Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
File: WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft (raw, json)
Hash identifier: mIOWSSEvTwUCPjH2dT+PMPKJKWlZkgO6V09bT48bvxs=
Subject key identifier: 58:C3:7D:59:DF:17:D5:A4:96:2A:54:9C:E4:A4:B1:28:1D:B3:3E:A5
Authority key identifier: 59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
Certificate issuer: /CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Certificate serial: 0197B9D8E34385D9AE5DD81ADBBACD67C005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 04:01:28 +0000
Manifest this update: Sun 29 Jun 2025 04:01:28 +0000
Manifest next update: Mon 30 Jun 2025 04:01:28 +0000
Files and hashes: 1: V-65NroNLvpJ9Twbo3fHxbLWAEE.roa (hash: NtuVubfew3le+olU13mvFJqg5qy010/3pkiRpLBMMVI=)
2: WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl (hash: WX3TgaFDr8RCpzcKJOmM/sFEzId79ReG+sU312oXGAo=)
3: k0eS8GbpTFpaVPi3K9_CZDFOaPU.roa (hash: Ej4uiaS/aPM289NUT10w3nroNfgE/+kc/Uq0qTQREqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:e3:43:85:d9:ae:5d:d8:1a:db:ba:cd:67:c0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c3cc99899373c85974f01c9cd7aa057ab97fab
Validity
Not Before: Jun 29 04:01:28 2025 GMT
Not After : Jun 30 04:01:28 2025 GMT
Subject: CN=58c37d59df17d5a4962a549ce4a4b1281db33ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a1:92:0d:12:12:55:f0:00:eb:e2:af:c1:95:
72:da:27:db:43:94:a1:fe:86:e5:4b:82:93:cb:0f:
00:aa:5d:23:f3:ce:7a:33:95:95:7d:9b:19:bb:89:
13:6e:c4:3a:04:88:6c:d1:d2:50:30:61:42:3a:2c:
c0:fe:af:02:4f:c0:a9:a0:85:09:7f:32:9f:36:cb:
7c:46:2f:2c:f2:f1:c0:1f:8c:73:e7:12:41:ff:92:
c6:97:d7:f7:0b:15:5f:47:fc:84:0f:0e:ea:33:46:
3b:17:2d:52:6b:99:02:2d:15:9c:4b:f1:a0:43:80:
7a:f3:18:c5:bd:3e:ca:00:1f:d5:5c:f0:71:27:82:
63:04:e5:4e:37:04:ec:70:b5:50:ec:d3:bb:06:7e:
68:66:af:c4:4f:ec:93:66:07:eb:ca:1f:fa:de:7c:
46:1a:02:bc:90:af:fd:58:e4:40:ca:a8:c3:39:bc:
b4:7c:86:ea:96:75:20:32:8a:f9:9e:cd:22:b0:94:
ab:f4:57:ff:ed:9c:66:5b:b2:48:b1:8d:5c:3c:2d:
c3:08:e7:e2:af:2d:9e:80:6f:ea:10:80:cb:2b:a9:
02:38:e6:74:f1:1f:43:db:2c:68:c8:61:36:26:28:
9b:4a:2f:2f:8c:85:3f:3b:b0:e2:ea:e1:89:61:2c:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C3:7D:59:DF:17:D5:A4:96:2A:54:9C:E4:A4:B1:28:1D:B3:3E:A5
X509v3 Authority Key Identifier:
keyid:59:C3:CC:99:89:93:73:C8:59:74:F0:1C:9C:D7:AA:05:7A:B9:7F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcPMmYmTc8hZdPAcnNeqBXq5f6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/95f051-5e1d-4d36-a593-1a5eb50885ae/1/WcPMmYmTc8hZdPAcnNeqBXq5f6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:38:6f:30:35:36:fe:a3:d8:b7:b5:93:86:9c:cf:4e:95:4b:
cf:e4:43:ac:94:1d:b6:50:a5:2a:d9:c1:07:26:0c:9f:3f:6d:
fc:9b:4e:a3:36:2c:ab:63:67:ff:31:e7:2f:ec:4f:b2:76:ad:
75:7a:b1:aa:65:80:2c:47:db:f7:59:42:34:c1:3d:4f:58:5d:
a7:26:b7:ee:c0:b3:90:ea:18:80:d3:56:e7:d6:c7:6b:bc:cc:
12:03:8c:45:15:e8:36:62:ea:bb:71:fb:2b:96:32:08:58:67:
3c:bd:cb:fa:12:60:0a:fb:a0:62:27:ad:d8:24:b1:2e:b2:e4:
fc:b9:48:91:de:ec:0a:37:62:e8:74:c4:3a:04:59:97:d4:2f:
b2:9f:ef:5f:1d:72:5c:38:d2:4a:2e:6a:91:ac:07:8f:32:9a:
cc:c1:09:11:a5:1b:7d:51:db:35:4d:ac:24:2f:8c:4b:f6:d0:
2b:56:43:6e:5d:96:2c:b5:7c:57:93:ff:13:29:c4:c9:03:75:
a8:43:62:82:34:d3:e7:1c:d9:19:8b:cb:f9:ed:83:f0:56:41:
aa:4f:27:c3:9d:18:16:c9:a7:9c:0a:d9:fe:f1:5c:3c:dd:e9:
74:d4:06:4d:a2:26:ed:5b:4e:2f:d6:d2:1a:7c:0c:ef:4f:7c:
b6:f0:17:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:51:25 2025 by rpki-client