Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier: 8hlwUycbu0A31CiW715sySawfgnxbuK6/rsNBfh9qPQ=
Subject key identifier: AD:58:30:A3:8B:CC:C4:0F:A7:F4:DD:FB:22:3A:29:3F:D3:22:65:BA
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial: 0197B6A1EABBCBB693169C7F0554A44DF5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number: 15C7
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=)
2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=)
3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: i6vdy7tpPqPqYMhgNEuGuyhsavzUNMjs4s9fB21+SQk=)
5: g81BDZuaFjsKwaBqFnyHLcFPLZs.roa (hash: jSl9q0mLuOCF9O2+fEMHTTPvVPdoA/bqHU0pF52USoE=)
6: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
7: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
8: p4_2wcOawugaSj43rAVSkkmPf8k.roa (hash: Y3pbjD0B2GwO/FNWMPam+BoxaGEQd85k797hs416lA8=)
9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ea:bb:cb:b6:93:16:9c:7f:05:54:a4:4d:f5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=ad5830a38bccc40fa7f4ddfb223a293fd32265ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:a8:bf:0c:d8:bc:e1:7e:f5:6f:b6:8d:f1:
07:98:bc:e0:07:73:7c:10:57:a1:d5:4e:6a:b0:a7:
d5:32:13:ef:d1:b8:86:bc:f0:d8:9f:93:50:aa:e5:
39:41:40:13:ba:da:cb:f1:d7:59:34:53:86:a9:db:
6b:c3:03:eb:38:d1:22:94:bb:c7:77:5a:40:8e:ec:
20:9d:91:93:9d:e0:a8:eb:2d:80:13:cc:63:a7:d1:
f8:2a:35:b6:88:96:e9:c4:bd:ed:82:c4:f3:22:c1:
30:df:7c:35:e7:af:20:43:0c:18:e4:b7:97:b8:94:
da:93:23:d9:40:52:8c:48:34:98:27:11:ad:1c:8f:
68:19:c5:1e:ae:36:a3:c1:d9:8f:74:6e:5c:c2:18:
79:1b:ba:6b:b9:2e:5c:9c:aa:4e:d5:00:c6:17:45:
22:5f:90:98:9d:fb:1e:df:32:e6:8a:be:d1:e5:0d:
e1:46:07:30:25:77:bd:ef:b2:4b:08:d2:20:45:53:
46:ce:0c:e7:76:d0:9a:b0:4f:7f:2c:04:e4:04:6a:
0f:42:e3:d1:1e:2d:90:61:8e:d1:f1:13:4e:e1:4a:
a7:82:e2:d9:68:8b:99:12:44:6e:0d:79:b3:21:10:
30:75:6d:2e:9e:f6:07:60:3f:1f:6c:9f:a4:8b:bb:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:58:30:A3:8B:CC:C4:0F:A7:F4:DD:FB:22:3A:29:3F:D3:22:65:BA
X509v3 Authority Key Identifier:
keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:4b:5c:56:2f:0a:a6:5c:c5:1f:5f:38:5d:0b:06:e9:ee:23:
ec:51:67:7d:56:4e:18:db:aa:9b:d5:72:ea:42:d4:15:7c:a8:
61:16:c3:c5:48:91:88:d5:4d:fb:3c:c5:d6:8e:6e:cf:3d:21:
25:a1:11:94:2d:81:bf:ba:21:ae:75:f0:8e:e1:17:e6:36:f0:
1c:55:fc:09:e6:8c:59:19:ce:c8:31:59:f1:74:1a:ca:80:41:
3f:39:06:0d:8a:c8:d6:2b:dc:c1:a8:f3:3b:1b:e8:c9:36:35:
e6:dc:42:b3:d9:f3:44:a7:dc:b3:5d:f3:d2:0e:73:e0:20:df:
c5:95:57:34:4f:d5:18:c7:72:eb:65:88:6f:ee:bc:71:a3:aa:
09:c5:ed:29:4e:d6:3a:96:d6:f7:a2:16:78:e7:d5:ce:79:46:
05:79:49:83:ff:89:69:e2:3c:60:ba:1b:b4:96:f6:4b:a4:34:
c0:29:51:00:ca:1d:09:3e:c9:7f:fd:53:b4:15:c9:56:e3:67:
2b:c0:f3:e1:1f:3d:3f:82:bf:4d:6d:08:23:88:a7:47:c2:de:
d2:c0:9b:bd:d3:d8:b6:5d:92:cd:aa:8d:c9:3c:df:ba:ba:89:
67:79:db:52:22:86:64:ea:5c:93:ad:3e:92:61:81:75:69:58:
9b:b5:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:17 2025 by rpki-client