Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier: f0QVD2JC63BuToAeNDDaGNiRVcKiMNQaBpEUtPwhID4=
Subject key identifier: 09:77:1D:74:30:9F:ED:A8:DD:FD:FE:CE:36:8C:EE:C4:02:28:4E:B7
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 0197B6D77691C269DFD7BEB6E83C7EFCE772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number: 093E
Signing time: Sat 28 Jun 2025 14:01:03 +0000
Manifest this update: Sat 28 Jun 2025 14:01:03 +0000
Manifest next update: Sun 29 Jun 2025 14:01:03 +0000
Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: rPsxRW/aESmxq9mpwKWUi0bYDM1QZxeWpXLnx0mt6q0=)
2: zKInD_uJ0MzVuNFZ1nxujfzo5eE.roa (hash: ywKe3EUqcRYUSRMVsCEquUk7tolOVlQ1ahf+CyiEesM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:76:91:c2:69:df:d7:be:b6:e8:3c:7e:fc:e7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Jun 28 14:01:03 2025 GMT
Not After : Jun 29 14:01:03 2025 GMT
Subject: CN=09771d74309feda8ddfdfece368ceec402284eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:70:ee:27:31:0f:1a:80:c4:59:d3:df:24:
fe:3f:f6:dc:d0:e2:b8:f0:10:94:26:4a:35:98:39:
80:58:df:8a:f1:94:8c:25:ee:bd:ac:49:fe:8b:66:
f1:0d:51:77:01:92:32:c1:5c:02:a7:52:c1:91:fb:
df:1d:ca:07:0e:d0:5a:d1:2c:2e:6a:be:21:5b:f7:
44:04:7a:37:b3:fc:93:46:ce:0a:5c:1c:c9:a3:dd:
32:be:eb:bf:6f:d0:0d:85:66:7e:aa:83:98:bd:38:
31:95:7f:3a:2d:cd:99:2b:30:b9:50:0a:2f:4a:e0:
34:26:17:5d:4f:7d:95:b5:a0:38:7c:84:91:18:63:
c1:41:71:f2:9b:b2:cd:dd:25:ab:d2:e5:c7:9c:65:
72:43:a7:83:64:d4:06:08:45:68:24:1d:aa:8c:35:
79:f3:d2:75:3f:c1:10:a3:0b:fd:05:bf:85:d1:fd:
f8:27:23:09:f2:c3:2f:bf:05:b7:93:7e:18:9e:8e:
35:f0:66:25:e0:4a:67:0d:ff:00:53:bf:37:78:6d:
42:f9:76:24:e4:1b:03:85:a8:12:77:5a:de:a5:2e:
6a:47:8c:83:6f:76:c9:c4:95:c6:eb:17:55:bc:b9:
6c:fc:9e:d0:a3:f9:2f:f8:ff:3f:c2:48:2e:9f:3c:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:1D:74:30:9F:ED:A8:DD:FD:FE:CE:36:8C:EE:C4:02:28:4E:B7
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:18:8a:73:0a:50:dc:e6:13:9d:40:3f:50:10:73:23:48:29:
04:73:aa:ab:7f:10:f3:e4:41:cb:fb:dc:1c:a4:03:57:f1:49:
15:ca:62:4f:c5:7a:5c:39:0e:fe:26:83:dc:ca:a1:e7:bf:1f:
41:83:a9:f4:b5:a7:f3:9d:24:dc:74:ee:2e:1f:44:27:1d:a2:
97:4d:a4:39:50:e4:74:4b:14:1f:df:fd:8e:38:cc:f3:3b:7a:
39:8c:e7:93:87:40:db:81:71:5b:f6:9b:d4:90:35:76:5b:11:
cb:4f:69:41:37:1d:3a:3e:82:26:85:a0:99:b7:74:f1:fd:b6:
c8:1b:86:ab:98:d4:dd:a1:47:a1:ab:21:5e:44:89:ec:a7:44:
83:b5:98:9b:07:13:58:4d:91:02:43:09:95:a6:96:ef:4f:0f:
2e:63:5a:aa:de:2f:de:a5:c2:a7:d9:1d:20:2f:d1:58:fd:bd:
01:dc:c5:af:d5:d8:07:85:be:3c:8e:ed:4c:4c:5c:22:29:61:
83:dd:7d:28:ba:b1:0e:b2:35:9d:56:1b:28:fe:1e:ac:0a:ae:
c5:0b:9a:b2:80:0e:30:8d:e0:28:44:69:8a:d5:a5:47:4f:d1:
53:a4:86:0b:21:98:cb:5c:d3:66:26:84:02:d5:ed:f0:e5:3c:
44:ba:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:48 2025 by rpki-client