Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: Kl2FLzQkAHAb3f6oZ8E8Y8Sf2qcgyYm/RSGogKbeeuE=
Subject key identifier: FF:05:B7:8D:F5:30:6E:43:26:DD:4D:3E:18:AF:0A:C4:DD:E1:0B:C7
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 0197B632F011DE53437297AE57570F133868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:20 +0000
Manifest this update: Sat 28 Jun 2025 11:01:20 +0000
Manifest next update: Sun 29 Jun 2025 11:01:20 +0000
Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: umepo5FWN/X9DDu2FAaSYtJaH7R2M1xET4BNTAJpFmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f0:11:de:53:43:72:97:ae:57:57:0f:13:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Jun 28 11:01:20 2025 GMT
Not After : Jun 29 11:01:20 2025 GMT
Subject: CN=ff05b78df5306e4326dd4d3e18af0ac4dde10bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:12:54:10:b4:b3:73:d2:09:1f:f7:72:8f:
83:62:7b:b9:09:4e:c4:f1:7b:87:53:5c:4e:95:40:
b4:7f:43:41:df:2b:92:f8:48:38:e6:d3:c4:b0:7f:
26:88:39:83:c3:4c:e2:e5:3f:2a:bb:b4:c1:d8:ce:
8f:43:a0:01:ec:e2:54:01:a2:2f:5f:71:98:83:d2:
4c:4f:6d:24:26:79:3b:af:b0:09:70:25:ee:b9:5a:
36:93:7d:0e:29:bf:ff:d2:42:74:a7:1e:ce:40:38:
08:93:b9:20:51:c8:91:62:ba:70:98:c7:0b:d9:80:
ae:bd:55:c3:34:d2:88:28:62:65:51:05:36:8d:cc:
3d:f3:2a:83:b5:4b:8d:20:00:9a:98:12:e1:4d:79:
00:dc:d5:7c:2c:de:a1:0d:37:92:5f:2e:29:45:1f:
d6:81:c4:3a:bb:b3:03:e1:63:a3:6a:23:c7:0c:f9:
23:dc:ac:56:2d:bc:18:e2:82:e8:f3:24:58:57:3e:
9d:9f:76:c3:e4:2f:6c:68:78:03:37:aa:cd:04:4b:
5c:7e:df:ff:bb:24:c0:04:b5:c6:99:73:87:5d:6c:
42:82:54:fb:23:5e:1d:22:e6:03:9b:ae:32:ca:e3:
59:2e:48:53:14:17:3d:ff:dd:4b:1e:e6:7f:f6:ec:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:05:B7:8D:F5:30:6E:43:26:DD:4D:3E:18:AF:0A:C4:DD:E1:0B:C7
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7a:89:7f:f0:d3:07:5e:ba:53:f1:71:a8:dd:e9:b1:a3:5d:
2a:24:0a:ef:9e:94:1f:80:38:6a:eb:33:ba:5a:1a:84:03:15:
ba:54:43:aa:18:ff:98:7c:e5:a3:a1:2f:1c:4c:42:25:26:40:
d9:fe:81:1b:e2:0e:ff:58:f8:52:b4:f1:1a:cc:cf:26:27:e4:
11:46:b3:36:f0:44:e9:c3:c7:21:a2:13:4c:e9:0c:5b:cb:96:
f4:a1:db:b5:d8:5f:07:84:d4:10:2f:91:bf:ea:c9:07:c0:36:
de:f9:34:b2:a2:1a:ec:f5:8d:12:64:43:ed:6d:1e:cf:d0:aa:
31:c6:5e:54:71:8e:a1:81:1a:a3:5e:24:5a:50:0c:d8:71:e3:
e6:ea:ea:84:38:b8:4e:81:ed:85:b2:82:21:d9:b4:ba:4b:04:
75:0c:04:36:cf:44:05:7b:93:ec:0d:50:ac:2f:3f:70:43:62:
23:c2:89:06:89:e0:5a:bd:ce:79:f2:2a:2a:a0:80:f3:e0:d5:
bb:b3:bf:64:ca:ca:d7:da:2d:4b:81:b2:96:b8:e0:19:ef:27:
98:45:f1:79:0d:0a:0e:fe:34:4a:c4:31:42:33:50:79:3b:7f:
c5:8c:ad:e5:f9:ee:50:85:69:64:fe:72:1a:a7:c5:fc:4e:94:
5c:2e:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:24 2025 by rpki-client