Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json)
Hash identifier: DJMKBqnAK12oRn4HwKQIB94idqappl+KJWaK1Q1Ngi8=
Subject key identifier: 2E:40:B1:5C:8B:7E:E6:50:90:C3:52:E1:80:97:59:AF:44:81:86:95
Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Certificate serial: 0197488C5E505107483D0CCB1DF331EAE0E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
Manifest number: 048E
Signing time: Sat 07 Jun 2025 04:00:48 +0000
Manifest this update: Sat 07 Jun 2025 04:00:48 +0000
Manifest next update: Sun 08 Jun 2025 04:00:48 +0000
Files and hashes: 1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=)
2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: iYluyjZsH2sumUSCWCNIKB8caA3j0kJzX4wBbv+7lVQ=)
3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:5e:50:51:07:48:3d:0c:cb:1d:f3:31:ea:e0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11
Validity
Not Before: Jun 7 04:00:48 2025 GMT
Not After : Jun 8 04:00:48 2025 GMT
Subject: CN=2e40b15c8b7ee65090c352e1809759af44818695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:08:44:40:56:64:e2:43:60:65:4d:0f:a2:
69:23:9f:8b:6b:f5:d5:2f:33:9d:e5:88:19:4d:58:
09:85:e9:a6:3a:71:68:7b:7e:f2:45:a3:79:a6:1f:
2b:59:bf:9c:fa:be:e3:a2:db:b0:8c:1b:50:e7:78:
99:06:5b:03:f8:30:ef:4a:36:60:03:ec:3e:de:91:
80:b3:de:59:ae:14:01:03:48:21:48:dc:87:3e:2b:
08:f0:1d:41:5f:9c:06:46:ca:ac:15:86:c6:65:be:
9a:02:21:ad:84:27:7c:1f:21:67:91:50:25:32:2b:
5e:72:97:1f:d3:fe:19:02:99:2a:06:ba:f0:e2:2f:
a0:b1:1e:b4:8d:16:3d:12:2c:05:6e:12:f7:8e:cf:
c8:ad:f5:1d:98:e3:8f:51:61:e3:60:7d:1a:b5:f5:
68:aa:4a:6b:ee:ff:ad:de:02:f2:f5:ef:ac:fd:c7:
8e:59:a5:56:9d:a3:47:0e:08:54:ba:39:07:5f:75:
a4:08:07:fc:37:b0:5e:51:da:a6:c9:9a:6d:a5:47:
08:4b:cf:76:50:51:9c:29:bf:7e:38:55:a2:a5:3c:
17:e7:2e:90:7c:12:cf:b0:d0:24:86:e2:16:03:27:
69:a5:bc:0d:3a:30:2d:78:27:4c:c9:6d:09:17:b8:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:40:B1:5C:8B:7E:E6:50:90:C3:52:E1:80:97:59:AF:44:81:86:95
X509v3 Authority Key Identifier:
keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0f:84:43:03:91:5b:72:76:89:0a:b1:91:49:fb:9f:4f:5a:
90:e7:68:8e:a6:f0:c1:84:da:11:a2:c1:b1:85:37:c4:28:72:
be:4e:e1:ee:51:62:ec:78:49:73:e1:13:87:a3:ed:49:b9:45:
d8:f6:c8:a5:86:5a:e1:7c:51:26:ad:fa:bc:74:fc:6a:fb:08:
38:75:bf:de:e0:46:e4:ad:2b:8f:04:c1:4e:46:40:63:f5:62:
0b:dd:fa:0d:1a:4b:e5:5c:4e:26:b3:63:45:d6:c8:5b:7e:d7:
1c:21:b1:75:34:25:09:9e:d6:ab:e1:1b:4a:ee:09:50:d4:26:
92:a2:2b:be:b0:9b:14:b1:e3:e6:75:c3:3f:b4:32:a9:fc:b6:
c6:67:c3:50:b3:99:b4:7b:f7:98:aa:2e:eb:92:b7:df:1d:d8:
23:f3:34:b4:7d:de:95:60:3b:ae:d4:ec:8f:9c:5a:86:f4:27:
95:84:24:21:a9:64:6e:e8:78:93:46:e8:eb:52:d5:e3:22:ff:
34:c3:da:81:60:b6:f4:f4:ed:a0:99:5f:ef:31:be:b1:2c:75:
9d:e2:eb:fe:53:60:f0:1e:92:3f:c9:c0:00:1a:56:2c:ec:97:
99:13:f5:e0:7f:48:93:e0:ec:d6:15:11:15:9b:66:0d:07:e0:
0e:ed:9a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:51 2025 by rpki-client