Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File: WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier: ZpebBQEGZJesIe/coj3rRWaVGuaE2XbwpQS3pEYnTKM=
Subject key identifier: 9C:84:2D:75:EF:3D:5B:D9:E0:EB:23:0D:1F:C1:BB:94:4E:B4:3A:7E
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial: 0197B63291ECEC87ECE27B9428D3C3B5F22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number: 146A
Signing time: Sat 28 Jun 2025 11:00:56 +0000
Manifest this update: Sat 28 Jun 2025 11:00:56 +0000
Manifest next update: Sun 29 Jun 2025 11:00:56 +0000
Files and hashes: 1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=)
2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: QecaKKXyxFcL2BfrcSYyI/MljO+5u5x19iUt6JjUJw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:91:ec:ec:87:ec:e2:7b:94:28:d3:c3:b5:f2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Validity
Not Before: Jun 28 11:00:56 2025 GMT
Not After : Jun 29 11:00:56 2025 GMT
Subject: CN=9c842d75ef3d5bd9e0eb230d1fc1bb944eb43a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:f2:da:8e:6d:49:13:a7:db:24:22:fb:3b:
ce:8e:62:b9:8f:31:8c:03:00:e3:f1:a7:3b:04:8b:
20:85:07:3a:18:5e:b8:21:31:5f:e1:dd:98:61:99:
1f:b4:d8:2f:bf:4c:a5:e8:5d:28:fc:f0:27:0c:03:
97:4d:7f:72:e1:d8:2a:eb:30:e8:b2:75:8f:1f:40:
62:1f:2c:09:61:8c:46:06:7a:e6:9d:4b:c4:88:f1:
aa:56:23:7d:45:b1:bf:93:b9:e5:3b:70:b1:39:d6:
0b:52:da:7a:21:c0:5a:59:da:0d:4b:c8:2a:8a:83:
b0:7a:1b:98:cd:f0:8b:00:81:c0:a6:8a:a0:38:82:
f9:35:96:bb:b5:7d:4f:99:a2:a3:a1:1f:c9:3a:47:
8a:a7:06:2c:a0:03:8d:6b:35:cb:0c:f9:ae:e2:23:
3f:29:de:9a:f8:df:e4:39:67:69:13:4e:1b:fc:b2:
c0:f3:4f:2e:82:ab:76:bf:fd:c9:91:f3:d3:72:3f:
42:86:8f:60:e9:aa:92:97:88:97:62:2a:fc:91:33:
68:c9:28:74:1d:7f:8f:54:fc:8a:91:8b:e0:1f:4d:
6e:31:00:38:a5:bd:ff:b3:1c:24:98:58:52:7a:44:
94:6e:29:7f:8c:13:c1:da:b4:20:48:82:f9:61:10:
d6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:84:2D:75:EF:3D:5B:D9:E0:EB:23:0D:1F:C1:BB:94:4E:B4:3A:7E
X509v3 Authority Key Identifier:
keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e5:d0:0f:06:80:f9:82:81:3e:d7:4b:fe:1e:16:13:f3:de:
de:a6:bb:01:92:40:b9:6d:fc:0e:b6:26:1c:ac:47:8a:60:5c:
6f:36:0b:fd:53:02:9d:90:cf:df:b4:3b:b8:a4:ce:d1:6f:ec:
53:e0:e5:b5:a8:80:c3:15:1d:3f:54:7d:79:90:c5:93:26:a2:
01:ae:cb:b0:86:45:9f:bb:2a:1b:ba:85:26:bb:45:ef:08:27:
dc:29:83:40:74:e9:53:c1:10:98:36:79:66:14:b3:87:72:87:
17:7b:0b:3a:5b:99:8b:fe:fc:d0:10:11:5e:6a:1b:ba:9e:f5:
b0:25:c6:7d:01:6e:0d:e0:71:7f:8c:a4:11:e4:90:30:de:2e:
1a:d0:3c:78:0a:92:9f:47:26:2c:8d:a1:ed:c6:0e:a7:b0:9e:
fe:af:77:a3:04:d8:9c:dd:78:15:e1:d8:92:9b:bd:67:00:ce:
3f:c8:79:9f:d3:ec:ce:a0:2b:d3:64:20:32:fc:25:c8:ae:98:
80:f5:e1:7e:0f:af:9f:99:cf:5a:b2:89:98:e5:8b:11:c9:46:
c4:23:6d:31:e5:47:1f:96:7e:98:be:7a:92:80:67:fb:1d:c3:
46:7c:fe:59:40:7d:60:00:41:dc:15:a7:20:51:b4:3e:2a:d3:
78:5c:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:26:26 2025 by rpki-client