Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
File: WsPivbYyltXw86_pW9FUURelsUk.mft (raw, json)
Hash identifier: geWSybPYYLEdgjeT2aBUCDCfJ+wLlVKQkqYqrmiflfg=
Subject key identifier: 05:32:A8:48:AF:3D:36:D2:75:2F:97:66:05:DC:07:C3:35:52:FB:1B
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 0197B7EA84776F16FC6C1B20117D24EA4454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
Manifest number: 0FED
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: WsPivbYyltXw86_pW9FUURelsUk.crl (hash: rhahcJm8yTeuFoe1jJ2FQPcb2ymR/4qdlI/kvxAd4ww=)
2: Y1iDW0v_VjcE4OMZE6xW26RRBS8.roa (hash: +eewpgaXa+H5fZW2StNgdbfGXtL6pcCIZkhxs3pPHow=)
3: _3l5IDn3xoKCx9gk6CDmJc9PemQ.roa (hash: tAGS+HxIOTgQB55lROqPB0hTI4bw3qpbmFTzCC9BoS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:84:77:6f:16:fc:6c:1b:20:11:7d:24:ea:44:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=0532a848af3d36d2752f976605dc07c33552fb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:cf:71:5c:08:de:e6:d6:a4:9a:5f:3a:d2:
5f:bc:aa:ec:40:ca:f2:15:0c:26:32:b4:ea:dd:f8:
9d:5c:d9:7b:16:b1:39:1d:be:d0:c3:68:f7:ed:8f:
bd:bb:93:4e:f2:cf:cf:e2:6d:45:1e:3a:fb:37:55:
23:1a:6a:14:89:33:a3:75:44:8e:cf:84:88:87:71:
32:34:45:e8:cb:e3:7b:94:73:f0:97:44:f6:06:66:
f7:8a:eb:58:64:59:ca:0c:f9:25:5f:4b:75:e3:13:
8b:9c:f9:d6:b4:e8:5a:a1:0d:ce:9c:f0:1d:91:3f:
fc:3d:f4:f1:ed:7b:3f:d4:2c:c5:2b:9f:7a:36:1e:
73:00:0c:75:0b:a9:d9:aa:38:d5:15:84:c6:82:99:
c3:42:08:5a:c4:f1:c4:4c:bd:70:99:65:7d:fa:27:
ad:15:1b:9b:86:98:ed:e6:04:a3:d3:47:00:46:d6:
25:2c:fd:18:d5:02:0d:a4:c9:a7:a0:84:d9:b7:4b:
a3:49:85:9f:e3:74:96:a5:09:bd:25:3c:a1:95:6b:
7f:a7:36:e2:fd:f7:d5:07:74:f8:8b:65:9a:1d:4c:
2c:ac:00:f9:41:20:ac:e1:9a:4f:0a:f3:a4:37:f4:
5a:c1:b6:0a:5f:fe:1e:fa:d1:f6:83:14:cc:e6:d9:
bd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:A8:48:AF:3D:36:D2:75:2F:97:66:05:DC:07:C3:35:52:FB:1B
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:92:27:0b:21:d6:11:47:ca:3e:4c:44:b1:3d:3e:70:0a:52:
8b:46:e1:57:5f:05:d5:b5:ae:c4:2e:08:95:b4:c8:39:92:b6:
b4:ca:5c:bf:cf:51:f8:9c:4c:1f:d6:0d:57:3e:d7:ce:54:0a:
52:14:ac:e9:91:09:84:d5:da:75:d0:c0:21:a0:44:a3:1b:04:
29:26:01:d8:2d:a6:2e:d2:93:3e:d9:15:ea:ea:bd:c3:69:c2:
1b:56:d8:74:84:87:30:57:ac:11:f1:ff:2d:a1:87:67:66:5d:
81:36:de:dc:2d:d4:01:bb:b2:d3:79:ad:af:bd:27:70:e6:12:
3d:c5:5a:f1:09:24:26:d7:ab:b0:eb:f8:74:47:2b:0a:5a:a2:
53:14:16:8e:09:90:26:ea:5f:31:40:99:76:28:86:0a:4f:80:
28:ff:bc:0e:61:b6:d0:b1:0e:ed:f5:15:1f:5c:af:de:06:bd:
ee:3a:2e:ab:80:e1:4b:33:0f:f2:4b:36:c0:a0:d5:68:6b:c0:
1f:12:23:36:7f:4d:c4:84:20:20:56:5f:62:fc:72:95:d9:68:
99:cb:63:a4:e2:82:c7:2a:58:09:62:cc:1a:9c:56:67:60:28:
02:44:ad:bb:83:9a:af:e5:1f:50:3a:4b:16:21:43:56:a9:40:
11:5a:c0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:53 2025 by rpki-client