Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json)
Hash identifier: d0X+Top/w5IXrOz1LVi+0uwxS27/bQUzfkk53pyZWvY=
Subject key identifier: 36:EB:50:7F:B2:1F:42:98:10:0C:D8:38:2D:71:92:F0:04:B5:B9:1C
Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef
Certificate serial: 0197B6A039BF9B5D955D69A2E0A667909EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
Manifest number: 07F6
Signing time: Sat 28 Jun 2025 13:00:42 +0000
Manifest this update: Sat 28 Jun 2025 13:00:42 +0000
Manifest next update: Sun 29 Jun 2025 13:00:42 +0000
Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=)
2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: cj39C6NIVwCoUi+9+HoSz+s9djEWVsE3xhZFfyt0Cg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:39:bf:9b:5d:95:5d:69:a2:e0:a6:67:90:9e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef
Validity
Not Before: Jun 28 13:00:42 2025 GMT
Not After : Jun 29 13:00:42 2025 GMT
Subject: CN=36eb507fb21f4298100cd8382d7192f004b5b91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:bc:92:b5:98:89:63:8e:cf:75:ff:2c:01:
ec:be:04:a9:ff:33:b3:a7:82:5f:a1:f5:8e:1d:54:
f4:14:5f:4f:2a:bb:c8:22:87:22:a8:9b:0c:27:cc:
41:e2:c3:c6:e4:f8:78:71:b2:a7:18:3a:e3:bc:ff:
28:9f:b2:85:40:59:7d:59:97:e9:a4:ba:bc:2d:f8:
6c:81:f8:f0:3b:7f:53:a0:66:e6:64:30:65:46:b8:
7e:48:98:0b:20:b1:8f:b0:e4:f7:4d:07:19:a0:cf:
e6:47:93:b6:df:36:75:94:dc:e4:d5:be:6c:fa:de:
8d:11:85:5d:4f:84:59:52:ec:67:90:25:3d:63:b3:
84:fd:d3:22:ed:1c:86:b3:31:e9:ad:c4:63:a8:8f:
7d:32:e1:47:e9:63:2f:67:8d:b2:bf:df:c0:97:34:
b8:52:38:2c:7c:66:99:a3:a4:e8:45:d8:89:04:7d:
31:3b:b2:86:4f:e2:80:7d:f5:30:46:28:4f:e0:9a:
91:ab:8a:e9:a9:c0:68:80:a7:43:b9:9f:2f:ea:f6:
ce:2c:96:05:ac:9b:da:cc:52:85:fa:c7:6e:5b:c3:
b5:f4:99:23:08:66:30:f4:67:15:f1:dd:5e:51:a4:
c6:5a:e9:f6:fc:59:1d:57:f1:8d:2a:a1:23:6f:5c:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EB:50:7F:B2:1F:42:98:10:0C:D8:38:2D:71:92:F0:04:B5:B9:1C
X509v3 Authority Key Identifier:
keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e9:69:45:ee:7f:7d:d9:00:36:93:bd:43:fb:f6:bb:02:f6:
8b:35:05:06:45:ef:73:2f:c3:32:c0:9e:08:a5:46:a0:20:e6:
a0:d0:ff:a3:59:88:3f:39:fd:15:69:5c:2e:f3:49:00:e8:4a:
68:a6:81:89:7f:38:f4:43:9e:f7:e6:86:8f:94:2c:4d:26:29:
80:b5:24:92:b3:df:0a:b1:63:2c:ea:b3:9e:8a:20:e7:68:f3:
2e:8e:87:2a:8b:be:f4:e4:90:7d:5a:d0:0c:23:63:3d:e3:14:
f7:83:27:50:3a:97:eb:9b:cc:5d:54:77:4d:07:30:25:37:4c:
5b:d2:d6:8c:42:47:53:3f:01:75:31:7e:73:83:5b:32:c3:10:
61:88:ba:5d:c2:2a:df:a4:8e:66:c2:d6:ba:96:52:03:af:f1:
71:ab:2a:59:2a:c1:91:10:d9:0c:c7:12:56:83:88:72:45:26:
9f:51:27:b7:8d:bf:9e:fa:69:d9:78:3c:74:d2:fb:08:57:da:
8b:cf:e3:71:db:38:4b:4c:ce:69:c0:34:06:da:e4:63:02:a5:
6b:a7:f1:06:77:0b:09:32:57:16:2e:0b:8b:1d:f6:f0:2e:53:
85:ff:51:b3:97:f3:3d:5c:9c:b4:b8:41:e6:ae:ac:14:6e:58:
ce:2e:16:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:00 2025 by rpki-client