Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier: DYOpabNZ+RzEKPptZrAb3SjSj1fExROTU2ZY3mX/onk=
Subject key identifier: DA:2A:B0:61:A8:9C:4A:BC:55:65:B9:10:0F:36:C3:1E:84:13:14:8B
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer: /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial: 0197B6A2480B3FC219A1E311C2F9E5CBCD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number: 1039
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: bXwup2eDRWJRx9GTrYPVFoErhfk.roa (hash: UbhOIugJ4oofUAz2tZciGbACV9Kgx7pGWE+kfVDs8E8=)
2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: P8h9fN+u3/IvLBANnTh7RHmnqcHVXxc2uMq9kGxr2lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:48:0b:3f:c2:19:a1:e3:11:c2:f9:e5:cb:cd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=da2ab061a89c4abc5565b9100f36c31e8413148b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:c9:df:5c:a9:f4:37:ac:e5:2f:89:55:08:
47:44:4e:b2:ef:98:d6:c3:6a:15:df:4d:b5:6c:c9:
85:8b:b6:9b:e1:56:76:a9:17:da:84:f2:dd:6e:6d:
1a:50:d4:cd:26:c9:ed:77:9e:79:42:c3:6a:92:94:
77:51:bf:1d:60:76:cb:96:df:ee:76:99:73:b1:83:
99:97:9a:dc:0b:97:4b:bb:da:64:90:97:2d:0e:4e:
a0:ba:76:89:ec:6f:20:27:21:5d:fe:46:af:c4:9c:
ab:28:ac:cc:d0:20:41:8c:89:c2:fd:8e:0f:99:89:
88:9b:81:2b:92:71:c2:67:7c:50:51:a1:8b:b1:d9:
78:ee:fe:b3:81:13:0a:fa:fe:47:72:db:4b:07:a0:
a1:25:f3:0d:c5:24:76:ae:f8:15:50:5d:80:df:d9:
cf:94:95:7c:c5:17:70:7e:d0:2b:5e:f5:1b:f6:ae:
df:37:63:53:0b:a3:72:de:5e:21:81:70:27:5d:17:
4d:20:94:2f:46:3c:47:b6:52:7e:3c:f0:7f:6b:5d:
01:8c:a5:87:68:42:d8:d8:fc:3b:5e:da:bd:40:6e:
f0:14:60:26:56:da:25:0f:09:70:48:56:c4:d1:90:
db:ff:36:5e:47:ad:a6:15:7f:ac:94:fb:ea:01:17:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2A:B0:61:A8:9C:4A:BC:55:65:B9:10:0F:36:C3:1E:84:13:14:8B
X509v3 Authority Key Identifier:
keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:af:2b:83:81:fd:c3:2b:3f:53:80:30:6b:24:a9:59:cf:aa:
f7:8c:d9:29:05:65:84:74:fb:15:9b:77:4a:b2:f2:fd:b1:82:
95:d6:59:97:23:d9:43:3b:18:48:89:3f:2d:a6:fc:b3:ba:a4:
b8:7e:62:95:f5:47:31:70:8d:41:30:7f:1b:ef:25:4a:6c:ce:
de:1d:23:55:c5:25:de:fc:d2:c3:65:19:41:96:ca:71:c2:fd:
71:e5:ba:5c:d1:df:4f:77:d3:d1:23:90:67:72:c0:0d:0f:b8:
34:0a:02:51:16:c5:4d:14:ab:e6:02:89:cb:da:c1:18:bf:94:
74:1e:2d:e6:48:82:41:81:34:dc:49:82:e7:78:f1:6b:ec:73:
b2:4c:7c:58:6f:58:ba:13:88:11:77:f9:0b:43:7e:d5:31:3a:
3e:01:1d:74:9a:57:8d:03:45:cb:62:f0:d2:ac:a8:30:0f:3b:
f6:71:8e:84:6e:8e:b6:12:21:b8:a1:38:8f:71:18:e2:b8:8f:
89:83:73:22:9a:5a:c3:f2:06:e1:c6:12:98:8d:32:c5:77:b0:
c6:53:2e:59:c4:30:89:77:88:93:dc:2c:13:ed:26:f2:74:24:
3a:29:a6:cc:7f:8e:ea:2c:d1:a6:fd:f7:20:e9:59:28:13:a1:
8d:23:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:14:58 2025 by rpki-client