Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
File: Wl5msnWeULtpuwpECe6zukjEbFY.mft (raw, json)
Hash identifier: hFlG2fnmhIw6BsYNTB0xnVnPqrBEpbBMhWTU9NE6Ua8=
Subject key identifier: 60:9D:65:29:61:20:33:DA:DE:D9:31:2E:8F:99:76:F3:16:AE:87:CE
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial: 019872CFB883A958EFF0A6C1D06C5F6489ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
Manifest number: 0A0E
Signing time: Mon 04 Aug 2025 02:01:12 +0000
Manifest this update: Mon 04 Aug 2025 02:01:12 +0000
Manifest next update: Tue 05 Aug 2025 02:01:12 +0000
Files and hashes: 1: 7nT7CMWqjPir_XwHKqbnu1ePzNE.roa (hash: rJwmBaZJEsYi70qVqGwJX3XQ1oE4rtGxixdiQCCrNxY=)
2: IsS2ivhmvaY5V7fxNuQHr3dBGyM.roa (hash: yklIQ+z5Qr7H1DFt36Aa2yJc+TZg1VtSgJC8vNRgvAY=)
3: Wl5msnWeULtpuwpECe6zukjEbFY.crl (hash: jh/pzFpIFiPanP3zQDC6JwHmF4M/eKdvZTyNlWNYY4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:b8:83:a9:58:ef:f0:a6:c1:d0:6c:5f:64:89:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Validity
Not Before: Aug 4 02:01:12 2025 GMT
Not After : Aug 5 02:01:12 2025 GMT
Subject: CN=609d6529612033daded9312e8f9976f316ae87ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:34:e7:9f:68:7c:29:c4:f9:ce:c0:d7:34:
84:c0:fb:30:bd:bb:3d:88:44:91:6f:81:8c:82:96:
8d:72:c2:8b:ef:d2:0b:54:73:34:ea:56:88:af:b8:
d0:75:73:64:9a:e5:57:33:72:9b:2f:6e:c6:7e:07:
42:3a:7f:c3:b8:2a:b3:82:5d:35:10:66:1d:25:0d:
d0:90:21:fc:3f:df:93:6e:ca:f9:2d:e0:38:83:90:
79:a2:c8:2b:8a:a0:4d:28:ca:83:47:73:1d:92:74:
36:1c:7f:29:0d:6d:08:86:93:89:69:70:76:57:48:
11:30:29:cb:86:87:d2:7e:96:cd:9e:2d:32:06:df:
d2:18:8b:94:21:d0:9b:ac:10:cc:4d:60:24:1d:e3:
2f:e5:4c:07:5c:8b:52:f1:d2:b3:5f:78:e7:ef:b8:
6d:c7:d4:4e:a4:93:4d:95:ab:4a:4d:a2:0e:89:74:
c5:08:56:3c:f7:c2:85:4a:0d:23:97:07:50:9b:41:
e1:1f:49:48:aa:00:1f:43:02:15:42:ae:25:70:d6:
ee:eb:6e:2b:6b:81:e0:b7:b1:c5:5d:a2:71:56:8a:
71:ef:a1:a6:7a:e5:b0:7c:ad:2b:49:05:41:00:bd:
d4:46:8f:ce:83:02:42:70:25:03:6e:36:5a:5e:fa:
0c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9D:65:29:61:20:33:DA:DE:D9:31:2E:8F:99:76:F3:16:AE:87:CE
X509v3 Authority Key Identifier:
keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3f:9f:39:51:e0:da:1c:05:a5:75:02:19:a1:ef:f9:11:0b:
f5:57:43:21:a1:ce:0f:15:3a:fb:02:79:24:cf:55:e1:c0:1d:
a2:29:b3:7f:9f:de:24:38:87:41:cf:d5:37:31:bc:89:48:2b:
51:e9:0f:23:4a:f1:e7:37:15:8f:37:19:5d:4e:89:32:83:a5:
4c:1f:e5:1c:ab:d7:3c:a2:4d:aa:41:d9:26:4c:79:89:91:0b:
3f:9a:80:9c:04:28:83:54:5c:f7:78:2f:40:e6:96:20:32:8b:
7a:06:8a:b2:67:cd:de:b4:34:14:76:c8:9e:82:fe:36:1a:23:
98:1c:6b:d0:d8:25:cf:3a:f4:cb:00:b1:8e:dd:07:f8:08:41:
f6:e3:99:28:fc:2f:09:b3:72:af:48:d7:e1:67:7c:bb:24:89:
c7:82:4c:d1:48:a1:93:76:f8:c3:20:19:bc:5a:de:37:56:58:
93:66:3b:38:96:47:c7:4d:d4:91:8d:13:a5:df:24:3c:ff:f8:
b2:2a:10:ad:3b:41:d6:d5:cd:53:4f:79:80:71:27:3e:20:32:
d3:1a:28:22:47:e1:15:02:55:ff:cb:c7:44:ac:1d:c6:b0:e8:
00:eb:13:8c:df:c7:d5:88:c9:7f:b1:78:61:43:82:b6:5b:1d:
4c:ab:bb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:26 2025 by rpki-client