Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File: W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier: dNUCbEpzbaQxogFr6HsCU3uKcnc7m2X2qnQvs5pjpC4=
Subject key identifier: AE:77:52:FD:7D:52:1E:A3:BE:CB:B5:6B:24:B5:4B:96:4D:13:7A:06
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial: 0197B745B6B1ACAE8AC3FBD3C4D8CC096B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number: 0BFC
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: DkAig3sreL5BEr4m7B4017Dqunc.roa (hash: os6hbiNRGL8Q/b1fbO8kbiQWOa/7AJzjZXaqV/37DEw=)
2: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: 0sBmj8QqHvfaPdG19cSUJzP49wgZ64AMl2lBFwEQ9IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b6:b1:ac:ae:8a:c3:fb:d3:c4:d8:cc:09:6b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=ae7752fd7d521ea3becbb56b24b54b964d137a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:8d:71:82:70:6f:f6:04:46:d1:d8:18:83:
3c:63:be:96:a0:22:58:e8:3a:e2:61:94:d9:69:14:
f1:c1:a3:78:30:b8:95:07:cf:73:e1:71:15:8d:9f:
85:96:66:60:66:e0:ca:51:81:74:79:fd:43:c9:ce:
35:7b:54:a6:f6:17:cc:6d:47:99:a3:24:1d:2a:7c:
71:9b:1b:6d:76:a4:4b:95:4f:aa:9e:11:8c:3a:d5:
bd:47:c6:a7:67:31:b7:c9:2b:d5:68:e1:2f:7f:02:
31:cf:d2:6b:b2:e4:d0:eb:df:2e:46:33:8a:c8:69:
13:9e:0b:28:81:d8:e6:30:22:7c:c4:52:7a:5f:82:
61:14:96:02:59:e2:fe:40:ac:9d:22:9a:89:30:b0:
ab:9f:64:56:46:e8:72:be:1a:14:82:3f:d6:f0:74:
d9:5b:d0:0e:26:66:48:74:97:01:a9:ff:39:ad:a2:
51:4a:a8:2a:56:50:b1:d8:f9:d1:88:81:ee:ef:af:
a1:65:b5:c0:4d:ce:3f:d7:09:db:5e:ab:c9:f5:01:
fd:52:56:c1:49:dd:d3:99:8d:da:48:45:15:52:9a:
40:f5:35:a3:81:c4:c7:e5:ba:86:9a:58:13:56:c7:
b8:bf:c4:e5:49:cd:5c:f6:41:b3:b8:cc:75:7c:54:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:77:52:FD:7D:52:1E:A3:BE:CB:B5:6B:24:B5:4B:96:4D:13:7A:06
X509v3 Authority Key Identifier:
keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c1:2c:9c:fb:e4:4a:f8:d9:1c:0e:62:b7:91:65:8c:b1:fc:
74:2a:84:e8:53:e8:b7:66:bc:de:64:13:45:11:96:e0:a8:ed:
17:6d:f7:f4:36:c6:40:d4:c7:2a:a3:b0:40:3b:80:30:d5:ff:
2d:ed:4f:f9:77:4e:d3:f8:eb:76:03:47:5b:ee:dc:07:7c:19:
c4:4e:5f:de:09:12:28:75:05:9f:98:c5:cb:fd:ce:b3:1a:51:
08:00:32:f7:ef:ea:b6:67:18:5a:98:61:df:89:95:2a:df:52:
fd:1d:cb:25:6a:54:14:41:94:e8:90:a8:e4:81:b1:1b:59:2c:
0e:0d:ad:e6:6f:37:4f:98:86:02:8e:b8:94:61:2b:5b:46:b2:
8d:c6:70:22:c9:b6:13:0e:16:48:6a:65:cd:d8:fe:54:91:6a:
d5:80:d6:34:d3:c1:37:a9:ac:2f:7a:99:81:b6:bd:bd:f9:60:
b7:3c:d0:4d:b0:e4:0d:c5:88:f2:3b:82:28:40:a3:17:38:c9:
4f:df:09:fd:c0:d7:ee:96:84:ae:8d:cc:a8:d0:be:22:e5:46:
55:e4:e8:89:ae:10:f1:f6:78:13:1b:00:a4:c2:17:4f:06:7c:
b4:6b:26:55:2e:04:70:5a:7f:75:18:34:d8:bb:1e:cc:ba:cb:
ed:9c:2d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:42 2025 by rpki-client