Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: 1FcjaUXpO+l3IXvQaZlmJjrnLCM+XoKqoIV904sxxgE=
Subject key identifier: 3D:F8:01:26:4C:CD:60:DD:C8:CE:79:8B:DA:C3:09:BC:97:D8:97:3D
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 0197B74546E667E555DECFCE521645708103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 0387
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: ETyTejK/FzDc/lUWg0ozeCGE/31HvEfwB0+mAAQ92Xw=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:46:e6:67:e5:55:de:cf:ce:52:16:45:70:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=3df801264ccd60ddc8ce798bdac309bc97d8973d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:18:a3:c1:3a:6b:68:2c:cb:34:e8:ea:b3:0c:
20:60:0b:c8:03:6d:34:85:30:89:f6:b1:15:62:d4:
81:e9:96:1a:89:93:c9:92:73:9d:36:d0:cc:9e:99:
61:b9:db:77:2a:e4:dd:92:73:cc:fe:cb:cd:86:13:
b1:62:a1:1b:73:aa:a1:cb:17:3d:3a:e0:1f:a7:df:
26:97:ba:d0:e0:bd:d8:20:9c:66:35:ff:54:37:02:
b8:46:b8:90:26:9e:9c:d3:8c:48:ed:37:59:61:4b:
8b:26:6a:ef:b6:33:10:6a:de:6b:ed:b3:71:b6:41:
b2:ee:cc:08:9f:1e:d7:fe:ea:35:f9:83:04:c7:dc:
40:c6:d9:ac:60:87:e2:ad:52:b9:72:88:d3:85:f7:
cc:9a:3f:be:ce:24:7f:89:84:d6:e7:67:1a:bb:9f:
6f:c9:48:7a:54:b6:e7:3c:97:c6:a6:ea:ce:6a:d2:
24:2b:b7:30:32:62:38:50:44:3b:04:7b:94:dc:a2:
fe:04:db:98:85:1d:cb:55:e9:99:29:6a:48:9f:f5:
00:94:30:5c:be:35:11:ea:64:b1:3f:b7:a5:07:a1:
21:15:8e:c2:ca:f5:e1:35:c4:f5:52:68:c6:d7:7c:
c5:d7:54:e0:4c:af:1c:b7:b3:c2:a4:9d:06:45:19:
65:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F8:01:26:4C:CD:60:DD:C8:CE:79:8B:DA:C3:09:BC:97:D8:97:3D
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:84:1e:7d:3c:c2:0f:f6:b9:54:35:a0:50:a1:71:ce:c2:8c:
91:41:58:62:71:ee:41:4c:8b:59:fc:5e:a1:1c:59:04:1a:2c:
0b:ea:a3:c0:ff:19:f2:ea:c3:18:4d:dd:6f:54:62:81:c8:ba:
ef:7a:b5:f3:e0:98:41:bc:90:b6:36:a3:c9:dc:11:28:9f:be:
4f:eb:8b:6b:39:d3:74:52:43:be:99:f0:81:13:d6:b6:45:f8:
b8:d2:1c:fa:21:52:a4:44:dc:36:ff:57:84:05:31:1b:7b:70:
0a:4f:47:30:c4:14:1d:09:cb:4b:f3:b6:75:f1:84:fa:d1:b7:
f4:25:14:80:81:35:6a:17:f8:72:cd:44:a0:dc:7d:96:09:92:
49:1c:f0:0a:f2:c9:07:0f:19:24:f7:a2:04:93:25:56:98:2e:
3c:a6:7f:38:2b:b5:dc:c9:03:2f:32:8e:8e:69:6f:f7:1c:48:
9c:fd:a9:12:7a:d9:1c:0f:f3:c3:07:95:d1:59:fd:c8:c4:3c:
34:c5:35:78:a4:2d:bf:9e:9f:d7:d4:fa:51:ad:a9:6a:4c:50:
fb:5a:1a:ea:1e:fc:fc:34:33:f7:c1:57:04:12:5f:da:7d:1d:
fd:7a:e6:55:d7:6e:ea:7c:b6:ef:73:8e:15:6a:d5:c8:07:c5:
be:f4:bc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:25 2025 by rpki-client