Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: g4U62CIGmAXqak8R4IP2QbnXYmBdj35/RcErtAARkT0=
Subject key identifier: 20:B3:D9:9F:85:6E:4F:00:AC:5A:04:92:E7:BF:F1:1E:C0:79:FE:A5
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 0197B77C77A6EC647799341F48318ED7F42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: bg/fT+Cc7QE3YRycVJuqQHJ83RYbMyJmbDbz3HpbKRg=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:77:a6:ec:64:77:99:34:1f:48:31:8e:d7:f4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=20b3d99f856e4f00ac5a0492e7bff11ec079fea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:5a:3e:e2:c2:09:55:16:cf:4b:c8:9a:d3:
2b:ab:b5:b5:a6:34:5b:7a:f3:d3:40:82:08:63:27:
f4:e8:91:98:c2:5f:46:49:d6:27:1f:b9:75:17:60:
20:a2:c4:b2:23:c7:4f:0b:9d:53:06:da:ce:96:48:
44:3c:95:b7:23:e8:a8:48:8e:13:cf:44:bd:19:52:
b6:6b:7e:ff:6d:30:74:9c:11:37:c3:ba:62:ed:f6:
05:d4:2b:52:39:66:db:0c:83:ce:82:9c:af:d4:e5:
30:e9:37:da:37:7a:b6:68:92:2a:80:fb:18:3a:aa:
2b:cd:19:33:28:39:ab:6e:73:3d:97:69:01:7a:9b:
7f:f6:9a:fc:52:d9:55:c9:66:c1:a9:98:6b:76:9d:
40:0f:00:cd:a5:73:76:43:72:bd:cf:48:d8:83:9f:
00:c4:aa:49:ed:5b:6f:cc:1c:e3:ae:58:76:09:6a:
76:d9:ee:61:0f:ee:fb:ce:c7:88:45:c2:fe:41:2e:
4a:09:d9:bc:63:9b:c2:24:d7:b4:a9:39:36:42:d2:
08:87:4f:b1:46:76:e3:66:b6:c1:b2:22:70:88:0f:
81:e6:c7:ac:4b:58:e4:46:70:06:95:a5:24:a0:87:
e5:3a:dd:d3:9f:1a:d2:85:34:eb:04:98:38:b0:ea:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B3:D9:9F:85:6E:4F:00:AC:5A:04:92:E7:BF:F1:1E:C0:79:FE:A5
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:70:d5:e8:d5:15:43:3e:af:79:ed:18:4c:05:07:59:75:67:
17:97:f6:8e:65:d7:08:d0:45:4d:47:aa:e6:4c:66:01:99:22:
b1:c8:ec:eb:78:97:0e:e4:81:22:d9:79:da:82:f7:88:21:d1:
db:77:f7:9e:09:74:b4:a5:71:cb:e4:07:e4:d6:47:1c:94:8c:
ce:b2:42:f2:71:35:1f:25:90:66:90:4a:b3:af:a9:1e:f6:e3:
12:a1:64:6d:04:d9:65:cd:75:33:bd:b4:14:79:b0:8d:ca:2c:
e7:88:d2:71:9b:ae:92:9e:6b:58:23:1f:9b:7b:9f:0a:b4:ae:
e0:ae:75:42:3c:37:a4:76:2c:46:fa:ec:9b:29:d7:aa:cd:04:
8b:b8:02:2a:a0:87:d8:61:ee:c3:ee:2b:14:2d:96:5b:aa:ca:
12:bf:bf:f5:35:56:0d:e0:31:7b:c4:93:80:4c:f5:c4:5a:3f:
48:75:ac:8c:df:1c:66:f5:3f:34:24:02:23:77:d9:f3:53:14:
6a:5e:07:2b:8f:b1:9d:73:ad:98:23:bf:c2:79:72:9c:70:2d:
24:29:a3:08:03:bf:b2:99:3d:79:57:bd:bf:fa:2b:18:cd:5e:
64:bf:18:81:e7:82:a4:f1:33:50:c4:a1:11:96:1d:dc:66:ff:
01:8a:b0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:35:56 2025 by rpki-client