Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: pLTXdhRwxagFiERbMx2KuUVQx6j5IOTxSIZNr5dhHfg=
Subject key identifier: 2D:EE:0D:58:BD:27:53:F3:C0:44:E8:73:17:C0:44:F7:68:4D:A0:CD
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 0197B6A0950DFA2800181328F619F90C53D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 0DE3
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: 5lpXgR3Xj24ZOYE4WvCQsMDVjWJVhOwiMegfNLG10j4=)
2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:95:0d:fa:28:00:18:13:28:f6:19:f9:0c:53:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=2dee0d58bd2753f3c044e87317c044f7684da0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:00:2a:6c:48:78:1a:41:f9:cf:9c:55:4a:
cc:99:b5:cd:78:e6:8d:d1:30:23:a8:56:61:3d:71:
07:72:74:5a:b4:d5:42:4d:29:2e:dc:1d:41:eb:5f:
f8:80:b7:2a:66:36:ef:63:1c:23:6c:b1:4c:e9:13:
b4:e5:b2:19:58:32:db:ef:ac:83:e0:81:b0:80:92:
34:b4:7d:8d:8a:b2:40:db:c8:e3:36:55:5e:c0:21:
85:2b:b3:82:b3:46:5d:3b:a5:50:24:8c:c2:5d:ed:
e5:ca:15:34:da:8a:f8:5d:7d:96:10:5e:f2:aa:08:
0b:6f:c6:fc:70:71:c4:eb:eb:72:6a:6f:bd:29:be:
0e:f7:43:c7:6c:14:c5:4f:28:f1:b2:d0:2c:3e:d9:
97:82:86:7e:80:c5:fb:2b:ce:4d:4e:20:4b:02:05:
fc:19:3f:0b:ab:a6:17:3f:c6:64:1a:1b:0f:ad:8b:
63:9d:22:ba:ce:94:e8:b4:c7:10:94:58:aa:dc:1e:
8c:a1:00:d9:2d:00:e6:1d:00:3c:02:73:28:38:95:
23:b0:df:21:6a:3f:66:de:b7:03:3e:17:8b:2a:c0:
35:a4:dd:f6:07:29:3e:6e:06:99:b8:67:d6:c6:be:
43:a7:38:dc:4a:4b:07:4f:0e:e5:25:59:87:f5:f2:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EE:0D:58:BD:27:53:F3:C0:44:E8:73:17:C0:44:F7:68:4D:A0:CD
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:30:ad:07:4e:39:85:ce:c4:d3:68:99:5c:39:a8:81:81:a2:
ff:45:6a:7d:b1:2a:e2:f8:11:75:27:d2:b5:07:2c:3b:13:a9:
af:5a:d9:61:75:b8:cb:18:4b:71:ac:93:14:5e:f0:8b:42:78:
d2:17:0a:2a:1f:d3:c7:d4:c4:33:32:c3:76:77:e9:77:f2:23:
0d:b9:95:10:66:72:66:7d:af:fc:20:9e:aa:50:ab:99:8b:a2:
ae:1f:6b:ad:d5:5e:85:de:33:f5:2b:fc:96:53:94:fe:b0:47:
51:7a:32:96:50:b3:5c:35:f2:eb:9f:69:31:fe:78:ae:b9:93:
b6:7f:7e:2b:a2:66:a0:c0:70:9b:7b:18:5c:ef:29:7e:71:fc:
e0:ad:93:32:32:0c:58:cd:ad:f3:dc:d9:9a:39:5d:58:b7:a7:
67:77:0b:82:af:b5:92:db:a1:46:13:31:d0:f9:8c:17:72:f0:
84:30:b2:ad:70:22:29:d1:45:9c:4f:2e:2b:0a:72:05:19:2c:
15:b8:fc:ef:78:2a:24:a9:ef:93:83:44:77:ce:f1:0a:08:b1:
c0:b0:95:8a:80:4f:d3:66:34:44:78:6f:94:c9:d9:82:78:1e:
37:b2:61:d6:75:71:1e:2b:38:47:d5:dc:bd:90:2a:f6:86:1c:
99:ad:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:43 2025 by rpki-client