Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: RG5d1amcTAtgX1d3VA5e7VPkJF9N8Rl1oc5sIdYFnZA=
Subject key identifier: CB:72:A7:E9:CB:11:EF:0E:03:11:3C:C8:AB:D7:4F:99:43:E8:39:83
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 01974FA0DB59C61A6544011323B6040A84DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 0FB7
Signing time: Sun 08 Jun 2025 13:00:31 +0000
Manifest this update: Sun 08 Jun 2025 13:00:31 +0000
Manifest next update: Mon 09 Jun 2025 13:00:31 +0000
Files and hashes: 1: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: 7TTc20XnMVKi4cgpwNLh2m73FRTNyr555YWh2aneWw4=)
2: Y1iDW0v_VjcE4OMZE6xW26RRBS8.roa (hash: +eewpgaXa+H5fZW2StNgdbfGXtL6pcCIZkhxs3pPHow=)
3: _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (hash: tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:db:59:c6:1a:65:44:01:13:23:b6:04:0a:84:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Jun 8 13:00:31 2025 GMT
Not After : Jun 9 13:00:31 2025 GMT
Subject: CN=cb72a7e9cb11ef0e03113cc8abd74f9943e83983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:7e:29:9c:1d:ce:93:a2:33:03:08:e9:ba:
50:be:0a:d3:ed:0a:3b:b9:cb:c6:21:61:6e:d9:e4:
06:77:6b:ea:50:f5:a2:cd:e5:bf:1c:dd:09:47:c3:
24:a5:e2:94:02:49:db:89:cf:e3:24:27:02:81:d2:
49:12:b9:6b:bc:c9:36:27:6f:aa:93:f5:bf:94:3e:
a0:be:54:29:fe:1a:b3:33:12:e2:0e:57:f3:46:fd:
ef:31:b0:7c:50:e7:62:75:83:32:78:d8:44:6a:be:
8a:7f:ef:f0:2f:3b:16:aa:66:64:e0:ef:43:f1:aa:
aa:4c:2c:e7:43:41:95:a5:fc:11:b3:d4:32:a8:88:
58:e7:5c:f8:7c:9a:ac:12:15:49:ed:27:1b:11:97:
d5:c0:27:0d:7a:d0:3a:c8:50:76:e4:98:8a:3b:d6:
13:c2:fe:0d:95:84:0a:6e:cc:00:f9:53:b3:92:58:
dc:0f:32:8a:b8:26:9b:fb:2d:a9:bd:fe:ca:8b:4c:
31:f3:14:3e:ed:a7:f0:49:fb:99:12:ea:c7:28:bb:
a3:a1:dc:79:64:33:80:e0:85:18:3e:5d:f5:13:e7:
ce:c0:f4:35:f6:19:12:26:6c:59:c4:20:29:fc:20:
9a:5d:9d:49:9a:b4:f6:a7:86:04:da:27:85:6f:a8:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:72:A7:E9:CB:11:EF:0E:03:11:3C:C8:AB:D7:4F:99:43:E8:39:83
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6b:96:ca:93:2f:ec:ab:42:5f:67:e7:17:b2:a8:b0:e5:c3:
4a:f3:c2:98:7a:aa:4b:22:39:35:2e:f1:55:04:b0:8d:02:37:
02:ca:c1:35:55:33:d6:c0:00:ba:f0:d4:63:0e:1e:8f:ae:e9:
dc:b3:40:3f:e2:bd:2f:a9:56:12:59:e3:f2:7a:23:42:64:3d:
0e:d2:0f:f6:85:cb:47:e9:1f:e2:54:7f:6a:7f:40:aa:24:50:
99:62:a1:30:d3:7e:4d:30:28:b2:c3:79:30:f9:c7:fb:bd:30:
1e:2e:1b:e9:a4:76:0d:a5:23:a5:bf:f1:e8:e5:85:3b:e5:53:
3d:f8:be:b1:91:88:23:7d:1b:87:b8:0c:bc:b4:a9:0a:7c:fc:
a5:9f:68:d5:0a:74:ad:ac:e0:db:70:f0:0b:1b:71:9c:d0:1f:
5d:a8:47:8c:4f:f5:4a:28:4f:8f:54:21:9c:dd:7b:f6:54:5e:
03:dc:34:31:2e:a1:62:7f:79:4c:5a:8a:95:51:cc:62:03:2a:
30:a5:84:c4:85:2f:e0:4d:f5:c1:c2:33:0d:ff:34:cd:b0:c1:
94:e2:75:a5:d6:eb:dd:4e:c4:18:49:0c:d4:71:9c:7e:7e:94:
38:94:2c:80:05:6d:5d:8e:24:6e:c7:16:95:bb:87:e9:21:7e:
e4:a5:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:37:57 2025 by rpki-client