Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File: WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier: XJhDF6DuH24/JK9ihU1dDvBOtrJt1vQ69y1w8Yfkc0k=
Subject key identifier: DC:74:14:73:96:8A:6C:16:1F:CC:C2:B0:D3:DB:B6:F4:18:94:D9:0E
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial: 0197B5C50F64229B79A260F28B8B95287C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 09:01:19 +0000
Manifest this update: Sat 28 Jun 2025 09:01:19 +0000
Manifest next update: Sun 29 Jun 2025 09:01:19 +0000
Files and hashes: 1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: Io6vra1uVrCrFF5W9rHxnJJwAYsOoxxBV6jS0n+I/7w=)
2: vt15ABy3zJP47x5DikC4lY7LNe4.roa (hash: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:0f:64:22:9b:79:a2:60:f2:8b:8b:95:28:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Validity
Not Before: Jun 28 09:01:19 2025 GMT
Not After : Jun 29 09:01:19 2025 GMT
Subject: CN=dc741473968a6c161fccc2b0d3dbb6f41894d90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6e:f5:a7:48:53:6d:28:2c:bf:71:3d:6d:f4:
34:56:c2:19:e1:09:aa:03:71:08:c5:4c:d0:70:32:
15:45:4c:5b:9a:9c:0c:f7:6c:e0:31:72:d6:e8:e5:
ec:8d:dd:76:12:b3:79:07:75:58:86:df:85:ff:eb:
d2:14:5f:5e:6d:79:1c:44:38:71:32:d7:ea:bb:e3:
5e:97:3a:bb:73:58:72:7e:cc:bc:58:06:03:d0:3f:
68:67:d4:a3:7c:ab:43:2a:93:14:90:4b:a8:98:e6:
e3:eb:5e:67:b8:cb:22:f1:3c:40:04:23:7f:7a:fa:
a1:a6:ff:e1:e8:08:47:bf:c4:04:51:87:1e:3a:10:
5c:5e:6f:7d:dd:f1:46:25:a1:cc:fb:4c:aa:32:57:
4e:8d:3f:c1:a4:c0:6f:81:52:bb:e5:d8:9c:c6:2b:
d6:48:3e:89:08:fb:7a:90:f5:4d:84:d6:0d:08:86:
5c:47:5d:ea:95:fe:f8:6e:96:4c:6b:f3:82:be:30:
a4:b7:2f:95:97:9e:00:1e:6d:94:c5:ed:a3:70:0e:
29:d2:ff:11:79:13:c1:81:81:48:02:b6:73:40:76:
d4:00:45:d4:d4:7e:4d:8e:77:11:1f:36:14:70:ca:
cc:d0:e8:6a:a3:01:51:28:34:9b:de:bf:39:bc:86:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:74:14:73:96:8A:6C:16:1F:CC:C2:B0:D3:DB:B6:F4:18:94:D9:0E
X509v3 Authority Key Identifier:
keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:30:32:5c:cc:82:70:46:c0:a9:58:5c:5f:3a:27:f4:b3:
9a:03:6e:e0:3c:76:9f:7c:eb:bd:31:2d:1a:91:53:41:a8:e6:
af:f0:f2:13:9b:b8:4a:1e:89:31:81:2c:e8:76:33:8c:6a:f7:
55:b3:88:f2:0d:5c:e3:cb:19:76:68:b1:88:79:3f:fa:e8:8d:
53:c4:66:93:10:94:2b:a8:df:ca:9f:fb:70:5d:81:16:e9:0c:
f7:bc:06:0b:d5:58:f6:f4:67:6c:f6:d1:d1:c9:36:04:98:8c:
6b:72:b9:bd:67:33:de:28:57:f8:3d:60:5e:dd:8e:bf:bf:c0:
a7:ff:a1:cb:bd:08:13:9f:32:47:89:1f:44:f2:fd:95:32:1f:
25:39:43:21:bc:47:db:a5:91:8d:a5:83:a4:bc:69:9f:0a:0a:
84:90:17:05:f8:3b:cb:54:3f:d2:c5:14:90:fb:b5:4a:4d:9a:
11:0f:33:32:14:75:e8:50:06:a8:4c:78:71:f3:2c:06:b5:0d:
62:ee:a8:12:d0:07:26:27:30:81:8c:9a:b4:67:f1:61:fa:b9:
0e:f8:c9:01:a1:5a:f5:4a:f1:13:22:3f:a2:d1:11:6e:02:ed:
e0:77:83:f1:e6:3e:75:47:3e:d0:fd:65:21:42:4c:04:57:ec:
a6:93:1a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:43 2025 by rpki-client