
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File: WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier: edoqkKz8mLHMBFeEG+flfqEYuYW44Mhi4jihGN+Re4o=
Subject key identifier: 79:6B:3C:FA:51:76:C9:FF:F2:E0:34:33:FB:1C:3A:54:03:FF:E8:1B
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial: 01974779CFBEB8F4C43DA795CEE3BBA82A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number: DB
Signing time: Fri 06 Jun 2025 23:00:54 +0000
Manifest this update: Fri 06 Jun 2025 23:00:54 +0000
Manifest next update: Sat 07 Jun 2025 23:00:54 +0000
Files and hashes: 1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: idVJQ1k6tMu9Vt65Om3YsnLmYFOgwOkNy1+dseYLnRQ=)
2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:cf:be:b8:f4:c4:3d:a7:95:ce:e3:bb:a8:2a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Validity
Not Before: Jun 6 23:00:54 2025 GMT
Not After : Jun 7 23:00:54 2025 GMT
Subject: CN=796b3cfa5176c9fff2e03433fb1c3a5403ffe81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:aa:e2:f8:d2:a9:d8:e6:42:c5:c6:47:ab:
81:90:6e:d9:fe:71:84:a0:64:3b:20:80:12:03:16:
b7:36:00:bf:ae:b7:94:4e:ae:bd:fb:ef:d7:f4:39:
2c:ad:a0:a3:aa:b2:a8:fc:0e:95:0c:ea:1f:62:62:
18:7f:62:20:9f:e4:61:45:e7:d6:53:a1:14:c6:37:
e1:a3:fc:49:f2:6b:11:1a:0f:ba:a2:01:a9:57:c6:
75:5a:8b:d1:7e:71:5a:6f:3f:63:dc:2b:9f:15:b6:
0d:4d:ee:9a:60:92:33:87:53:9b:ca:dc:98:84:78:
1d:75:c0:c1:62:df:43:ba:c0:53:ea:5e:43:4a:b0:
75:25:cf:cf:0a:43:b4:03:f8:ac:de:66:2c:52:d9:
27:27:e9:ac:5f:0a:58:75:15:5b:94:07:c4:a1:25:
82:f6:e2:75:3e:40:60:3f:25:27:46:3e:a5:a2:a0:
38:9b:08:4c:d6:56:65:36:e6:ab:71:56:df:07:e5:
3b:f2:59:03:04:52:8e:ed:a1:1b:5c:ff:40:4f:23:
fe:79:a1:58:c0:f4:2d:6c:52:81:2a:a2:5b:4d:fa:
b0:52:4c:b0:17:1c:6d:31:93:0f:2a:d0:0e:0b:57:
c8:02:69:a7:64:65:f9:3a:8a:a1:e5:57:a2:76:a0:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6B:3C:FA:51:76:C9:FF:F2:E0:34:33:FB:1C:3A:54:03:FF:E8:1B
X509v3 Authority Key Identifier:
keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8f:84:d6:45:d7:53:c7:1b:cb:7b:84:26:ad:e9:ea:a2:d7:
7c:e0:d4:f2:cd:57:b9:c8:72:b4:30:87:3b:4f:a7:f9:9c:e6:
84:95:e2:8a:0d:1e:ec:ac:cb:2e:8c:e2:22:15:a8:c5:b4:d5:
6b:79:b7:09:5d:c6:9a:4d:bf:ab:21:29:00:b2:d0:82:99:23:
50:8e:21:a6:09:0c:ff:66:20:bb:36:6a:09:07:83:88:67:cb:
dc:b6:fa:38:2d:f0:82:61:13:32:cf:6c:06:96:f3:37:71:68:
33:a1:d9:44:0f:d0:2d:22:37:10:f7:13:8f:00:47:b0:cd:f5:
c4:4b:ca:88:76:09:6e:51:86:b3:bb:d8:61:cc:cc:14:a5:16:
7d:a5:fe:d5:75:04:f9:5b:dd:1a:8d:4d:2e:03:25:35:68:ad:
04:01:6f:8e:58:d4:fa:0a:83:ca:f4:83:36:f9:2c:c4:4f:34:
96:e7:78:82:54:01:b7:a0:91:cc:d0:b2:25:e7:00:1b:3c:b5:
85:c7:c2:e4:62:4b:eb:e3:33:c7:17:20:2e:9d:ba:27:71:1a:
70:69:69:64:8b:62:25:41:b3:f9:c4:51:88:46:f7:3a:45:63:
39:44:f1:8f:d2:58:21:ab:07:37:ac:0c:f4:94:b2:ef:73:0d:
19:b1:e1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:26 2025 by rpki-client