Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
File: WB7MGnTPkqthnF9xASOTfOUNnEM.mft (raw, json)
Hash identifier: vEMHk0yVAHMIkgd1jUtFGAl9Ioi3DSk47pDCBsChG/s=
Subject key identifier: 1C:B1:87:D9:29:23:9F:7A:63:B1:70:78:DF:A0:6A:86:4F:94:82:D9
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 0197470BE0A1BCABBBC4D2D9BB8CF05FB3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
Manifest number: 1585
Signing time: Fri 06 Jun 2025 21:00:50 +0000
Manifest this update: Fri 06 Jun 2025 21:00:50 +0000
Manifest next update: Sat 07 Jun 2025 21:00:50 +0000
Files and hashes: 1: FRO4uwByqKxauyS9gXAIPw-fjUY.roa (hash: S7+hb35+hDpVRPSEr/9Dyjjwa4OmuFnKDBhwrckl+dA=)
2: WB7MGnTPkqthnF9xASOTfOUNnEM.crl (hash: fYgDFfZFIK3QT6rEcXvaeEB/24JUCtt8dO7kZ27Q4R8=)
3: kRJQb1l8os5CIqMOU8LBEruOTx4.roa (hash: TdXs2Jpp+ognrukNFJlpBqk3DPNKW0kibHKNgBtL5tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:e0:a1:bc:ab:bb:c4:d2:d9:bb:8c:f0:5f:b3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Jun 6 21:00:50 2025 GMT
Not After : Jun 7 21:00:50 2025 GMT
Subject: CN=1cb187d929239f7a63b17078dfa06a864f9482d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:89:17:15:a2:2d:bb:3d:1c:8b:2d:d4:cf:
b6:fa:23:f5:6b:dd:6e:b8:24:4d:69:1d:7c:d1:84:
a1:16:63:23:19:1a:01:34:5c:f4:2c:bf:57:6b:48:
7a:c3:a5:fc:4e:f3:ec:89:2d:1a:70:4c:52:de:32:
22:f7:6d:d3:af:d1:c4:e2:af:31:f0:8d:ce:4c:da:
f0:d2:bb:94:d2:f8:3f:2a:2c:91:3f:e0:e7:f1:f9:
3a:08:a0:71:d6:46:be:69:80:d3:39:1b:23:cb:db:
ab:b4:aa:75:8f:89:8a:78:38:95:05:f3:53:1f:80:
50:84:08:3b:d9:72:5c:2b:89:45:93:75:0c:3b:26:
d8:4f:7a:e5:97:03:3e:b4:81:75:66:61:a1:64:8d:
35:56:1e:ce:81:5a:ba:99:e8:59:e7:c4:52:93:ce:
10:b6:be:1f:bb:2b:85:95:1b:d4:3a:6b:77:c0:13:
16:8b:98:07:b5:04:09:e4:93:23:cb:e2:79:07:d0:
c3:e9:54:f4:af:74:07:f7:52:52:7e:c2:0a:6d:10:
05:75:43:10:6f:76:8a:a9:fa:c0:89:8d:b2:d9:22:
89:e9:6d:be:6b:15:da:ce:01:5e:19:64:6a:a5:a0:
3e:e3:04:f3:9d:c9:6b:9b:ff:97:8a:9f:a2:8f:35:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:87:D9:29:23:9F:7A:63:B1:70:78:DF:A0:6A:86:4F:94:82:D9
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:62:d7:21:85:b1:fb:a1:47:3c:cc:21:37:f3:77:df:76:7b:
86:6e:b6:3c:17:a9:a2:37:5a:46:2e:66:db:ec:b9:3a:5a:4f:
3e:82:c7:c4:6c:67:9e:94:34:be:2a:6c:4d:f7:0a:30:7b:89:
22:d4:27:3a:d6:2e:cb:2d:3c:f7:fc:63:f4:6f:3f:85:ea:6b:
da:da:33:30:7e:60:97:e9:38:cc:f0:12:24:2b:a1:c7:c0:b2:
9e:54:8d:15:83:b6:30:fd:f9:ab:87:da:4e:f9:85:62:a4:90:
fe:b5:9f:d6:61:88:d1:22:69:d4:1c:e9:3c:d2:51:fe:94:f1:
41:b4:65:ec:ec:25:a5:3a:cf:8b:de:d2:8b:3a:f8:7b:7f:82:
a1:d8:4e:3b:3e:c5:ed:86:c6:b7:40:7d:3f:98:b1:7d:51:b1:
ac:48:9d:0d:eb:cd:e1:88:aa:02:82:e5:b9:69:37:51:0b:a0:
94:c3:65:5d:5e:05:f8:32:32:a3:93:74:36:2b:c5:e2:a1:9a:
c2:26:f5:e9:00:94:fa:fb:91:d1:a6:8c:d9:35:b1:43:17:45:
d5:e0:44:fa:02:b7:5c:5a:92:c2:13:20:44:57:d7:7a:24:46:
ed:e6:95:7a:6b:a6:87:ce:62:59:da:f1:35:ca:b5:01:8f:7e:
4f:67:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:21:42 2025 by rpki-client