Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: vq/Er7m0tezFbvFDPE3ukRt33etteroDTn4wQS2dlDQ=
Subject key identifier: AC:41:66:DA:AC:1E:9F:F1:A8:35:7F:83:7E:94:2D:89:CE:2F:74:5D
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 019749D5FD90DD528C24952F00824FCB17E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 017F
Signing time: Sat 07 Jun 2025 10:00:50 +0000
Manifest this update: Sat 07 Jun 2025 10:00:50 +0000
Manifest next update: Sun 08 Jun 2025 10:00:50 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: FBWDd8Vksd8wfXSYP7G3lfFMLZ1BVNcpSf6FetzQ4jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:fd:90:dd:52:8c:24:95:2f:00:82:4f:cb:17:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Jun 7 10:00:50 2025 GMT
Not After : Jun 8 10:00:50 2025 GMT
Subject: CN=ac4166daac1e9ff1a8357f837e942d89ce2f745d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:c7:98:a7:e8:98:75:91:9f:89:f7:bd:ea:
dc:2f:cd:18:83:ad:17:79:47:01:bb:99:7b:2e:a9:
d5:b7:3f:55:c5:e7:9d:fd:a6:c0:aa:56:4e:06:6b:
68:97:93:25:40:c6:1a:60:5e:95:b3:d0:8a:97:2b:
ec:7a:8d:14:ba:60:88:d8:2d:8a:0a:90:74:de:7c:
bf:ae:2f:c6:09:63:a3:3a:1e:53:5f:c2:fb:7c:7c:
65:c5:c7:70:3b:64:b9:d0:2f:c6:7c:8f:36:24:a3:
87:47:de:92:55:fe:3e:af:98:9e:c8:86:63:28:ff:
58:77:7f:31:67:09:64:f2:eb:c3:83:f2:26:e0:2a:
88:1f:4a:ff:8c:a9:68:39:da:df:2a:ce:4d:01:11:
95:4b:3e:42:aa:f6:41:34:46:c1:00:78:9f:97:ca:
58:63:8a:86:34:e6:88:81:12:56:1f:47:3b:88:f1:
b0:5a:11:a3:d5:1a:77:ec:d4:4d:4a:1e:2c:98:6b:
54:1c:f5:70:5f:97:56:b7:64:6b:5b:ba:a1:b5:c5:
1d:68:47:a1:aa:1e:f8:22:d7:a4:23:75:95:ab:bb:
9d:eb:3c:ab:50:f7:77:da:cc:ec:f0:71:8f:20:bc:
b9:50:04:a8:7a:94:78:8a:a6:e4:ab:13:23:42:c7:
22:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:41:66:DA:AC:1E:9F:F1:A8:35:7F:83:7E:94:2D:89:CE:2F:74:5D
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:13:1c:81:ef:d3:c7:f2:76:40:af:13:50:69:41:17:1d:ec:
4f:13:2d:18:09:e9:0d:36:1e:55:56:bf:51:c0:ca:79:e0:c8:
d0:be:9c:cd:6a:02:97:26:be:14:8f:17:57:21:17:95:75:84:
57:f3:14:3c:ab:48:b9:9f:1f:63:82:68:49:2e:4f:b6:85:1d:
ac:7a:79:a0:84:2a:5f:3d:61:3c:7c:d9:ce:38:da:61:10:bf:
4c:12:ea:bf:d3:27:eb:aa:66:d6:a7:ee:52:5a:ca:9f:40:4b:
df:26:b5:7d:46:d4:c6:cc:15:e1:1d:48:f5:a4:e1:88:d4:98:
e8:6b:ae:56:03:7e:bd:63:87:5b:ec:73:08:67:1b:c0:ca:f2:
0a:b7:5a:40:2b:ce:7d:c8:5e:8a:1f:57:f8:01:fa:a7:8f:2c:
b9:40:60:7b:9e:12:55:30:ae:d3:87:73:14:d1:c8:9a:83:f9:
33:8b:a2:33:7f:fe:b3:2b:09:5b:bc:72:f1:cc:a5:f7:bd:c7:
49:4d:e2:44:73:ef:f7:93:63:6e:03:77:b1:f9:cb:4e:71:de:
5b:b6:37:a3:3d:35:42:b2:d2:de:ce:f7:af:b1:b2:53:66:a8:
02:bf:2a:e3:d4:73:d6:53:be:8c:79:87:79:d4:6e:ac:75:cc:
2a:73:79:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1f2Q3VKMJJUvAIJPyxfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2VkYmE2N2E0NWI3MzdkOGFkMGY3YTc4NGMzNTBkODZk
NjcxMTgwHhcNMjUwNjA3MTAwMDUwWhcNMjUwNjA4MTAwMDUwWjAzMTEwLwYDVQQD
EyhhYzQxNjZkYWFjMWU5ZmYxYTgzNTdmODM3ZTk0MmQ4OWNlMmY3NDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx/HmKfomHWRn4n3vercL80Yg60X
eUcBu5l7LqnVtz9Vxeed/abAqlZOBmtol5MlQMYaYF6Vs9CKlyvseo0UumCI2C2K
CpB03ny/ri/GCWOjOh5TX8L7fHxlxcdwO2S50C/GfI82JKOHR96SVf4+r5ieyIZj
KP9Yd38xZwlk8uvDg/Im4CqIH0r/jKloOdrfKs5NARGVSz5CqvZBNEbBAHifl8pY
Y4qGNOaIgRJWH0c7iPGwWhGj1Rp37NRNSh4smGtUHPVwX5dWt2RrW7qhtcUdaEeh
qh74ItekI3WVq7ud6zyrUPd32szs8HGPILy5UASoepR4iqbkqxMjQsci8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxBZtqsHp/xqDV/g36ULYnOL3RdMB8GA1UdIwQY
MBaAFFjO26Z6Rbc32K0PenhMNQ2G1nEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWIt
NzBjNzcwYjEwODdiLzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWItNzBjNzcwYjEwODdi
LzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRMcge/T
x/J2QK8TUGlBFx3sTxMtGAnpDTYeVVa/UcDKeeDI0L6czWoClya+FI8XVyEXlXWE
V/MUPKtIuZ8fY4JoSS5PtoUdrHp5oIQqXz1hPHzZzjjaYRC/TBLqv9Mn66pm1qfu
UlrKn0BL3ya1fUbUxswV4R1I9aThiNSY6GuuVgN+vWOHW+xzCGcbwMryCrdaQCvO
fcheih9X+AH6p48suUBge54SVTCu04dzFNHImoP5M4uiM3/+sysJW7xy8cyl973H
SU3iRHPv95NjbgN3sfnLTnHeW7Y3oz01QrLS3s73r7GyU2aoAr8q49Rz1lO+jHmH
edRurHXMKnN5ew==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:04:59 2025 by rpki-client