Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: iKHV5vBxTIKAOUanGodt4a4YzTPonE9IbqTTNBQMosQ=
Subject key identifier: B4:52:21:65:4A:F9:FA:58:B2:E6:EC:10:14:86:68:70:2E:D3:59:DE
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 0197B70F209AC509A6A3F44D27E062996378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0BB5
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: 4Vga1X5O8Ijr13bTxLYX0RF8cHgW0aH67eMJuII/dpE=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:20:9a:c5:09:a6:a3:f4:4d:27:e0:62:99:63:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=b45221654af9fa58b2e6ec10148668702ed359de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:4f:e6:b4:d2:39:ce:58:75:72:21:a7:2c:
c3:66:9d:91:6d:50:10:ed:45:6a:53:b3:18:3b:c9:
c2:24:66:ab:03:10:22:4f:3c:6e:64:dd:e1:58:15:
b4:c7:03:e6:29:58:f1:f9:3e:d4:01:8f:65:29:e4:
bf:5f:40:31:0d:e6:6a:7f:df:2f:fc:93:b4:9c:22:
42:87:bb:ce:c0:99:09:43:b7:eb:6f:70:d5:88:98:
8d:52:83:f1:eb:6c:7d:f5:98:6b:ea:b6:c0:e4:5b:
cd:75:70:27:9c:c6:27:d7:27:09:24:06:2f:97:bf:
78:1a:10:57:a6:72:ee:2a:75:33:44:b2:ba:95:01:
fa:1f:b6:21:37:87:1d:77:85:b2:18:09:dd:ab:76:
0c:45:1a:1b:d9:43:99:a9:83:3c:18:47:4a:cc:fa:
a8:e0:6c:54:a6:d6:e1:d4:01:a0:4c:9f:94:6c:4c:
9d:18:52:63:62:6a:9b:aa:90:b8:c2:90:57:09:31:
b0:d9:e3:34:0b:d7:0c:36:87:71:43:c9:83:81:e4:
ad:a5:b0:ee:aa:f3:cf:fa:4c:77:e4:41:4a:e7:f5:
80:6c:54:cc:73:c1:4a:e0:8d:18:70:1f:53:3f:76:
1e:73:7a:56:b2:cd:df:38:80:89:df:30:d6:13:c2:
f0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:52:21:65:4A:F9:FA:58:B2:E6:EC:10:14:86:68:70:2E:D3:59:DE
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:07:ea:0e:45:37:3e:33:89:c9:61:5f:fb:b9:fc:ad:36:dc:
f3:d8:1e:1e:7a:8c:16:61:f9:0d:40:12:cd:a7:22:10:b9:3a:
aa:e3:8d:24:1e:8f:ed:17:03:f7:16:aa:1a:fa:be:57:1d:1c:
5c:df:42:f5:57:3c:3f:e7:1e:23:3c:2f:27:21:7e:a7:03:b7:
93:db:2a:c1:0b:d2:28:b0:6f:e9:e8:d1:6a:4b:09:3f:d0:e7:
00:68:cd:d2:41:97:2d:16:92:92:07:69:06:0c:32:30:1a:75:
18:c9:26:bb:19:09:96:cf:84:24:8d:7d:2b:2c:af:7b:04:7b:
ad:a9:bc:73:1a:57:06:43:b0:4f:ac:03:7f:39:fe:45:b3:de:
1c:8c:bf:65:a7:56:f9:d7:58:35:5c:9f:7a:8e:fe:07:fe:c9:
92:ff:ef:88:8a:8b:c2:58:23:7e:33:59:7b:24:a6:38:ec:05:
7a:b1:25:cb:9d:25:db:e5:f4:ec:47:cc:50:7b:b4:28:b9:6b:
9c:07:9c:57:8f:bf:f2:a2:c9:0c:40:9f:aa:60:b8:2d:b3:e3:
b0:a4:a1:10:fc:a5:9d:ee:e3:12:87:5d:15:4a:df:bb:04:46:
4a:07:22:ad:7e:3e:c6:e6:51:e4:d8:c3:be:91:29:e6:0a:5c:
e5:78:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:11 2025 by rpki-client