
c2:07:c6:66:9d:88:35:a4:c7:8b:f3:a3:6b:6b:e7:
2f:b5:cd:91:f7:be:ac:ad:dd:29:de:0d:bf:e1:cf:
8c:2a:32:16:e2:8d:27:12:81:30:b1:b2:8f:b6:6b:
a3:7f:74:56:d2:5a:22:db:8c:31:e0:ae:12:2c:2a:
64:88:b2:6f:7d:39:43:99:e6:b0:0b:b3:0c:20:59:
09:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B2:EC:CD:AB:65:C5:D7:1D:3A:97:BD:06:87:A0:DB:59:B2:72:BD
X509v3 Authority Key Identifier:
keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7e:58:c1:49:77:a4:9b:5a:ca:ce:a9:fb:fa:a2:7a:0f:54:
43:4e:a9:93:6c:10:32:17:f2:68:54:08:fc:a5:2f:b4:9d:2b:
5b:c9:4d:76:14:35:d7:35:69:13:99:b1:60:10:98:a4:6b:af:
57:95:d5:0d:de:14:1c:b9:af:e3:07:d9:fe:62:f4:5f:f0:ed:
33:59:12:c1:28:9f:3f:81:e2:78:dd:8a:46:ee:69:29:f3:83:
a5:a3:b5:94:7e:44:5b:26:5b:ac:8c:75:a2:59:af:f4:10:64:
b4:ca:01:c7:a2:0e:9f:48:48:d9:0f:03:b3:25:45:e9:e6:96:
44:d6:ee:eb:4c:66:5a:02:26:36:63:bf:c5:64:63:c6:cf:b5:
6d:1e:52:76:62:46:0e:fd:dd:84:99:c2:33:4c:ba:f5:0e:f7:
f3:b4:c6:6c:7e:cc:3b:09:74:9a:4e:85:d0:ef:f0:b2:4c:e1:
2e:80:3b:a7:5a:fa:70:c9:3f:8c:e2:73:74:67:f7:d8:c8:5c:
a4:6e:a3:d6:1e:b0:28:1b:2b:0b:5a:74:85:b7:bc:c0:d7:bf:
4e:9f:e9:c9:36:a4:4f:35:b3:25:8b:c0:9d:b0:6b:e9:d5:9b:
46:03:3f:65:e8:95:79:98:45:a0:b2:1c:5d:6e:59:c8:6d:26:
b7:a3:a0:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdXkSFI0tMFPtL815NR0c/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTA3NDg3N2Y3OGRiZjQ5YmQzN2EyMTU0OTFlNjlhMGY4
YjZlNDMwHhcNMjUwNjEwMDIwMDE4WhcNMjUwNjExMDIwMDE4WjAzMTEwLwYDVQQD
EyhmZWIyZWNjZGFiNjVjNWQ3MWQzYTk3YmQwNjg3YTBkYjU5YjI3MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdnhIUMqYQxIVTwFD69zvh2HhoVc
TQrCxlNtlV4gqXmIQjvQkQ/JkHx9YAhSvP5vdXajdGvmlC1/dmSLmMBtmwSCnDBN
PHCpksBMXWx/v64AyKEXXTG8uI15CXNTVnIKPRzUwXKgsehU+wbKKEte5sV5F4Bi
sa+aqcxlhHlu7bAnSumZ1MBCHIJNb2opH5nhooAcNE6Tn0ucONtGhIAD4MccdQ97
hS/Dj61VoTA2HKwsVQ7CB8ZmnYg1pMeL86Nra+cvtc2R976srd0p3g2/4c+MKjIW
4o0nEoEwsbKPtmujf3RW0loi24wx4K4SLCpkiLJvfTlDmeawC7MMIFkJDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6y7M2rZcXXHTqXvQaHoNtZsnK9MB8GA1UdIwQY
MBaAFMBQdId/eNv0m9N6IVSR5poPi25DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWIt
NzhjMDRiY2VkYWQzLzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWItNzhjMDRiY2VkYWQz
LzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL35YwUl3
pJtays6p+/qieg9UQ06pk2wQMhfyaFQI/KUvtJ0rW8lNdhQ11zVpE5mxYBCYpGuv
V5XVDd4UHLmv4wfZ/mL0X/DtM1kSwSifP4HieN2KRu5pKfODpaO1lH5EWyZbrIx1
olmv9BBktMoBx6IOn0hI2Q8DsyVF6eaWRNbu60xmWgImNmO/xWRjxs+1bR5SdmJG
Dv3dhJnCM0y69Q7387TGbH7MOwl0mk6F0O/wskzhLoA7p1r6cMk/jOJzdGf32Mhc
pG6j1h6wKBsrC1p0hbe8wNe/Tp/pyTakTzWzJYvAnbBr6dWbRgM/ZeiVeZhFoLIc
XW5ZyG0mt6OgEw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 10:51:07 2025 by rpki-client