
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
File: WzgltIs1me_6oLyBqN3bmPHYAsQ.mft (raw, json)
Hash identifier: AxT6UyVMEZg6NIr5aFeSY9bEEk+r0lXV33RAaLWrUGM=
Subject key identifier: BC:7B:11:BB:AE:79:11:37:17:23:9C:72:93:FE:00:55:EB:33:C6:48
Authority key identifier: 5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
Certificate issuer: /CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Certificate serial: 0197B70EAE7D74F717725AC5004D4614378E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
Manifest number: 1546
Signing time: Sat 28 Jun 2025 15:01:22 +0000
Manifest this update: Sat 28 Jun 2025 15:01:22 +0000
Manifest next update: Sun 29 Jun 2025 15:01:22 +0000
Files and hashes: 1: WzgltIs1me_6oLyBqN3bmPHYAsQ.crl (hash: JRJQvt5q1yXhOUeL+ZN25AXJ0/mLi1OMKEA8I8P+qzA=)
2: iiZidHMAHkbcf8XyOTt3Z_vw0jE.roa (hash: xKnilsXqPSaJ4FjR+VlNoOzanS4pqyzg7Ofj3A9rVOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ae:7d:74:f7:17:72:5a:c5:00:4d:46:14:37:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Validity
Not Before: Jun 28 15:01:22 2025 GMT
Not After : Jun 29 15:01:22 2025 GMT
Subject: CN=bc7b11bbae79113717239c7293fe0055eb33c648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:d2:75:68:c7:70:20:5e:61:fd:29:15:ac:
ae:29:7d:07:5c:da:bb:de:d0:1c:d3:e8:bd:da:a8:
e6:e3:52:b1:3e:a4:64:50:3e:0f:f3:85:6c:67:76:
a7:22:da:6a:56:76:54:11:2b:f5:9c:bc:34:4d:ca:
e1:80:ee:72:51:95:f8:09:5f:d7:14:6a:d5:e7:18:
47:f6:60:f2:fe:78:61:9f:09:a7:a5:f8:f5:42:8c:
b5:0b:0f:8e:82:1b:80:6a:62:0e:c7:42:74:78:7a:
3a:27:57:2b:a2:13:d3:6b:49:01:e0:76:01:96:e1:
38:9c:4b:86:9c:dd:f1:cf:1b:c3:59:3a:97:b0:f2:
fc:2b:a3:d2:50:e8:d8:12:40:f4:03:c3:b0:3b:10:
2f:b4:c2:76:c4:ce:b5:0c:4f:e9:ff:ba:b3:c5:7f:
1c:30:3f:5d:46:01:31:a4:ce:fd:ce:2f:c6:b4:4d:
f6:af:2b:84:b0:23:4d:a5:b5:de:f1:10:d2:da:3f:
7f:f9:31:c4:a7:15:7a:b4:88:17:68:07:59:6d:7f:
8c:7e:d0:eb:f7:a7:02:89:c6:85:22:22:62:90:27:
2d:1e:d2:46:99:d8:86:2f:0c:11:90:c0:a7:ab:8d:
52:a0:5e:d5:c1:db:b6:29:51:39:c1:1b:11:d4:25:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7B:11:BB:AE:79:11:37:17:23:9C:72:93:FE:00:55:EB:33:C6:48
X509v3 Authority Key Identifier:
keyid:5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:00:fb:96:9f:72:22:a9:a4:bd:eb:c6:68:63:8f:3e:de:4a:
26:f0:4e:da:dc:60:08:52:ab:00:1c:34:6d:34:d2:d7:f1:6f:
43:e6:c6:25:31:6e:83:78:df:77:ae:7e:e8:36:78:9b:01:2a:
98:be:f4:11:ea:ac:0b:8d:26:86:25:71:10:e4:bc:fb:2b:a9:
0e:99:65:c9:81:eb:8b:44:34:ac:88:7e:cc:0e:aa:ad:2f:98:
d0:c6:38:4a:15:28:c2:6e:10:dd:d1:13:76:14:f3:f6:97:f8:
58:ae:88:cd:79:ef:42:62:bb:68:af:a6:8c:62:22:9f:92:08:
46:dd:03:24:dc:7f:7d:cc:6d:2a:87:68:f5:ca:dc:ca:37:9e:
e6:66:b7:2f:20:06:04:f2:a1:b9:4c:3a:30:4d:51:03:27:ce:
ac:a7:e9:6f:d4:ee:e9:a6:24:c7:d1:08:2a:94:01:94:46:19:
c7:f3:f5:7c:3d:d1:b6:db:4f:ff:5f:da:e2:95:ba:90:d3:5d:
b8:49:6b:e1:3b:61:7f:9b:79:23:f9:9b:4f:a3:40:ef:54:8b:
74:e3:42:a3:57:87:4f:38:f4:32:21:94:0b:81:c9:7e:8b:12:
43:dd:00:dc:a2:8a:82:ad:c0:6f:db:cc:c8:a9:1c:7c:47:78:
e5:b5:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:01 2025 by rpki-client