Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json)
Hash identifier: wmNDYXsN3WWb4sMUF9ZB9YEvHAM/GW46OckPQlntOBQ=
Subject key identifier: 1A:F0:FF:27:64:D5:D0:C3:65:95:40:41:7D:9C:C1:78:00:A9:A1:FF
Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c
Certificate serial: 0197B8214C0F6EF3CF4AAED9F7086F42C9CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
Manifest number: 1310
Signing time: Sat 28 Jun 2025 20:01:19 +0000
Manifest this update: Sat 28 Jun 2025 20:01:19 +0000
Manifest next update: Sun 29 Jun 2025 20:01:19 +0000
Files and hashes: 1: 0D01ZS927DpHThbFhFQ-_hFWxII.roa (hash: W9Yn7dxHb0Wn1s2QKfIJNqloaSt38wuy4qDOcPmUhfU=)
2: 42BmTsViJXz2WqlV4_io6K3VIjk.roa (hash: 2MyAlESNR6eqmGKBHGCnds8446wWXVt2CWU4C9xt8MM=)
3: KZZiPS9ZeOzzb7Ol0GU3vdesmec.roa (hash: vFZw/xYafILFh9yVo7+bAnIUSWqHvFS5F2SG90lZkR0=)
4: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: 68DamV3iR6rjlDOInWQ4p/Nz4YUeqO9ubITw1/OeSHA=)
5: Xo3ldLDsIsZwGbJ3VdetX-GULwc.roa (hash: 81La9U37EUF9V2tnd1e+qs0cFhZ17T44E32Wc8vicAU=)
6: _WlES2eSPPAcdb99IjbgTsc5Xro.roa (hash: EOl3gK+o3EL4dSF6oUVZ6VSDAeYTaurQvmfArpGviOI=)
7: sBlJ4mJbmZ7QPuvf5LufFr5BMyU.roa (hash: i/AotRsBPnt5Nf8geU1CUYhpvrjw/c5dfcC4n774/K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4c:0f:6e:f3:cf:4a:ae:d9:f7:08:6f:42:c9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597a01de87e011803f890ae17749020f995f140c
Validity
Not Before: Jun 28 20:01:19 2025 GMT
Not After : Jun 29 20:01:19 2025 GMT
Subject: CN=1af0ff2764d5d0c3659540417d9cc17800a9a1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:a7:d9:e1:30:32:d7:a2:35:5b:c3:cd:2f:
4c:c8:4a:72:14:e2:6b:0f:47:3f:c6:c9:b6:7a:6c:
79:7a:fd:76:28:f1:23:9a:8d:21:ca:e2:69:48:71:
9a:ec:15:61:0c:a7:d1:f9:70:9a:56:6a:e5:d6:4e:
ad:f9:ba:b7:a3:e7:81:2f:76:27:6c:85:9f:f7:7e:
a9:98:6e:ac:53:c1:c4:09:fb:cf:b4:79:32:6d:ca:
ce:c3:83:ff:1e:c8:d8:d0:ad:35:a9:b2:05:1c:8e:
41:9e:c1:9f:14:6d:b8:65:e7:c1:27:90:4b:a9:38:
2d:a9:fc:09:bd:3f:8c:7d:8b:74:4b:ba:a5:a1:42:
e7:29:84:e6:ce:5c:f1:0a:83:8f:54:64:26:f4:54:
2f:4c:aa:a3:da:3d:99:39:61:73:57:59:4a:95:f6:
6e:36:61:fb:7a:be:ea:ee:9c:ae:d5:59:72:e8:ef:
4a:96:b0:35:f3:1e:7b:eb:96:76:57:2b:82:af:10:
ca:c3:1b:1f:03:8a:56:bd:8c:80:7a:fe:62:3b:ba:
81:53:17:5e:e0:37:88:3e:2f:46:e2:4c:b2:47:7d:
c8:91:7c:e9:42:66:5d:a2:42:ec:d9:67:88:23:01:
6e:86:4b:5e:ef:b1:10:76:5a:f8:8d:9f:8b:85:f4:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F0:FF:27:64:D5:D0:C3:65:95:40:41:7D:9C:C1:78:00:A9:A1:FF
X509v3 Authority Key Identifier:
keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c0:ad:da:79:c9:c7:21:96:30:b0:66:4c:f6:ac:2a:a4:50:
4e:61:00:50:7c:96:f1:5b:89:dc:a5:5c:75:e6:c4:4d:2a:a4:
d6:59:de:88:c8:31:cd:76:87:ac:fb:4f:8d:e3:00:86:ad:11:
90:d9:62:eb:2a:d8:4d:fa:60:0f:53:80:82:4f:ef:9e:64:00:
40:be:b2:8c:d8:d9:03:96:8a:1b:9f:18:c1:5a:b7:6b:ef:0b:
fe:a9:f5:0a:c6:bf:10:d0:5f:70:d0:dd:5e:b5:94:71:dc:f4:
05:cd:c6:89:0b:fc:c3:a9:7c:09:e5:25:3d:51:d5:88:27:88:
e0:19:ad:27:ec:85:d0:84:99:4c:17:43:8b:7c:3a:87:a4:d2:
eb:8b:bc:ec:52:23:56:14:26:62:76:79:d8:48:10:80:f6:c5:
ea:85:48:34:c4:e3:38:f9:f9:07:86:b7:ad:a1:cb:41:61:95:
90:87:f9:ad:44:c6:99:b7:d1:d3:cc:2e:5e:25:e8:70:12:0b:
15:89:0f:46:f2:1d:c6:cb:86:3b:f6:ba:ad:1b:ca:e7:ac:3e:
93:43:f8:98:a5:33:58:a8:3a:38:ec:5c:24:96:41:de:2b:93:
e7:1f:59:9c:4d:47:aa:d6:e8:81:99:af:6d:8d:a0:fe:c5:0f:
24:32:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:28 2025 by rpki-client