Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File: WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier: EHVtXWuA7MC0RaB5lYwXFNURPZxroHlyEDI/T6ZMwTg=
Subject key identifier: 70:50:F0:72:6F:F7:46:78:54:D2:4E:E0:AD:BB:A2:A5:87:8E:72:0A
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial: 0197B77C789D4E883F87635F3DB7B522D77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: 5-_m5sx2pOrKBnn6vsQwme9LIWs.roa (hash: h/D8Ki0B/ZgXWanH4BZ9jNHNZb1ZLuVPvKx+u3l030A=)
2: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: 4bDEMBwgyBXpzJ5kBRTdoXISz7noRo4nE4s5412kByE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:78:9d:4e:88:3f:87:63:5f:3d:b7:b5:22:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=7050f0726ff7467854d24ee0adbba2a5878e720a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:80:6f:23:86:5b:01:4a:f1:5d:6d:29:2d:
da:ee:b5:6f:c9:4f:e0:a2:1c:a1:13:db:6a:18:ae:
34:5b:ca:ef:eb:18:4a:27:88:ed:97:3b:37:b5:02:
3d:bb:fc:9d:32:72:0e:3b:45:a9:7d:27:62:1b:82:
10:cd:0b:97:fe:36:d5:65:05:bf:f0:00:ce:7b:ee:
a1:04:0c:2c:b1:f2:d8:9b:6f:95:57:0e:f0:c8:d9:
6c:90:d5:83:f9:a4:be:2d:20:82:59:87:3a:45:72:
1b:ef:bc:7c:bb:e9:76:41:3d:f2:a0:b4:91:14:42:
4d:7d:cf:1d:ff:c0:d8:cb:e0:65:e6:7b:16:70:3d:
7c:31:28:ef:b0:f8:49:b9:a2:e6:59:2c:d9:e6:3c:
03:84:dc:c9:8d:21:46:01:59:95:68:da:41:cc:ab:
e2:19:1d:f2:5c:55:6d:83:f2:81:5e:e6:6d:68:bc:
b5:da:a9:fe:96:5e:46:d2:3f:51:9f:11:de:4d:06:
1f:c7:84:f0:b2:52:83:ab:1a:5b:96:3e:58:0f:04:
5c:a2:fa:18:21:31:46:23:27:66:26:6d:5d:7e:0e:
09:45:0b:bb:5f:1e:47:b0:94:a4:54:11:2f:38:7a:
66:07:f8:1e:84:c3:99:99:78:70:de:9d:84:bf:0a:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:50:F0:72:6F:F7:46:78:54:D2:4E:E0:AD:BB:A2:A5:87:8E:72:0A
X509v3 Authority Key Identifier:
keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ba:6a:a8:c0:af:b0:93:66:63:94:a2:85:50:84:e7:b7:4d:
59:09:72:c9:f1:31:86:e8:58:14:5f:03:d3:8f:2c:e6:a8:d7:
80:93:29:90:ef:17:69:8f:b9:9e:93:d7:ad:90:94:ca:10:51:
18:e0:cd:b3:ee:1f:e6:f2:75:c2:88:c2:b3:8f:c6:47:ff:a6:
36:89:4d:8d:80:d7:09:57:1e:12:0c:7e:00:90:e0:98:0b:03:
e4:2a:77:ed:2f:27:17:b4:5e:71:77:65:b8:1d:ed:69:ef:b7:
4a:98:9e:de:f8:7c:58:3b:fa:0e:db:27:05:4c:34:15:df:57:
77:f5:75:f0:2d:74:54:0c:ab:b3:00:c8:71:3c:b7:0e:ea:8a:
a1:95:a5:d2:e2:51:ef:7d:81:0b:a5:9f:0a:95:ce:c4:92:3e:
2f:99:8d:ee:95:d7:80:8d:26:3c:1b:06:20:2a:ac:a9:65:51:
ea:4f:85:23:7e:63:79:f9:5c:20:63:fd:89:d1:10:c6:bf:e2:
7d:54:68:cc:c5:4a:11:00:19:82:88:73:2a:d9:2f:2b:15:29:
3a:00:1a:dd:42:72:f8:96:e0:ff:78:fb:83:9f:24:5c:e6:af:
f3:1b:bb:7a:1f:8c:6c:0e:92:66:71:c0:c1:89:4d:c2:5a:0b:
cd:3e:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:22 2025 by rpki-client