Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier: eStGP7KfzJHXvUI4wDx3QqRHdvKGKLS0dod2aW4ycqY=
Subject key identifier: 40:D0:C1:64:95:1D:7A:F8:8A:92:58:9A:24:60:09:1E:4E:9A:69:42
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial: 0197B82137550275ADEE73CCB3C83CCC0D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number: 151F
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: cLYVTZdPmLC+LQjzsaGN+eAwGZ0+8UsfxjuUL0Tzkn4=)
2: ad0B85jvjdQ5awOY3wMvIUJWKS0.roa (hash: TTcNh3M53FShxBm0xKV5WZZn8GR6GuYGWd3G/MpA0dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:37:55:02:75:ad:ee:73:cc:b3:c8:3c:cc:0d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=40d0c164951d7af88a92589a2460091e4e9a6942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:0f:38:29:96:d3:b7:a9:76:5f:7e:2e:af:
d6:8e:8f:f2:43:ed:2e:fb:94:dd:6e:80:68:df:79:
6c:c1:72:dd:93:47:24:d1:2c:65:b6:6b:4d:d2:08:
e2:99:a3:10:fd:12:5b:75:70:8a:a8:da:9a:d1:b2:
63:62:f5:11:15:3c:16:ad:ab:1d:7b:6c:de:86:c2:
26:26:48:8e:e9:d9:a1:be:14:f9:0b:8a:97:dc:9f:
60:61:a6:ef:da:77:c4:d5:b4:63:3b:fc:53:58:14:
e9:54:f3:d9:96:ae:aa:80:00:a8:d5:cb:99:e3:a5:
f3:0f:6b:dc:c1:8d:48:98:29:37:b5:36:45:3e:c6:
de:b0:7a:d8:d2:85:9e:e9:09:b5:54:69:70:1c:a2:
ca:0b:ce:46:4c:2d:cb:72:7a:cc:ea:d8:4e:ea:5e:
aa:65:01:a0:16:37:d7:15:7a:45:0a:7f:92:b3:5d:
2f:18:1a:8a:8a:7c:e3:02:fd:3a:51:03:e4:be:ca:
b0:65:b2:69:a8:c4:50:ff:5b:71:61:c3:1b:07:52:
3f:57:92:9b:b3:d8:22:2a:61:3d:f2:83:67:67:f8:
69:f8:4a:e5:2b:c4:69:48:2f:12:f4:a8:75:2d:1c:
d3:4c:88:17:83:f2:5f:c2:d4:39:df:b9:9f:40:2c:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D0:C1:64:95:1D:7A:F8:8A:92:58:9A:24:60:09:1E:4E:9A:69:42
X509v3 Authority Key Identifier:
keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:96:31:4b:c0:71:12:d2:68:f6:e3:91:a3:ca:31:e4:da:ac:
a9:bb:a4:f7:48:25:cc:6e:9c:d8:ea:b3:48:05:77:c8:d2:8c:
20:24:6d:d3:50:1e:96:12:73:40:12:e4:7a:08:31:cc:c9:1b:
a4:a7:f6:2d:41:e2:d6:e4:df:87:39:ef:fe:1d:6f:c7:a3:01:
d4:b9:43:b9:0f:1a:13:97:65:b9:63:8a:d8:00:44:1a:fb:5d:
3b:f5:79:3c:a7:af:95:b8:1d:92:c6:0c:1d:8c:50:b4:af:7d:
73:6f:59:9f:a8:e7:cb:87:bb:f6:94:4f:06:bc:83:6a:ec:c2:
f8:b8:0a:fc:a8:de:f1:f5:24:c1:65:30:4f:2b:fe:e3:39:50:
6e:28:e4:fc:e1:8c:19:ae:b7:77:d2:7c:9c:d7:cf:b0:8c:2d:
a3:cb:27:44:37:6c:8a:72:1e:c5:ab:41:20:25:14:a6:9d:13:
ee:e8:bb:31:08:2f:43:4e:28:8a:d8:46:5c:0a:fd:db:60:d0:
26:bf:44:f6:95:9f:1b:fb:65:fb:28:b9:d0:b4:09:16:34:63:
c6:bd:6f:c1:22:0d:1a:cb:f6:81:20:ee:8e:32:be:40:cf:7c:
5d:aa:b8:f0:3d:53:1d:ff:5e:64:61:f0:f1:e7:55:93:10:8f:
23:53:0a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:44 2025 by rpki-client