Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier: O+v3Hlzc+pMxMw/BfyMCv0LWBGgpWa19b8am36ANW/o=
Subject key identifier: E1:FD:8F:F6:8E:FE:91:A8:1B:AA:37:F7:FC:56:29:FA:45:0C:6F:FD
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial: 0198394D23388ABFB7AB49FEC45C554102E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number: 01FB
Signing time: Wed 23 Jul 2025 22:00:13 +0000
Manifest this update: Wed 23 Jul 2025 22:00:13 +0000
Manifest next update: Thu 24 Jul 2025 22:00:13 +0000
Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=)
2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: Dwc74HKKbagbE2DthAcNik6A6YQVTB+GMa26gLjK1js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:4d:23:38:8a:bf:b7:ab:49:fe:c4:5c:55:41:02:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Validity
Not Before: Jul 23 22:00:13 2025 GMT
Not After : Jul 24 22:00:13 2025 GMT
Subject: CN=e1fd8ff68efe91a81baa37f7fc5629fa450c6ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9c:2d:1a:1c:ad:c4:ea:64:48:c3:bf:6a:51:
18:52:e7:e0:b7:73:4c:cf:63:fe:31:8e:65:88:a8:
92:b6:4b:1d:42:d7:81:3e:36:0f:4a:3e:bf:34:6a:
36:5a:59:80:46:38:d0:44:48:99:de:5f:4c:82:e6:
19:7f:b9:b5:be:91:d0:7b:e9:73:75:b7:fd:72:83:
44:bb:76:84:1b:92:29:f1:29:16:de:74:e3:93:c0:
52:b5:1a:e4:7b:c5:0c:04:6a:7c:f9:2d:4c:55:b6:
dd:a3:da:14:b9:c7:9b:f8:7c:2b:d5:1a:d3:d5:f0:
d4:65:70:d8:e0:2d:3a:43:03:63:88:d5:97:16:f5:
78:1b:43:df:82:8a:08:a7:f6:cd:96:68:ff:94:84:
9a:b4:ea:a2:24:ee:22:42:31:8d:42:3e:2b:dc:59:
2a:67:55:eb:10:1c:7b:c3:53:44:f4:48:66:9f:d8:
d1:f9:d3:11:85:62:b5:fb:3d:68:66:a1:d6:45:81:
bb:ed:3f:4d:10:8b:be:f4:9f:14:2a:8a:75:8a:1c:
6e:e7:6b:9a:e9:df:32:f6:7a:52:f9:3d:d2:e5:64:
0a:20:89:dd:a0:b2:78:1d:01:0e:2a:f9:97:48:b8:
74:f2:ab:d2:a8:a9:fa:17:15:01:56:99:ca:6c:8b:
61:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FD:8F:F6:8E:FE:91:A8:1B:AA:37:F7:FC:56:29:FA:45:0C:6F:FD
X509v3 Authority Key Identifier:
keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f9:2c:c3:4c:8a:02:3d:e7:ae:4d:f1:d1:41:ab:1d:d0:28:
3f:6e:29:c3:02:9a:ef:53:23:d7:8e:3e:fb:c0:b4:eb:ac:19:
f6:eb:9f:eb:05:03:32:bd:97:92:63:50:13:f0:2d:1e:38:64:
a8:73:ba:54:66:7e:58:ed:ac:ff:b1:cb:e7:75:37:53:35:55:
1d:97:ea:06:a7:27:51:2f:bb:05:42:83:b0:b5:97:ae:50:f9:
47:34:2e:01:9f:23:8b:b4:4b:a2:2e:e2:32:19:3d:eb:ef:d9:
48:50:72:ab:45:c7:5d:8c:0b:1a:1a:fa:a7:68:32:97:46:16:
fe:a5:f9:7e:77:c7:ce:04:2f:f2:a5:15:34:0e:3d:54:e2:80:
b7:82:d1:af:15:8e:f5:64:b6:e7:ea:39:e4:b5:cc:6f:dc:f5:
ae:65:fd:c5:46:40:29:97:b2:9b:32:ec:bd:27:a3:66:d1:bc:
a0:bf:a2:7a:b6:63:0f:a6:55:4b:fc:bb:19:f4:2b:7c:f4:58:
32:47:63:39:74:2b:ed:81:82:f0:b0:3e:b0:b0:df:6a:f7:a2:
ed:b5:cf:28:50:dd:e2:f1:a8:8b:84:95:46:83:bc:62:e6:00:
e2:be:61:4a:53:ba:b6:18:8d:d7:21:ab:0d:f3:92:1d:02:48:
67:f3:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:50:21 2025 by rpki-client