Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json)
Hash identifier: +KDUttfs+3k7W1KzUc/BaeHP7RvzuHTXWLLzb+8mSx4=
Subject key identifier: DF:DD:F2:32:B9:55:A1:E1:46:00:C1:49:4B:F2:7C:9F:AF:A5:4E:5D
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 0197C493CF20B5D2FE3A7C2B9883BE838D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
Manifest number: 0DDC
Signing time: Tue 01 Jul 2025 06:01:50 +0000
Manifest this update: Tue 01 Jul 2025 06:01:50 +0000
Manifest next update: Wed 02 Jul 2025 06:01:50 +0000
Files and hashes: 1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=)
2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: Vz1Dg05wFXm4PTwndw97dJLBIJB7xL0kMu/kGT5m3ug=)
3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:93:cf:20:b5:d2:fe:3a:7c:2b:98:83:be:83:8d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Jul 1 06:01:50 2025 GMT
Not After : Jul 2 06:01:50 2025 GMT
Subject: CN=dfddf232b955a1e14600c1494bf27c9fafa54e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:cc:b1:9c:49:d2:7e:a0:88:36:8f:91:ec:
5d:ef:aa:00:9e:b4:e8:ed:de:52:69:9e:65:13:20:
25:78:65:5c:ff:ea:33:ba:5b:7b:74:dc:b8:36:76:
b2:52:8d:0e:9d:9e:16:6f:36:01:4c:ec:e7:ca:98:
b5:d9:43:e5:11:a8:b7:83:b6:b6:53:f9:6b:f2:85:
82:d7:78:f7:ea:03:ea:e1:91:f3:85:b9:a0:81:96:
04:ae:f1:5c:f3:e8:3f:35:d8:30:f2:a4:7f:be:97:
33:b7:e2:b3:07:cc:82:33:5c:bc:c7:a0:d9:c8:24:
1f:5e:3b:00:32:ca:09:2f:9e:79:39:09:fe:b7:b5:
70:76:d6:87:87:41:7f:97:c1:51:73:37:7a:f9:43:
63:9a:e3:59:29:94:4c:2a:36:b7:a1:8d:c0:69:62:
a0:99:7b:ef:af:94:29:c0:79:5d:97:27:04:21:89:
bc:b8:af:e3:53:31:b4:22:68:3d:3e:0f:a0:2b:1a:
2c:2b:1f:2e:d4:f8:5c:fd:1c:27:18:13:87:48:f4:
f3:56:a2:71:12:ed:4b:60:3c:0d:09:65:a9:1f:15:
92:82:2c:06:29:55:a7:c2:18:f0:2d:8e:73:e7:5a:
ac:ef:04:6b:fa:76:28:ea:6d:c6:d5:5e:fe:20:c5:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:F2:32:B9:55:A1:E1:46:00:C1:49:4B:F2:7C:9F:AF:A5:4E:5D
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1e:73:7f:03:43:fc:8e:ef:8c:92:f2:8e:25:f8:e4:96:c8:
b6:d7:b8:d0:97:bb:5f:db:01:61:2c:b9:2e:f2:82:66:5c:d5:
e9:4a:03:60:61:01:d4:bb:06:d5:b7:d2:9d:ac:6b:ec:42:ec:
b6:b3:ad:36:7e:fc:72:e6:5a:02:3d:c4:bf:28:4c:da:19:6d:
be:12:a1:9c:95:57:25:35:08:f0:75:6d:cd:b0:ca:17:34:98:
75:97:89:46:61:ff:9d:6e:93:fd:5e:d2:0b:43:6e:4c:c9:a6:
4a:84:4e:77:ca:e0:c5:dd:08:5c:15:bc:2e:05:c6:c7:74:33:
68:ce:17:49:cd:5c:98:a0:07:87:ad:c7:a8:cf:02:17:c9:12:
e9:b3:e7:eb:96:7f:3f:b4:85:cf:47:b9:fc:43:75:5e:be:82:
e8:84:93:56:08:6a:01:61:9b:36:62:87:e9:98:d3:8e:ef:73:
07:fe:e2:30:89:b9:c6:f7:23:34:c7:f4:1b:99:42:e0:1e:58:
9f:9c:21:78:d2:8d:e5:99:24:a7:22:24:d6:25:29:21:2d:7b:
9b:ea:d4:65:a4:61:ac:43:69:e9:d5:3e:69:09:18:25:71:11:
0c:28:26:9e:14:3b:7d:fb:a8:cd:1f:ca:f8:7a:a7:b7:f3:69:
2a:f3:61:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:44:11 2025 by rpki-client