Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json)
Hash identifier: inxIHajPh5uqDHqOg7wVK3BiX1CRtj50KGaClSAEheM=
Subject key identifier: F7:E4:66:26:34:00:3F:71:46:55:B6:BC:EF:CF:76:B3:83:CC:7C:9D
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 01976EF54A9D4EBE4B67DF63E402918C0ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 15:00:58 +0000
Manifest this update: Sat 14 Jun 2025 15:00:58 +0000
Manifest next update: Sun 15 Jun 2025 15:00:58 +0000
Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: DdXUWhus0OgDTI8bz3n/GIqFfTez2phnGIer/Hqzu7Y=)
2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:4a:9d:4e:be:4b:67:df:63:e4:02:91:8c:0e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Jun 14 15:00:58 2025 GMT
Not After : Jun 15 15:00:58 2025 GMT
Subject: CN=f7e4662634003f714655b6bcefcf76b383cc7c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:61:76:cc:d1:05:9d:f3:0c:58:dc:73:ac:
80:0a:46:ff:d6:b3:b6:95:28:2e:72:39:75:b8:c6:
8b:9a:02:5d:fa:df:94:f8:73:c0:6f:c9:87:87:3e:
56:a7:cb:c1:1e:e9:73:e6:2b:0c:17:b8:e5:63:4c:
56:7f:2a:dc:9e:5b:9f:09:48:5d:4b:0b:77:23:d6:
d7:c6:a3:8d:4d:78:53:07:ed:48:7f:03:39:68:62:
dc:1e:53:6b:49:80:de:a2:83:8c:b1:1a:1b:8e:0c:
03:99:b1:17:11:65:06:de:2c:25:c5:2e:3f:ae:6e:
3d:08:41:07:93:a3:2a:2f:40:c9:22:d0:15:60:6a:
89:46:00:73:19:50:b8:4c:c1:ec:d2:dc:c8:fe:70:
7e:2f:c8:1f:c0:d9:5e:89:8a:47:ba:dc:eb:5c:7f:
9d:25:3c:82:28:1b:6e:6a:4e:66:a2:3c:db:50:68:
c8:f4:1c:07:2d:0b:9e:85:fa:08:27:2c:6b:4d:5a:
83:61:b7:f3:b7:bc:56:23:1e:91:17:26:6b:33:78:
4d:e1:18:63:78:22:d3:67:ea:b5:77:4f:9f:d6:73:
28:2f:65:cf:dd:9c:75:74:d6:3c:7c:0a:1c:b9:0f:
23:a1:51:d5:da:d1:ae:10:77:66:10:de:21:e3:c0:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E4:66:26:34:00:3F:71:46:55:B6:BC:EF:CF:76:B3:83:CC:7C:9D
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:76:20:cb:aa:c8:ed:2e:54:a7:c7:25:30:85:da:1f:f3:ea:
a1:f9:75:28:71:44:b1:0c:9c:ae:df:7b:93:b5:f7:ed:c8:f6:
af:1f:91:a8:0e:57:6d:77:d7:b9:68:f7:7c:dd:5e:ab:8a:1e:
c0:b0:55:12:f4:ab:dc:9b:92:00:0e:54:a5:d0:77:d9:7b:30:
dc:d1:ed:a3:aa:71:40:f6:ba:f0:fb:e7:7e:3a:22:a4:28:b2:
b5:84:4b:97:90:c2:17:43:6c:11:cb:e6:56:4a:1a:f8:62:fd:
97:fb:64:09:50:b7:1d:7b:d6:49:f7:b4:00:a4:1c:b5:cb:e2:
c0:ab:da:28:ab:bc:26:9f:33:00:3d:ae:3a:d3:b7:c2:2f:14:
1b:dd:a3:31:25:f3:cc:f8:09:dd:f6:4a:9b:50:d6:71:b1:c7:
f6:9f:28:e4:03:e8:f6:70:f2:cb:52:ca:7e:84:cd:fc:b3:bb:
9a:52:b8:83:87:f1:11:ea:dc:ab:1c:b6:06:ec:1b:26:02:08:
35:b0:a2:18:26:fc:37:8a:df:c8:91:d1:5d:93:9c:ef:72:dd:
88:3c:ad:c9:a5:13:4d:ae:83:45:82:87:90:db:be:af:27:a3:
6a:8a:b0:22:af:85:42:e0:7e:b6:3d:c5:f5:58:9a:b4:30:7b:
3d:97:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:15:01 2025 by rpki-client