Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
File: Wh1F7dft3pqLhipzmtqOeLfcgrk.mft (raw, json)
Hash identifier: y/FXQmkDzX/gGE7TEL0NItSm9S2aTqRwLzSElHQF+7A=
Subject key identifier: 89:F5:14:43:F7:33:24:EE:D5:B8:6B:FD:4E:A2:CB:EE:F1:B5:38:56
Authority key identifier: 5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
Certificate issuer: /CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Certificate serial: 0197B5FC31A8C93BD367808591AE87DC27EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
Manifest number: 0614
Signing time: Sat 28 Jun 2025 10:01:33 +0000
Manifest this update: Sat 28 Jun 2025 10:01:33 +0000
Manifest next update: Sun 29 Jun 2025 10:01:33 +0000
Files and hashes: 1: Wh1F7dft3pqLhipzmtqOeLfcgrk.crl (hash: uFABampraUj5s3TzI1ApWUdX/K+0G5F8Xq1TkQeJDjY=)
2: zfiw5E-qnyxqvOsxLYX9MrFyy84.roa (hash: 1/skm9ZEWKwE055qHT9FApOuyUCgE73YdLdPkqaA0Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:31:a8:c9:3b:d3:67:80:85:91:ae:87:dc:27:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a1d45edd7edde9a8b862a739ada8e78b7dc82b9
Validity
Not Before: Jun 28 10:01:33 2025 GMT
Not After : Jun 29 10:01:33 2025 GMT
Subject: CN=89f51443f73324eed5b86bfd4ea2cbeef1b53856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1a:24:c8:63:92:ca:2c:24:43:ba:85:89:b1:
87:73:4d:43:b9:84:b5:5b:9b:28:e2:ed:df:31:1f:
d9:5e:74:46:59:c3:c1:69:24:ba:25:2e:02:2c:38:
b9:54:cd:f4:9e:c0:3e:cf:dc:99:a0:e5:c1:ff:26:
08:8a:ce:02:77:b4:ce:b5:7c:fc:c2:8a:9c:76:80:
f3:e5:b1:54:43:c2:40:1e:68:23:a9:ea:0c:b4:2f:
f3:8a:32:c0:96:c4:d3:a2:81:50:d2:a7:44:31:6e:
94:99:ad:b2:dd:bc:43:af:57:e0:24:ce:f2:e4:c5:
ff:48:e4:ed:44:32:f4:b6:3b:d8:97:2a:47:3e:21:
e9:08:d0:e8:8b:70:9e:a6:80:b6:95:fa:ee:15:63:
e7:48:ae:79:d2:7b:7f:8c:e0:c6:42:0a:40:b5:61:
72:2f:b2:1b:b9:be:f8:be:6b:36:0a:b1:a6:56:a6:
20:b9:b2:ca:94:44:5e:9a:44:67:cd:5b:78:4c:6a:
85:b7:8e:a9:0e:06:a0:fd:cd:e9:d8:74:30:bb:f2:
b3:75:c0:83:97:d4:9a:12:84:78:c5:22:bd:a2:d9:
ec:96:ad:b6:c9:1f:c2:0a:c9:c7:b1:1a:4f:6f:ee:
f0:d9:a5:f7:bb:3f:7c:fe:ae:23:64:e0:79:0c:db:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F5:14:43:F7:33:24:EE:D5:B8:6B:FD:4E:A2:CB:EE:F1:B5:38:56
X509v3 Authority Key Identifier:
keyid:5A:1D:45:ED:D7:ED:DE:9A:8B:86:2A:73:9A:DA:8E:78:B7:DC:82:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1F7dft3pqLhipzmtqOeLfcgrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/373eca-ca43-4d62-a10f-bc7fc719d31b/1/Wh1F7dft3pqLhipzmtqOeLfcgrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:df:fd:a1:32:44:73:7d:69:20:80:73:34:e7:cb:16:6d:dd:
eb:6b:d8:77:e9:09:b6:30:a2:7e:33:4e:8b:fd:74:52:55:7e:
03:c8:05:8d:5f:ab:24:31:8c:ca:7a:57:ed:e6:18:34:a7:e1:
95:7c:f5:95:77:dc:b6:96:26:4b:5d:32:db:6a:46:d9:c1:de:
6a:d5:60:1e:11:c5:be:ca:59:6e:c7:33:f8:0f:65:a4:6c:2c:
e5:0c:aa:dd:09:aa:38:72:09:2b:9f:18:d9:26:68:20:76:48:
8f:a6:ff:9d:53:00:08:28:f3:54:82:55:ae:60:8e:61:14:2c:
07:e7:9d:aa:1b:df:63:31:8c:5c:c4:31:ac:5b:fc:2b:2a:2e:
71:74:e9:0c:14:82:3b:8a:53:ce:d0:4e:96:50:4b:b5:d2:cb:
15:3d:1e:3f:e1:c6:88:92:83:71:c9:6b:c2:f2:74:b0:b7:ed:
e0:ef:ce:4a:56:b5:2c:28:06:e4:13:d3:50:13:fc:29:d0:93:
46:fd:03:07:fd:19:02:01:ff:0d:58:68:d8:e6:78:64:63:c2:
eb:c0:40:28:5f:b9:4c:00:bd:44:df:0f:04:15:af:c7:e5:c0:
29:3b:af:20:2c:b0:39:14:e8:3e:4e:30:ac:52:6c:ae:72:5f:
57:85:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:04 2025 by rpki-client