Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File: WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier: 3ujJnmbFFd0TMGXmaWdMo8wSfXRNn5fI4CW7owWQuuA=
Subject key identifier: DB:32:94:F4:2E:52:FB:A7:87:1E:33:D0:40:FA:8D:9A:47:2C:B5:F6
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial: 0197B70F0E234482C08D5247F3F82CC9CF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number: 151C
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=)
2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: +G4RBeKhioVErPM0LBsgFNNYyjYvrH999VRZC+/DaKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0e:23:44:82:c0:8d:52:47:f3:f8:2c:c9:cf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=db3294f42e52fba7871e33d040fa8d9a472cb5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:62:07:1f:32:da:dd:15:09:02:d6:2f:a3:a2:
24:bf:77:25:f6:a4:9c:4b:35:52:7e:06:c3:3f:bc:
fe:17:21:f7:0f:e4:42:41:17:51:19:d6:fd:a8:8c:
bd:3f:54:13:2f:09:c7:a1:62:f1:6d:d3:0b:38:35:
1e:26:af:f0:38:b5:24:d3:b2:5d:bc:bb:f6:95:e5:
d7:b6:18:4f:6d:8a:43:de:3a:68:4b:27:7d:86:81:
54:be:79:61:f4:9f:1f:47:6b:ab:2c:00:98:ca:89:
73:7c:20:f3:6d:1c:5f:44:94:ea:ca:8c:e1:d0:41:
77:0e:37:6b:ce:27:42:41:d0:29:29:a5:86:ea:99:
70:2f:c7:77:aa:74:39:05:4f:2c:fa:ce:49:35:88:
b0:7c:57:5e:df:4a:40:07:0f:57:4a:cd:4f:70:35:
b3:5f:7f:61:98:c3:77:22:a7:5e:b1:c7:b4:14:c2:
aa:ff:18:45:5f:8c:f8:30:d3:df:30:20:8b:8b:df:
e9:8b:34:1e:7f:62:e5:01:ef:0a:82:d0:7d:b3:3e:
76:d6:77:79:9e:96:3d:1a:d0:be:6a:d7:32:b0:34:
15:a6:a1:a5:51:26:e0:1d:d0:d2:c1:ae:e8:49:e9:
73:57:54:39:33:7d:48:ce:bf:6e:92:18:6e:6f:17:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:32:94:F4:2E:52:FB:A7:87:1E:33:D0:40:FA:8D:9A:47:2C:B5:F6
X509v3 Authority Key Identifier:
keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5d:2f:21:c8:87:b7:0b:ca:6f:06:29:73:eb:0d:8d:19:36:
7c:fc:34:6d:7c:8e:8a:dc:c2:4a:bd:9c:b8:4d:f8:33:0b:08:
a1:02:6c:32:d6:b8:e8:64:82:80:f0:ca:ff:29:e0:46:8f:95:
21:98:ff:2e:27:e2:37:85:4a:2e:ca:63:81:08:d1:88:21:72:
a6:c4:02:92:0a:fc:b8:6e:8c:48:ba:53:cc:43:7d:81:8a:c6:
4d:b9:f4:4e:ac:35:83:be:e1:1e:86:41:5b:ad:de:e0:ed:39:
e0:e4:42:97:af:b2:e4:be:81:50:4f:96:ba:48:4b:58:1e:c4:
3d:e7:56:39:32:3b:dd:c9:72:50:78:40:f3:a0:a0:45:24:65:
66:f2:31:bf:75:e9:27:28:5c:7a:ad:18:38:df:cd:a1:1e:e4:
c8:8b:45:3a:2b:32:c6:07:46:01:86:37:13:63:68:fa:26:d2:
af:a5:83:e4:58:88:59:b8:97:18:05:28:79:23:17:5b:30:84:
d3:38:57:c3:cc:9f:a6:b6:b8:15:c4:d2:40:c4:e7:68:89:3d:
74:f9:f1:25:de:64:07:b2:85:1b:4e:6d:62:78:8b:69:ce:14:
59:55:a0:52:97:bc:85:4b:8e:26:f1:6c:cd:8d:39:29:e5:79:
08:07:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:03 2025 by rpki-client