Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
File: weJGTdbQQjCVFffltk6mXAibRhY.mft (raw, json)
Hash identifier: ++WfzR4G3eOdlkwxS97an4IFQYHguv3RpsceIl8TdUY=
Subject key identifier: C5:5F:51:DB:05:42:59:CC:57:1D:1B:3E:23:52:14:44:E9:81:19:ED
Authority key identifier: C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
Certificate issuer: /CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Certificate serial: 0197C2A4A47316D23E0E52D0172D63C24573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 21:00:59 +0000
Manifest this update: Mon 30 Jun 2025 21:00:59 +0000
Manifest next update: Tue 01 Jul 2025 21:00:59 +0000
Files and hashes: 1: DgGyGbwI_Z-hbBwqBMhZZb6vSwc.roa (hash: YoSjsmqBi7UGbr0YdaEV1pXh33zn8N/CDmlmvP42wg0=)
2: weJGTdbQQjCVFffltk6mXAibRhY.crl (hash: i9r+tmNjxA1V0ruCTYS051N/gFR01xBWjB0L5u1MuK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a4:a4:73:16:d2:3e:0e:52:d0:17:2d:63:c2:45:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e2464dd6d042309515f7e5b64ea65c089b4616
Validity
Not Before: Jun 30 21:00:59 2025 GMT
Not After : Jul 1 21:00:59 2025 GMT
Subject: CN=c55f51db054259cc571d1b3e23521444e98119ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ac:da:4a:d9:6a:cc:d9:8b:6c:78:3d:4c:93:
5a:f0:05:9c:22:83:11:75:20:b6:07:9f:32:ee:e4:
0d:95:82:d4:22:d1:5b:b9:e6:4e:ac:18:5a:67:1f:
e4:a9:6e:b0:a7:cd:d4:59:b5:7d:a0:32:2f:85:86:
34:7f:ff:1d:b4:0d:47:82:0f:66:74:0f:de:50:f2:
c1:49:5b:97:b7:66:41:3e:f5:aa:c2:a8:f8:3a:c3:
61:bd:5d:5f:eb:6c:bb:d9:f0:69:a3:27:e5:5a:5a:
a4:3b:08:ee:e1:5b:82:06:8a:b5:3d:e5:4f:31:78:
81:2c:e9:39:6e:d4:e5:43:7f:05:d4:e2:c6:19:09:
a6:1a:4b:54:15:1e:d4:30:1c:91:90:8d:da:8d:4d:
f1:9d:dc:09:db:ee:18:17:de:75:87:aa:1e:6b:a2:
a0:e2:40:fe:93:19:e0:90:1b:c2:a3:8e:ea:2a:25:
49:7f:8e:4b:d5:af:d0:bc:50:41:19:a3:db:9e:f3:
4d:fe:a2:65:a8:71:a1:ff:99:0b:fc:bd:f2:7c:26:
ba:6d:ff:ff:e1:6e:c5:02:33:04:25:42:90:fc:7c:
ea:9b:d2:1a:80:42:dd:8d:90:5c:01:a5:ab:68:7f:
e6:6d:14:d2:ee:b2:b6:06:04:e1:10:9c:2d:c3:53:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5F:51:DB:05:42:59:CC:57:1D:1B:3E:23:52:14:44:E9:81:19:ED
X509v3 Authority Key Identifier:
keyid:C1:E2:46:4D:D6:D0:42:30:95:15:F7:E5:B6:4E:A6:5C:08:9B:46:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/weJGTdbQQjCVFffltk6mXAibRhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/256fab-de97-4679-a465-b96d6714a174/1/weJGTdbQQjCVFffltk6mXAibRhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9c:c1:38:80:bb:b2:59:f1:c7:b6:11:c1:c9:37:3b:17:ed:
a5:6f:60:bb:97:a1:d8:d3:66:4b:48:09:1a:61:09:09:ef:56:
e8:07:33:34:a7:a7:a1:c7:f8:b5:2d:73:dd:d9:7a:45:5e:4f:
25:9a:ee:84:88:3b:fa:5c:41:ae:de:08:51:54:5f:ed:a9:fd:
74:21:85:97:9c:3f:ab:24:07:5f:3f:cb:bb:ca:33:69:52:2f:
d7:73:a9:7d:4f:fb:e9:bb:de:14:5e:da:1e:06:9e:e7:6b:36:
26:8e:54:1a:26:5c:ae:41:82:bf:38:d8:49:3c:57:3b:d5:18:
92:0a:01:af:36:7c:22:5b:6c:34:c4:db:06:09:bb:a0:f2:5f:
24:14:9a:fb:05:22:45:05:e2:4c:2e:e3:ca:78:bd:ea:3f:54:
f4:7d:13:32:c3:28:9f:b5:64:33:93:9e:b9:d9:2d:2b:68:01:
ca:a2:15:33:23:26:2c:fe:85:47:cf:fd:67:b5:bb:ae:94:f5:
c2:e5:bc:0c:12:e4:81:c9:57:22:47:ff:78:3f:09:91:50:38:
76:bc:dd:42:58:42:aa:1f:fd:45:39:0c:45:3f:89:49:03:fe:
7d:33:d8:62:62:0e:8a:84:5b:c0:8f:bf:cc:d2:c2:3b:f7:a3:
9f:ce:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:13:00 2025 by rpki-client