Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File: W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier: iBv7HSlXIG75DYEYsh2JDrJG2RLva5sblyjC9BJ1h0w=
Subject key identifier: 65:D7:36:D4:2F:92:32:8F:54:88:A1:1A:C9:69:F6:CE:26:70:B8:E2
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer: /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial: 0197B88F0EED0A585A4CA5816325F903C0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number: 1401
Signing time: Sat 28 Jun 2025 22:01:12 +0000
Manifest this update: Sat 28 Jun 2025 22:01:12 +0000
Manifest next update: Sun 29 Jun 2025 22:01:12 +0000
Files and hashes: 1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=)
2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: 3i7BepFDm9MgHkfLabD3qWdVQnTOEjqjNYDf08ex7cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:0e:ed:0a:58:5a:4c:a5:81:63:25:f9:03:c0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Validity
Not Before: Jun 28 22:01:12 2025 GMT
Not After : Jun 29 22:01:12 2025 GMT
Subject: CN=65d736d42f92328f5488a11ac969f6ce2670b8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c5:77:89:89:f4:88:fc:c6:7b:be:20:70:19:
5a:0a:99:be:93:1d:20:47:32:e0:df:9a:d4:be:4b:
d9:28:ff:92:26:c4:14:95:6a:aa:48:d5:4b:43:f3:
84:8b:7d:cf:04:c6:c7:4e:6b:18:67:04:05:b0:5c:
8d:8b:37:06:cb:c2:7c:64:d8:5d:bc:68:94:9d:89:
97:87:32:30:69:75:f3:7e:77:d2:e9:3e:4d:e1:f5:
03:3f:4e:ad:49:0f:e7:57:77:21:28:fd:ad:a5:30:
42:f3:60:5d:83:5d:29:fc:9b:e9:5b:b4:3a:80:d5:
bd:7a:f8:bd:3b:bb:3b:c5:f9:ef:ea:3d:0c:fc:87:
98:53:0a:c8:65:b2:c7:36:d7:bc:ac:d3:89:99:f8:
7b:ac:30:c0:8d:99:86:78:d6:47:e4:26:bb:3a:fa:
b5:5b:49:28:3b:f2:4b:5b:eb:ec:6a:2b:80:97:46:
77:d6:66:a8:40:9a:df:4d:0c:57:90:75:df:42:38:
d2:75:5f:f0:96:8c:dd:a6:d4:84:a8:c9:37:c4:ed:
34:2c:65:00:bc:f7:1f:92:93:4a:67:9c:04:f2:93:
7d:bf:80:d1:3b:34:ad:25:ff:98:08:36:5a:f9:15:
a3:8b:48:02:d8:6b:82:e3:3f:f5:5e:0f:06:9d:b7:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D7:36:D4:2F:92:32:8F:54:88:A1:1A:C9:69:F6:CE:26:70:B8:E2
X509v3 Authority Key Identifier:
keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:a1:33:36:b7:b2:b1:02:3b:e9:30:61:36:2b:69:d9:75:
d7:c5:9c:d9:3a:ab:13:14:94:f5:c5:b6:9f:fc:4c:16:47:38:
2d:23:bc:7a:c7:2c:8f:f1:b6:13:7c:63:aa:7f:66:80:d5:03:
5a:3b:eb:a2:32:0a:a3:5b:aa:d8:84:7b:c8:c6:d5:b4:cc:0f:
3f:37:e1:fa:74:2b:12:30:7b:d7:09:c7:34:21:16:24:99:1c:
ab:22:4f:d9:3f:d2:83:d8:9f:00:c0:c6:a3:d8:6f:05:37:e4:
20:fe:69:5f:5f:bc:34:56:f5:47:aa:27:5d:81:38:02:ca:f1:
44:99:d7:c5:bc:cb:b2:6a:86:7a:cf:e4:b8:29:4e:6d:ae:ee:
39:77:84:bd:87:5d:ba:5c:db:f6:83:18:9b:15:85:e4:55:c9:
aa:ab:9d:86:a7:91:ba:68:10:3f:d0:8a:0f:0a:0b:57:82:d2:
5f:8d:bb:b6:91:37:91:12:e2:2c:14:5d:b3:3c:0c:ea:8f:3a:
40:ff:e0:ad:a7:ce:ae:27:26:0c:f9:03:78:95:0b:8e:72:d5:
7a:3c:1b:32:80:57:f1:87:16:08:12:10:6f:97:03:b4:38:37:
68:10:65:76:a4:3a:d7:86:ea:4f:e8:d3:44:ff:8b:2f:4a:ff:
53:f6:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:23 2025 by rpki-client