Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json)
Hash identifier: gzuec4nz2GPVdEGoAikqS76m31ZUcuL61g3hKwa3BLU=
Subject key identifier: C0:41:68:29:06:66:E3:B6:F1:E4:BB:8E:FD:C5:A2:A6:A8:31:C1:B4
Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Certificate serial: 019753101E96144AA7D6DE56CFFD61E1F18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
Manifest number: 0845
Signing time: Mon 09 Jun 2025 05:00:54 +0000
Manifest this update: Mon 09 Jun 2025 05:00:54 +0000
Manifest next update: Tue 10 Jun 2025 05:00:54 +0000
Files and hashes: 1: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: Ja7nTmC9BClt/FJq7VoFEQO9JmXBdOZJHHMd2b56Z14=)
2: vdHTEb2gTWFnAUlb8EFFzZFOAyk.roa (hash: 7sUvaXCmkwC5CKTFltnkxSzQliSsm8MxQWVCiowpXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:1e:96:14:4a:a7:d6:de:56:cf:fd:61:e1:f1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea
Validity
Not Before: Jun 9 05:00:54 2025 GMT
Not After : Jun 10 05:00:54 2025 GMT
Subject: CN=c04168290666e3b6f1e4bb8efdc5a2a6a831c1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:71:c3:a4:7a:26:dc:31:5a:84:54:45:80:
d7:3e:b4:70:c2:a8:8e:dc:62:7f:2a:c5:2f:75:23:
2c:00:67:5a:29:d8:be:6c:0a:91:61:6d:96:73:9b:
a2:af:94:aa:ff:12:18:82:d4:32:78:79:79:08:ec:
74:e8:ea:ff:02:3d:75:02:3a:c3:8b:96:18:b1:9d:
16:5b:8f:ad:5e:b3:1a:23:51:5d:13:cb:bd:c0:b0:
fc:e8:3c:b7:ae:38:b9:06:e2:e9:79:ae:35:ed:f9:
86:0e:89:c2:94:1b:f0:58:3f:1f:7d:15:08:77:90:
38:80:b5:73:92:f3:d1:30:80:ee:0d:0c:3e:b6:b9:
d1:54:cc:9a:57:9a:8f:01:fb:2a:a2:f5:9b:7a:2d:
2a:25:10:00:d6:4d:86:3e:7b:dc:05:f3:ec:57:a7:
d7:a4:89:95:47:c8:16:52:3b:dd:73:db:87:31:77:
e0:bc:e4:81:ef:f6:15:35:13:1d:67:49:ab:58:06:
28:bc:5b:92:7e:12:f3:00:3b:c3:59:ab:2d:7b:49:
72:68:63:aa:d0:cf:33:9c:fa:88:bb:58:c3:23:55:
22:b9:71:2d:c3:b9:c5:ba:0d:ff:dc:94:26:71:31:
7d:61:5a:12:59:6e:b4:4c:7d:59:5a:28:94:0f:7f:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:68:29:06:66:E3:B6:F1:E4:BB:8E:FD:C5:A2:A6:A8:31:C1:B4
X509v3 Authority Key Identifier:
keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e8:de:19:76:f8:7d:7d:a2:63:ca:94:4b:87:d1:00:56:c7:
28:29:c7:b4:a6:fe:48:b6:27:5c:91:32:f9:f6:3a:af:48:e6:
e1:cb:9b:aa:9e:99:28:a8:72:24:d3:11:2b:2b:64:ac:0e:ae:
64:3e:33:3e:02:c5:1b:4d:b7:06:e7:3f:4f:3d:a3:ef:d2:28:
1c:44:b3:79:d9:56:49:6c:47:25:aa:03:ee:cc:4a:47:ce:9c:
ce:e5:5b:ed:64:18:d0:92:96:b5:c0:ec:12:66:2c:42:3a:2d:
b5:be:a6:17:d4:b7:93:b2:02:d8:46:81:4e:f8:00:f3:0f:f4:
16:08:08:9a:5d:fa:77:ef:ec:b5:83:4d:ef:52:ab:92:53:64:
ec:17:a7:ee:93:fb:e6:ab:f7:c4:41:64:1e:23:b6:44:7a:ef:
d2:9a:09:45:1c:09:ba:54:62:08:a7:ae:6a:f5:d9:38:41:76:
9b:51:25:75:45:6e:7c:4d:91:e4:0e:3e:1b:ad:99:88:cc:86:
11:6e:a8:ae:75:04:e4:b3:92:ee:03:7d:fe:3a:9e:ba:73:34:
f6:55:12:fe:0b:f3:f1:e5:69:66:69:54:5f:5b:56:c0:fa:d6:
ce:ca:bf:7f:24:1b:de:9e:09:12:e8:37:52:c8:34:30:05:67:
13:10:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:28 2025 by rpki-client