Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: 32HAhYIXLKG8wmCK0lZD/CCHvKSkhdxxasRKn0cGvGg=
Subject key identifier: 0A:36:3A:1D:54:10:99:FC:90:06:BA:D3:1B:33:24:BE:25:61:4D:6C
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 0197B6A0D39547FB53F39D16494DA006B21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: MTsePFf5q+mDzIYnzHGz7tRE0BCWEQwTsOtQABymcvw=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d3:95:47:fb:53:f3:9d:16:49:4d:a0:06:b2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=0a363a1d541099fc9006bad31b3324be25614d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:4b:e8:3a:d8:e0:15:62:90:76:96:be:00:
f4:ea:db:75:87:08:4b:21:fd:c4:43:b9:9c:7c:11:
82:15:de:dc:cb:2c:41:1b:1d:13:68:9a:80:7d:02:
63:27:37:6c:e6:b3:7e:78:e1:f5:c5:ad:a1:45:99:
88:fb:15:e8:96:cc:92:a5:04:2e:fb:92:0d:56:0d:
14:35:42:bf:4b:7a:55:c1:a3:d5:5c:60:51:ef:63:
b3:66:ec:c1:1c:18:8e:cb:bc:95:9c:44:eb:c1:28:
db:27:b5:54:37:2a:20:6a:a4:f9:c7:9f:fb:35:d4:
42:4f:b5:fb:19:71:ac:eb:c3:b4:49:1f:40:72:45:
f5:3e:25:08:4d:d0:7d:0c:41:bb:aa:f8:ba:18:05:
e3:2e:ce:87:4d:b1:90:d1:02:f3:be:43:9d:a1:88:
0e:b3:cb:db:bf:30:f8:f4:3e:99:2c:f9:9c:0a:92:
de:8f:d6:b2:c7:7f:31:9b:6b:01:a5:1d:4e:0a:09:
81:11:b0:9f:6a:31:7c:36:af:81:77:18:2f:f9:f9:
38:1e:01:7e:61:67:87:37:6a:d6:f0:6a:cc:09:1c:
34:5c:bb:1b:38:e3:f0:7e:be:99:0a:6d:7e:23:06:
16:e6:09:46:0d:be:fd:e7:c0:0c:dd:84:ce:55:31:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:36:3A:1D:54:10:99:FC:90:06:BA:D3:1B:33:24:BE:25:61:4D:6C
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:81:3e:2e:e1:9a:aa:04:73:26:33:e4:f6:b9:9b:c4:b0:74:
8d:f4:87:2a:fb:ec:94:6f:d3:e9:5b:61:60:4d:01:ad:4e:ac:
fa:e3:87:b5:55:8a:8c:fd:ac:66:3d:a7:d3:56:e8:53:70:42:
81:1f:18:41:0a:24:b0:2c:b4:cb:eb:f8:b0:30:65:79:7f:09:
37:97:43:58:c4:5b:5f:d7:f4:6e:11:5c:61:ff:d4:5e:2a:13:
26:95:a5:96:db:d8:6d:70:28:39:7d:26:8e:fa:e1:ff:0f:d4:
bc:13:87:47:78:20:3b:7a:8c:bb:d7:5a:28:c1:67:4e:92:b6:
86:bb:78:7b:81:a6:fb:55:f5:89:c3:af:ed:0f:58:de:51:8f:
4c:95:3d:3b:5d:c9:28:6e:97:86:c0:5a:57:61:25:a2:ef:85:
ae:2d:a4:5e:b1:69:2d:ec:83:23:6f:64:b6:06:37:6d:6e:fa:
cc:ea:b8:13:0e:1b:8c:cc:1d:fe:c9:18:f5:00:fa:e8:de:29:
09:d5:79:e3:1d:84:1e:42:f5:de:86:44:5f:97:8d:ca:da:8f:
94:89:49:db:73:6c:6e:6d:62:84:44:9d:3e:66:27:9f:47:98:
11:5e:60:69:f8:a3:d7:7c:43:08:ba:a4:e7:0f:bf:a6:c9:a9:
df:4a:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:24 2025 by rpki-client