Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier: PYpTxVLkvi9IqoBxtDMCGHgbq1TW1cF9AlHomH1hqJc=
Subject key identifier: DE:98:86:11:A3:E8:D8:C3:8F:A2:DA:E7:B6:27:64:C1:F1:95:EB:9B
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial: 0197493194FDE63F7D4B554DA0E1F74A589F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number: 0CD7
Signing time: Sat 07 Jun 2025 07:01:15 +0000
Manifest this update: Sat 07 Jun 2025 07:01:15 +0000
Manifest next update: Sun 08 Jun 2025 07:01:15 +0000
Files and hashes: 1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=)
2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: pYQc+d8zcXlrBPEt6SeWjE0E5l98AOaMrtSz5g/WoiQ=)
3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:94:fd:e6:3f:7d:4b:55:4d:a0:e1:f7:4a:58:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Validity
Not Before: Jun 7 07:01:15 2025 GMT
Not After : Jun 8 07:01:15 2025 GMT
Subject: CN=de988611a3e8d8c38fa2dae7b62764c1f195eb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:cc:e6:3d:2b:f7:ac:fa:b9:cf:a5:46:c9:
33:03:af:8f:44:5b:72:68:21:83:76:13:16:53:ce:
ce:ef:1f:e7:dd:a9:10:46:ab:4b:d0:39:dc:6e:da:
73:54:49:2d:33:bc:14:66:83:a7:fd:71:97:06:f7:
1e:5e:16:5a:51:dd:da:78:ca:c8:53:9f:99:bc:e2:
18:a7:38:13:45:f4:4b:71:02:4c:e5:0d:47:93:b2:
c1:f9:2c:fb:52:eb:53:38:02:25:5e:a9:df:bc:86:
a8:9f:ff:33:5a:a1:df:96:a1:e7:37:0c:f2:be:a8:
07:aa:76:5f:3e:e9:47:c6:e2:71:8b:34:f0:ee:d8:
77:48:4f:0d:75:dd:ec:41:86:d8:6a:82:13:94:65:
48:c0:9c:a6:3a:2c:dd:d5:af:a9:cd:25:c8:e5:fd:
dc:d8:78:7f:02:62:71:ce:f7:12:f4:f5:3b:96:24:
d5:c9:ca:2b:a7:0f:14:19:97:2c:84:1f:b1:c2:86:
30:50:f1:df:ea:39:14:71:5c:78:46:d9:50:6f:ac:
56:44:8b:b1:e1:74:dd:62:ce:57:b0:ad:3e:03:10:
30:12:9d:19:a4:87:28:c4:06:ba:73:e4:ac:66:e1:
4d:0d:c5:c1:df:bd:fd:45:01:a7:bf:ab:bb:b4:aa:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:98:86:11:A3:E8:D8:C3:8F:A2:DA:E7:B6:27:64:C1:F1:95:EB:9B
X509v3 Authority Key Identifier:
keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:7f:3b:b7:d5:9c:05:06:24:0a:af:73:27:e4:1f:26:a5:94:
62:37:4b:45:ae:cd:6f:ba:ee:4e:ad:0e:42:98:1e:ae:65:56:
72:db:94:e7:8f:36:12:79:c2:9c:56:95:36:dd:f4:ee:e5:e1:
f4:81:2c:44:ba:d2:d3:14:e0:48:b8:44:25:bb:02:71:5b:47:
d8:63:c6:cf:70:64:a7:a9:79:98:25:2e:7a:6a:83:8b:3a:06:
63:04:13:99:28:e1:a7:e4:f3:70:ca:04:08:4c:8a:3b:ff:25:
8c:6d:3c:96:23:03:47:e9:78:20:d7:1a:82:63:d9:e9:ef:d7:
50:b9:e1:ed:09:59:cd:ef:bd:be:f9:f7:83:70:d2:6f:34:9e:
15:97:db:28:a3:72:9b:18:73:df:86:88:5f:18:44:ca:a2:68:
7f:fd:36:c6:94:8f:23:9d:ee:4e:9e:4e:f9:1c:77:d4:66:82:
b8:1c:90:3a:a2:14:d4:1f:f5:60:f6:b9:af:06:08:48:8a:b3:
5e:23:6a:a2:45:2e:21:ce:5e:d8:13:69:26:2d:85:a9:14:ad:
61:f4:a8:74:bf:45:9f:e6:4c:67:a5:a0:14:ad:4b:09:03:61:
0b:23:d8:7a:06:18:4b:8d:57:ba:4e:65:41:77:59:fb:fa:c7:
0d:d0:f0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:50 2025 by rpki-client