Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File: W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier: JFPDFzef1rq6Htr60uAmGYxO5aZRzzp5auG12NcwqlE=
Subject key identifier: 03:D8:9D:70:7A:45:9E:1C:E7:88:13:69:AC:14:26:DA:2D:96:EB:59
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer: /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial: 0197B6D78444EB24536AF66CF2C14C15CAB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number: 149F
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: QaaRy7ABeU9cSPshLT6zQgCy8vY.roa (hash: ClDKSK21Vz9twjL4L21G/7TWYD2/1/Ma/Dt0uF8yRp0=)
2: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: tNHYZhhegd0/mxoR3X+sS+d/fGsYL0GJp7esozz9ri0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:84:44:eb:24:53:6a:f6:6c:f2:c1:4c:15:ca:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=03d89d707a459e1ce7881369ac1426da2d96eb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:aa:39:86:fe:dc:3e:e9:13:09:69:03:d3:
1d:e7:2f:16:b3:5e:7f:40:19:0b:2f:52:f5:b9:a3:
73:36:3d:9d:ce:34:43:1d:a1:d1:6b:a8:3e:ab:16:
5c:d9:1a:b0:16:01:f1:b6:ac:46:26:e0:cf:0a:f8:
ca:81:0e:4d:8e:23:52:52:0a:5e:92:1e:6a:69:21:
2d:df:61:87:f2:91:c1:29:c0:5b:63:11:52:03:b2:
7b:92:52:fa:9c:bb:6c:04:0d:ec:85:f3:f7:2b:9e:
d2:c9:d2:cd:40:81:cb:42:1b:00:fd:9f:5f:40:d6:
0e:15:e4:0a:f5:f0:88:71:57:1c:2c:cf:58:61:46:
00:5e:1f:ae:9c:aa:1a:d4:f8:7b:3d:32:c7:96:1a:
d1:60:0e:ad:0c:ab:9a:de:ef:aa:6f:0d:ca:d7:22:
c7:47:cd:33:96:5d:1b:5d:ef:07:c6:f5:12:59:c8:
15:03:62:c6:71:79:f8:b0:94:79:62:5a:03:ca:da:
a6:9e:23:3e:7a:c3:85:ed:aa:71:11:f1:90:fc:01:
96:ef:7f:85:63:01:b4:67:89:0a:c9:8e:e2:d7:e3:
63:c9:d0:00:ed:14:42:65:b0:af:06:b2:80:11:6e:
02:9c:ac:b4:1c:dc:87:b9:62:0d:14:53:d0:b5:ab:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D8:9D:70:7A:45:9E:1C:E7:88:13:69:AC:14:26:DA:2D:96:EB:59
X509v3 Authority Key Identifier:
keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fc:1f:22:cf:4b:93:62:e5:9a:65:95:ad:13:fa:71:aa:88:
62:ba:80:4c:dc:fd:cc:89:c2:52:5f:82:86:b6:f8:c5:3d:78:
29:67:c4:cb:f7:9b:16:d7:e7:3e:47:55:72:77:06:07:6d:5e:
08:1e:45:1b:f4:9a:95:a4:67:a7:37:db:88:be:25:98:fa:56:
47:d3:c2:4f:9e:e8:8a:52:33:e6:c4:6c:65:d0:46:64:e2:05:
aa:58:60:f3:b2:18:b9:86:06:e2:f5:c2:75:b3:a5:70:8f:5d:
19:32:6f:84:2a:54:20:e6:99:48:90:71:a3:fd:6d:5e:9c:8b:
68:7f:76:73:fa:ec:d2:8d:2d:9b:d6:7e:a1:43:e0:79:0e:6d:
71:43:d9:ae:25:79:93:99:f8:25:1c:bc:ff:03:0c:f9:95:49:
3e:8a:fc:fb:27:ce:69:20:6b:27:b7:76:a3:6c:95:30:01:07:
25:f9:ab:f7:18:f6:88:94:1d:19:f0:98:93:56:0b:52:12:ae:
7c:e8:a1:72:f3:f7:d0:22:22:fa:7a:fb:f5:d6:8c:7e:93:bd:
8f:d3:44:07:cf:c3:53:2d:ad:aa:46:5b:2c:bd:87:b3:68:98:
15:02:ee:e8:40:d2:76:0b:e4:3f:e3:ae:f4:c6:20:6d:76:22:
20:f6:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:02 2025 by rpki-client