Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File: WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier: VtmQAplBXYe8WrQSPtANFH/I6WmfoQCOwaByY89SQo0=
Subject key identifier: 89:22:70:57:DE:60:ED:6F:2F:56:AA:BB:9F:63:43:7E:1B:9D:C9:9D
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer: /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial: 0197B632A91A5539027070146E75E5056ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number: 101F
Signing time: Sat 28 Jun 2025 11:01:02 +0000
Manifest this update: Sat 28 Jun 2025 11:01:02 +0000
Manifest next update: Sun 29 Jun 2025 11:01:02 +0000
Files and hashes: 1: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: bkLtivxOsZTLVF7+26xZeYbA47ATbJ6aZMTrv7Qjm3s=)
2: pYvKtWHjQL1axAyemHXasjizsXI.roa (hash: +saRg/F7RlIOLGe+6CACF+gl/0HmxqxN1SsKDNk6n+M=)
3: qBYlovJkfJHkvUcB5hy59ysLvBI.roa (hash: rhUQ7eemuasO/N/vCeryMqfVlnZzFbMH9k0Lde5p9sY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a9:1a:55:39:02:70:70:14:6e:75:e5:05:6e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Validity
Not Before: Jun 28 11:01:02 2025 GMT
Not After : Jun 29 11:01:02 2025 GMT
Subject: CN=89227057de60ed6f2f56aabb9f63437e1b9dc99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:46:25:d3:ee:f0:4d:8e:2b:38:7c:82:b8:
fa:df:6e:7a:ea:bc:dc:2a:4d:fe:fe:85:0b:67:38:
a6:5f:06:96:e4:a9:89:43:09:e3:b2:51:12:3a:b9:
88:b4:99:ab:fd:2f:84:45:d7:62:18:44:c1:01:ab:
bf:84:b6:a4:7f:3e:dc:68:b0:b6:d7:2a:66:7e:b2:
ae:f8:e6:c6:f2:b8:44:ea:10:a9:ad:3c:c8:eb:bc:
9d:0a:51:a4:80:ae:e9:4b:aa:69:44:7c:17:da:cc:
6f:e5:a7:7b:59:5c:24:5d:f4:a6:6a:6c:65:35:04:
ff:19:8c:1b:b6:30:78:b8:14:7d:04:0a:25:27:e8:
47:92:65:76:1c:1a:bb:e9:cf:df:95:9d:38:0a:83:
83:da:0e:a4:bb:cb:2f:90:12:24:e0:c7:c7:a1:ff:
28:24:e3:54:6c:bd:c5:0c:5c:c4:93:10:82:2e:4e:
95:c9:1b:5f:73:a7:15:55:85:51:71:1b:ed:8f:89:
c1:df:29:a1:b3:18:ee:42:b8:40:d6:5c:a0:59:f9:
27:9e:e0:65:98:46:33:9e:6b:e1:d1:e7:c0:61:1d:
32:bb:70:f2:12:ac:06:76:bd:95:82:03:d3:cd:6b:
a9:e2:49:a7:4a:ae:76:a2:e5:aa:93:ac:49:23:c9:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:22:70:57:DE:60:ED:6F:2F:56:AA:BB:9F:63:43:7E:1B:9D:C9:9D
X509v3 Authority Key Identifier:
keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:87:a5:6f:4d:3f:91:6b:3d:72:ef:66:59:ac:2f:13:fe:6a:
36:bc:b1:cc:a3:f8:a0:44:b3:95:52:f7:dc:d7:9a:ca:4a:0e:
5e:d6:78:49:e9:9e:40:e0:ac:37:6a:4d:37:3a:a7:ca:49:e8:
1f:88:f8:1d:55:d6:07:18:43:a8:8f:10:6c:eb:cd:cb:27:79:
fc:aa:c7:e4:bb:87:ad:79:c1:eb:c2:54:d9:27:59:d1:db:5c:
ee:1b:e9:41:8e:29:79:3b:d0:c3:38:7d:c6:c2:f3:4f:87:86:
5b:2f:1b:35:60:b0:e2:44:51:c7:8e:7f:ef:62:e4:55:4a:85:
40:17:41:c2:c0:d9:9d:4e:13:fc:56:5c:14:bf:da:7b:4a:2a:
37:6f:c5:47:43:15:a1:5e:2d:02:11:d7:43:51:f1:74:0c:a0:
56:01:01:43:d3:6a:d0:92:2b:3e:23:6c:bc:16:e4:8a:97:8a:
a2:52:0e:15:cf:42:3d:86:67:2c:bf:9e:39:76:d3:03:c9:61:
48:a9:a1:87:e4:87:cc:64:09:2c:42:91:6b:dd:22:81:67:64:
c6:8f:e5:1e:51:27:4c:c7:7e:13:14:02:c3:23:22:4d:66:ed:
60:77:17:38:94:0b:7a:34:a5:b3:cc:ea:52:a2:9b:22:8b:fd:
c2:60:1f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:28 2025 by rpki-client