Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: rIV0kuLYTA/jA+D2xcF2bEmwd3XjfxUBZZ85aODM15Q=
Subject key identifier: 67:FB:C0:C1:A6:D2:06:CC:C8:DA:3C:CF:ED:35:67:98:D5:EB:01:94
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 0197B70E8E1DE8A0F5E91474FC4593C7182A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: F0
Signing time: Sat 28 Jun 2025 15:01:13 +0000
Manifest this update: Sat 28 Jun 2025 15:01:13 +0000
Manifest next update: Sun 29 Jun 2025 15:01:13 +0000
Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: UYyRJLsiiEvAsvTg3d71RfmiPSzU78D3HPi+7pnN2pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:8e:1d:e8:a0:f5:e9:14:74:fc:45:93:c7:18:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Jun 28 15:01:13 2025 GMT
Not After : Jun 29 15:01:13 2025 GMT
Subject: CN=67fbc0c1a6d206ccc8da3ccfed356798d5eb0194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:b9:d4:93:0e:b0:9b:06:7f:d1:60:09:52:
1f:f6:48:ab:db:3b:b4:15:bb:c8:30:92:4c:9a:a6:
4e:c0:6f:c4:d1:f9:01:55:14:81:6d:67:15:a1:ed:
a5:43:18:39:d0:3a:5f:bd:5a:46:70:14:11:8d:6f:
a8:59:9c:ad:36:ae:88:56:d1:71:19:21:59:e8:72:
26:a9:be:27:e0:39:7a:31:be:73:eb:e6:10:72:a6:
fd:84:87:3c:d5:a3:f3:c1:7a:07:d1:c3:5c:5e:f5:
0a:ce:36:bd:c8:d8:2f:02:70:37:0a:30:c3:51:d5:
0c:2a:17:cf:5f:23:16:1f:06:3f:73:1f:b8:13:6d:
f9:9e:00:8d:2d:92:53:e1:78:9e:cd:c8:98:f5:36:
ff:af:e9:e9:8d:c2:57:28:70:c6:cc:04:20:2f:c9:
23:9c:41:8a:35:0d:e9:a5:da:da:65:c2:de:69:e4:
10:e5:83:32:28:85:1d:c6:5e:bb:26:82:b0:74:85:
9d:9c:21:c7:ec:ec:b0:56:69:2c:87:3c:7f:7c:64:
2e:21:21:79:2c:c8:53:4e:4d:11:d7:bd:7c:f9:f9:
60:88:40:fe:ae:5b:53:2a:a2:2f:77:91:b8:d7:67:
9a:03:7e:3f:e7:4a:c6:69:4d:f2:c7:84:6e:d1:16:
13:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FB:C0:C1:A6:D2:06:CC:C8:DA:3C:CF:ED:35:67:98:D5:EB:01:94
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0d:81:37:8a:d0:7c:f5:6d:87:54:5c:c8:f5:be:f3:82:17:
d7:61:76:de:9c:15:fc:5c:36:d9:88:57:67:2f:e4:42:a3:e8:
12:77:ea:53:28:2e:ad:f7:7a:cf:e2:4e:83:6e:41:da:bc:0c:
7f:66:74:40:75:3b:83:07:b4:dd:75:c6:39:a8:1b:03:f4:31:
75:ec:c6:5d:a8:12:6a:49:71:ee:7c:bf:e6:d4:b7:9e:bb:ef:
40:4f:97:d8:30:4f:81:80:57:e5:81:cd:35:ae:df:a3:32:ba:
76:7f:5c:0b:59:62:2c:fe:ce:47:e0:da:3e:df:ae:2f:44:2d:
1c:8e:0b:01:44:38:db:2d:64:e8:8a:fb:44:d6:06:40:4e:b3:
ea:9b:b8:76:28:8c:41:85:14:62:0f:40:ad:77:0a:fa:10:27:
99:35:63:1d:7d:e9:84:84:2e:fb:6f:9d:40:fd:bf:e6:17:c4:
61:ac:18:f4:07:08:b5:70:33:66:c3:74:b1:55:a2:37:c7:64:
b4:db:48:ee:6f:c3:11:da:04:18:fd:aa:e6:ca:33:c3:3a:da:
c9:2f:3d:04:46:31:64:bd:65:f0:37:9f:74:6e:26:40:36:c0:
75:7c:9b:fd:08:3e:ed:77:55:89:d7:be:30:5a:ac:5a:0f:59:
60:53:b2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:19 2025 by rpki-client