Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File: W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier: 6VNsS+McpXskXKDnn5R6BSos6XIkiyKPr87Kmsc5HLE=
Subject key identifier: 4F:52:89:91:CF:8D:D5:D7:30:80:B4:F2:57:28:ED:50:D2:3B:45:27
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer: /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial: 0197B6D759357D6D3B1745039E07A77E3378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number: 1234
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: EXiQsCMCz1Rky4blVxWBUz0Ktz6uP79mBpizn1p+9Js=)
2: k0f9OoQq6B1aLa4kFQEIGk8_qxc.roa (hash: Zg6lE/FaFkljjUzS9qnwhWnpjXkAlp/DGZm1wnoBwyI=)
3: mfyRKyki9KIilboLxZkR4V98u1A.roa (hash: zMj3oFzyTUkut1k37DX3Mbj6z32e3XRjiKGOQwnR7iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:59:35:7d:6d:3b:17:45:03:9e:07:a7:7e:33:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=4f528991cf8dd5d73080b4f25728ed50d23b4527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:ac:6e:27:b0:ad:93:1d:9b:9c:05:12:46:
83:71:d0:1f:7d:74:f4:c4:45:82:75:db:1b:d1:28:
24:cb:0a:26:f2:4d:fc:13:1e:7d:f4:eb:50:51:69:
29:04:7b:dd:50:13:90:80:a1:d3:a4:17:62:7e:27:
29:48:38:ba:71:6f:82:32:04:1f:6d:4b:ed:3f:ae:
d1:fc:81:d9:19:49:c5:01:4c:d3:c5:3b:87:fd:ab:
96:e3:fe:2b:85:f8:98:d6:6c:ad:15:0b:ca:87:5c:
61:6a:b3:58:55:b9:04:cc:72:96:46:8e:3d:0a:8d:
71:4f:ca:1e:10:4e:72:b9:f0:87:3c:0f:1f:84:a6:
ee:82:39:1d:cc:39:4c:54:4c:5e:cb:d7:0d:ef:3c:
3c:dd:4d:8f:a6:97:5c:d7:3f:18:d1:10:2c:03:47:
43:08:d5:81:0a:7c:1c:72:ca:a1:61:81:9e:45:94:
5a:32:db:81:96:1f:11:77:5a:b6:8e:a8:55:da:81:
38:56:47:b3:47:d9:f0:84:f3:7b:18:5d:3b:9e:99:
09:7f:58:86:cc:a1:c6:31:0c:e9:50:35:5f:a4:ea:
e7:a7:16:9b:a3:e1:cb:06:da:0d:a8:8a:9b:ca:93:
63:ab:07:63:7a:66:8d:81:a5:f3:00:96:aa:41:ff:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:52:89:91:CF:8D:D5:D7:30:80:B4:F2:57:28:ED:50:D2:3B:45:27
X509v3 Authority Key Identifier:
keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:76:92:b4:9f:fc:3b:2f:69:63:67:0c:0f:97:d2:e2:52:c4:
e6:02:87:94:89:82:d4:e0:e1:45:75:a1:62:97:47:49:6d:52:
b6:17:0c:c6:20:3b:90:2e:65:64:45:89:ee:68:7e:4b:a1:ce:
e4:e4:25:e2:e7:5e:10:01:0b:15:18:a0:a7:fa:f7:1b:ac:fa:
65:7c:f4:f8:ba:53:ee:dd:51:69:4a:da:45:9c:96:1a:e4:8d:
e7:ec:66:b2:3e:9d:c1:3b:51:67:6d:7e:b5:34:87:f3:b7:dc:
a7:63:80:11:7e:cc:97:4e:5f:88:55:1c:4f:28:7e:fc:c9:f6:
4c:e6:d8:eb:5a:30:c6:2c:3d:b4:ef:d3:e0:33:55:55:c0:11:
5a:72:2b:04:c0:70:51:cb:ad:79:36:36:28:a4:d4:a8:3e:bd:
68:bb:e8:81:f0:74:a2:51:47:2c:7d:2d:3d:76:24:a6:da:da:
0c:f3:d4:62:39:80:15:d7:fd:28:d2:21:01:42:f9:4c:32:57:
29:f9:02:f0:62:a1:9e:82:07:84:05:00:aa:30:35:5b:1d:fa:
45:9c:3a:48:9e:a2:15:8a:da:4f:da:1f:37:0c:7b:e7:a9:b5:
d0:97:1c:99:8a:21:54:76:c6:60:f5:a3:04:f5:84:7e:9f:96:
61:38:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:44 2025 by rpki-client