Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json)
Hash identifier: d28ORmcu+Yr1NOaXDQBvtDxGsdsh6uDaTe2p6fSR/Dc=
Subject key identifier: AA:14:73:07:F8:A7:9D:F1:BF:29:2A:63:1C:52:C1:A0:11:23:9C:5B
Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c
Certificate serial: 0197B7EAD1B063E73F79E1592FDEE7B5BE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:49 +0000
Manifest this update: Sat 28 Jun 2025 19:01:49 +0000
Manifest next update: Sun 29 Jun 2025 19:01:49 +0000
Files and hashes: 1: 1-FQBZTT5afKyG6FIAOC0DP_Gyes.roa (hash: QUXwHR9U/j2PM2tc+oqu+jlOONy/4+OVBz6LYmOZ3uc=)
2: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: 8B3v/5nmtFBxU5u6xeUJVFzh02XlL87LWBfZqenPngc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d1:b0:63:e7:3f:79:e1:59:2f:de:e7:b5:be:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c
Validity
Not Before: Jun 28 19:01:49 2025 GMT
Not After : Jun 29 19:01:49 2025 GMT
Subject: CN=aa147307f8a79df1bf292a631c52c1a011239c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:48:56:db:70:93:d0:a5:f2:58:6f:e9:bd:
77:c6:ea:2c:80:ad:da:3e:cd:92:ec:ae:0b:7f:1c:
f8:96:c2:68:88:9c:e6:72:f6:d2:67:9d:5b:41:2b:
db:62:c5:a2:bc:f1:09:88:70:8d:1b:fd:b3:7c:9c:
75:6c:60:fc:b3:42:81:ab:f0:ea:92:32:be:42:99:
48:c6:b6:d4:97:28:d4:54:27:6d:28:9b:04:da:cf:
61:2f:dc:11:26:4f:82:3e:17:dd:7e:1a:01:cc:55:
5d:80:6b:96:e7:f5:46:e4:d6:1c:b9:3c:a7:f8:00:
a6:91:87:39:86:e3:3e:18:fe:c8:e7:42:3c:68:3b:
a5:e7:4a:40:44:3b:d1:b6:f9:d8:65:fc:37:3d:41:
f9:5f:41:bc:b5:70:7c:58:09:14:e0:b0:05:95:03:
28:44:49:41:d2:93:d9:dc:04:d8:2c:a0:f3:d4:ea:
ae:d4:fe:c1:ce:91:df:43:27:cc:4f:4a:72:4b:e8:
ba:ef:3d:97:77:7b:7c:9c:62:79:5d:4e:03:d5:fe:
90:b9:9f:4f:e9:47:45:04:11:e5:ae:0e:6c:4f:00:
e3:9e:34:a7:38:52:f3:b9:95:f1:35:09:20:90:15:
ab:c2:51:8e:1c:1e:fe:dd:65:05:90:4d:77:45:7f:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:14:73:07:F8:A7:9D:F1:BF:29:2A:63:1C:52:C1:A0:11:23:9C:5B
X509v3 Authority Key Identifier:
keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:19:ae:45:11:14:bc:2f:b1:fe:68:3d:4c:95:6f:ab:61:e6:
aa:78:50:5c:39:c4:60:38:6c:fb:28:9a:9e:14:1d:36:b6:c3:
b1:9c:71:c4:7e:21:da:c8:97:df:ef:42:8f:23:3e:51:45:05:
dc:3b:41:99:ce:a6:44:9b:ea:86:db:04:cd:ae:5a:f0:b1:92:
3b:c5:e0:64:03:82:45:b8:98:1d:8a:50:13:f5:bd:94:2c:ef:
e3:4f:f5:d9:a5:b6:0f:92:ab:bb:f4:aa:8e:48:74:45:26:c8:
b4:ef:14:f0:c0:02:39:4b:29:0c:2a:b1:1a:e1:50:29:c7:4b:
ca:92:10:b1:69:4d:6f:c8:c4:85:ab:70:f8:ef:31:de:dc:f6:
e2:5b:be:a1:14:89:05:db:e3:fa:57:11:b8:e1:3d:87:bf:01:
46:07:39:61:69:bd:a9:9f:cb:76:6f:b7:e0:6d:39:3c:a9:b1:
d3:80:e9:a5:fa:4e:76:6e:46:33:e0:4c:79:cb:99:58:f3:3a:
27:5e:c2:d3:ea:cc:28:f5:37:70:1e:e1:32:54:f6:c8:55:f7:
bf:11:b9:f5:8b:d5:56:f5:30:32:08:3c:0b:4f:f6:52:ed:b7:
b7:a9:d6:b3:59:20:17:31:36:44:4f:26:b7:f0:50:7d:2f:2a:
09:cd:77:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:55 2025 by rpki-client