Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File: W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier: FdRbhF+NPK1D7fkAlcub6QaMsgZo5igkqkQhTDya4d4=
Subject key identifier: F5:1D:B2:28:36:73:04:FC:54:1D:14:50:A1:80:64:89:42:B5:15:E9
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 0197B77C3D312A8A74FE7F0B070E05E98E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number: 11D4
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: 63salWhc3QRvjl4PRdN20jEnN1g.roa (hash: yuGZxPr7QCy1Hv8ABdlA7QRlK++I2cpETqHSsD2+rR4=)
2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: Bu4/EZLCCI14toC1x6Hywg11jh9Mk2Jgv6D9m4p91Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3d:31:2a:8a:74:fe:7f:0b:07:0e:05:e9:8e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=f51db228367304fc541d1450a180648942b515e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:52:06:6e:4d:36:e0:b8:a6:c6:ec:0d:f5:
17:ec:04:cb:76:5f:34:74:21:7e:28:b8:7e:c7:f7:
a0:2f:b4:f3:09:09:25:bd:67:35:15:22:ea:be:dd:
dc:da:25:be:e5:a5:5b:8e:26:a7:79:03:cb:0f:fc:
4e:1c:cd:38:80:89:0f:e3:ec:15:c9:74:9e:c9:8d:
02:1b:b2:1d:00:12:af:d9:67:c9:82:72:30:f4:52:
50:82:42:32:bb:87:44:be:73:db:42:6e:00:4b:f8:
ac:35:bc:71:fd:ad:b4:29:8e:01:ef:fe:b7:ec:fb:
37:c2:0c:73:a4:b6:f4:83:f3:96:50:69:ef:7d:15:
53:67:a5:ab:a4:75:6d:1a:a2:25:72:21:10:12:ca:
f1:0a:fa:a5:56:2c:7c:b7:f2:38:74:28:4d:55:85:
ae:9b:78:f6:37:4c:22:72:e6:0a:c3:ea:2b:84:8c:
bf:2e:ab:fe:2b:54:a8:ab:63:28:88:54:bc:dd:a7:
5c:17:ee:02:bf:6e:0e:71:73:b7:74:33:76:c8:64:
e6:58:68:e6:17:a5:5c:05:9f:93:95:eb:49:71:b0:
0a:b5:28:db:0d:05:5f:d5:62:18:23:6d:18:1e:71:
55:31:27:9a:33:2e:1b:8f:7c:2c:15:39:ae:80:a1:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1D:B2:28:36:73:04:FC:54:1D:14:50:A1:80:64:89:42:B5:15:E9
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:57:cc:b6:42:2c:6f:25:7c:1c:f4:7e:70:78:46:79:b8:45:
92:e2:48:4b:3f:43:5a:8a:e8:f4:19:24:b3:5c:7e:3e:4b:4d:
0e:6e:52:bf:d0:3d:98:d8:42:0a:17:9d:db:2f:bf:39:dd:db:
b2:3f:92:45:3f:69:75:d6:48:04:19:71:95:18:82:1f:be:a2:
2b:01:e5:6e:74:34:0b:da:c5:47:c2:66:e8:5c:a8:4a:17:6e:
2d:43:d5:ad:f5:22:ee:c1:dc:90:69:65:4e:73:81:83:3a:20:
44:5f:72:51:a4:2f:48:86:ba:f6:1b:d1:6c:1c:52:d7:10:d3:
88:e4:d5:dd:95:88:46:9e:70:cd:86:91:aa:e7:47:dc:dd:87:
aa:b1:cb:28:1b:40:55:ad:3c:c7:37:f7:2f:3e:6a:51:6e:d9:
6f:44:2d:0d:a6:18:55:0d:95:38:76:e0:06:2e:c8:60:c7:28:
7b:6d:a9:b0:cd:98:54:41:98:92:d3:2a:98:5d:b4:52:74:0b:
18:2f:e2:54:cc:e0:11:01:cc:fd:12:50:aa:86:27:44:02:b3:
74:e8:cf:ef:80:eb:35:2d:c4:a0:a3:6c:e7:e3:a2:d4:f0:92:
30:17:49:9e:6b:4b:f1:23:fd:9b:f2:12:ae:a0:68:b0:f4:35:
79:d0:90:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:27 2025 by rpki-client