Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json)
Hash identifier: NHPC0Pd+oZDc7ThQVk4THEx1os1qkfydPA4l9M8b04k=
Subject key identifier: 72:40:EC:62:0C:59:9A:A2:01:34:77:21:AF:36:04:1C:7F:0F:07:F8
Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Certificate serial: 0197B6D74B197C90DFA1DA88E41341C8353A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
Manifest number: 1085
Signing time: Sat 28 Jun 2025 14:00:52 +0000
Manifest this update: Sat 28 Jun 2025 14:00:52 +0000
Manifest next update: Sun 29 Jun 2025 14:00:52 +0000
Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: 7RHFs1OF7ydn46/CO/+VZRd3XM/W9Ma2NqkEql5lpA4=)
2: fFhJRfRRKqbVCT0R_v7bFHpdBZk.roa (hash: QZT00tJ/5S8q4sNTIVodhtpTQHCNRxCmyS84l0hAhz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4b:19:7c:90:df:a1:da:88:e4:13:41:c8:35:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1
Validity
Not Before: Jun 28 14:00:52 2025 GMT
Not After : Jun 29 14:00:52 2025 GMT
Subject: CN=7240ec620c599aa201347721af36041c7f0f07f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:96:5b:c3:25:d5:51:fa:9c:32:98:00:8f:
ad:38:b8:e8:f1:c4:12:14:85:30:63:26:cb:bf:6e:
54:34:1a:7f:a7:ef:ce:ba:0b:84:5d:48:0f:43:3e:
f5:b3:08:67:89:14:e9:2a:4a:19:44:f8:26:23:ce:
bc:dc:e7:71:c9:46:55:91:64:c5:56:9c:6a:76:94:
0c:11:0c:ef:2c:9f:74:16:69:3a:58:c8:90:80:e2:
3a:a3:48:53:b6:0b:6c:15:f0:5a:85:f6:5b:d8:be:
03:00:89:02:1c:e2:2e:29:31:aa:30:fc:fb:3a:1e:
d0:46:e0:1e:ed:0a:2b:55:94:2e:e9:82:9c:de:1b:
5f:7b:b3:2d:b3:30:ae:37:14:5b:a5:c3:43:48:f6:
87:c4:2c:9d:c8:bd:83:35:ed:a9:b1:1a:79:d7:5e:
6e:b4:84:87:64:49:50:2b:01:38:0b:30:1a:84:6b:
34:ab:d4:38:f6:31:09:53:74:40:23:4d:d5:51:51:
dd:98:65:43:ee:c8:85:29:cd:38:33:80:9a:5c:fb:
d5:cf:de:2c:3b:10:4b:a0:a4:43:f1:cc:8a:58:ab:
b8:25:c2:47:e9:ca:8c:41:0f:ec:ed:b8:3e:b4:d6:
a9:df:1f:55:93:a8:d6:86:d3:bc:2e:ec:9c:7f:ce:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:40:EC:62:0C:59:9A:A2:01:34:77:21:AF:36:04:1C:7F:0F:07:F8
X509v3 Authority Key Identifier:
keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:96:69:00:15:93:70:8e:b2:d2:e0:83:f0:f4:c4:f7:2c:84:
4e:fa:6f:5c:78:0b:dd:3e:5e:17:12:26:c8:fb:e3:2b:d6:14:
80:23:47:2a:7a:fb:b4:5d:17:b9:30:87:66:9f:1e:80:d5:5e:
3b:e1:67:da:33:a3:29:c1:9c:55:97:c3:07:90:7e:8c:da:e1:
b5:c7:47:4c:d6:52:33:97:f5:59:1a:e7:5e:94:6e:26:ca:98:
09:0d:74:a9:4a:b4:8a:50:51:f6:4c:e0:79:23:15:17:e1:93:
91:ba:ea:1c:76:cb:df:6d:93:ea:da:6a:df:1e:4f:5d:2f:d3:
dc:d2:80:39:e6:46:3f:95:d7:0d:0c:e8:65:9f:59:9b:34:3d:
09:cd:44:07:bd:f6:da:92:43:e3:fb:ec:dd:53:19:f7:9b:90:
fc:65:72:6b:ea:c4:e9:e9:e9:01:36:c1:64:4b:a7:3f:d9:a7:
c6:4f:86:71:72:7c:c7:75:c6:2e:b4:75:99:e1:80:ee:5f:a4:
35:8b:b4:66:31:2e:5b:7d:59:e3:49:e8:50:a0:25:86:33:a7:
16:bc:57:e7:1d:87:da:94:23:8a:01:32:45:a3:50:2f:d4:e9:
90:a0:97:0e:f1:c9:3a:aa:91:63:05:89:41:7d:6a:43:7c:6e:
cf:97:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:40 2025 by rpki-client