Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: DNWu8WOJDD7wRsylqV8bbn9yENhsG0L4VER+ciV5KqY=
Subject key identifier: 63:66:13:3D:A3:7B:B4:F2:A9:F9:EE:09:AA:96:8D:D3:14:B1:3D:57
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 01976BF46C963F5365AB5089423DFF695207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 0360
Signing time: Sat 14 Jun 2025 01:01:09 +0000
Manifest this update: Sat 14 Jun 2025 01:01:09 +0000
Manifest next update: Sun 15 Jun 2025 01:01:09 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: uvAJmtE0Nu7q2YN3O388YybqEfGnx61keYZ78g8qyks=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:6c:96:3f:53:65:ab:50:89:42:3d:ff:69:52:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Jun 14 01:01:09 2025 GMT
Not After : Jun 15 01:01:09 2025 GMT
Subject: CN=6366133da37bb4f2a9f9ee09aa968dd314b13d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:e7:79:36:e5:17:72:6f:5b:13:87:8f:96:
c4:8c:96:33:c5:d9:31:17:79:77:a3:17:6c:9e:a0:
61:9c:c3:01:18:5f:f5:6c:e4:37:bb:60:d7:23:a0:
25:dc:d9:0a:a4:cb:69:9e:63:21:82:85:14:65:c2:
1d:b9:08:75:6b:89:26:01:74:91:29:b9:a8:1b:6e:
b9:1b:cb:61:dd:53:1d:02:33:d0:90:a0:c3:40:39:
e5:f9:9f:32:a5:72:ca:60:99:87:38:c0:ef:a7:c8:
40:c8:46:20:a7:28:4f:21:22:0a:13:5b:4e:61:8e:
7d:da:0f:c5:cf:94:12:59:d9:fe:42:e6:d1:70:4a:
be:81:1a:eb:dc:f7:80:52:32:c3:58:6a:36:b7:ba:
58:fb:da:4e:95:33:a5:2e:13:b8:b5:07:45:e3:e6:
14:13:ef:82:22:07:32:85:26:ed:55:f7:0a:6f:f9:
e7:68:39:ef:c0:73:3c:15:2e:b2:dc:62:49:97:0c:
5f:31:47:f9:d2:97:a7:81:23:0a:a5:de:97:c2:40:
ac:dd:0a:78:7c:fe:3e:73:f6:87:7f:bb:01:95:bd:
15:8c:1c:b5:30:be:c9:82:dd:38:72:69:1d:53:97:
43:0a:f8:7d:46:da:34:6d:d5:73:71:8a:70:09:7e:
c9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:66:13:3D:A3:7B:B4:F2:A9:F9:EE:09:AA:96:8D:D3:14:B1:3D:57
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fc:0f:df:46:40:7d:f7:51:6b:56:ed:0d:de:7d:ae:0f:83:
b7:3a:e5:5c:25:da:4e:68:11:c1:8d:24:46:7e:0e:b5:9f:d3:
6f:d6:d7:35:fd:f5:7d:b1:12:56:32:00:50:3c:40:91:8d:18:
47:c8:55:23:21:4e:35:4a:13:90:10:81:fe:73:14:29:31:2c:
e1:6c:2e:a6:98:e7:da:68:19:57:1b:93:d4:de:6f:19:b7:ea:
b1:0f:08:24:84:30:77:cc:97:ca:61:30:62:c9:f8:d9:c8:d9:
2b:02:ba:f3:58:92:f8:81:ba:2f:d1:f1:ad:e5:9c:8e:67:65:
80:07:af:61:33:79:8e:96:f1:5d:de:ad:21:07:55:d2:9c:0b:
d5:5a:8e:26:48:ea:f1:2a:e5:50:13:e8:cd:e0:d1:1e:9e:39:
2c:e3:21:7c:f4:76:59:ee:4e:53:b9:eb:3b:08:eb:41:98:3e:
90:20:5b:de:c3:80:f7:6d:fe:03:63:fe:a5:fd:70:6c:70:10:
24:ea:e9:3d:77:14:d9:9c:76:91:28:89:26:ef:73:5f:f1:3e:
92:5f:53:cd:d0:3a:bb:5d:bd:7f:92:6b:0c:01:f4:12:5d:7c:
f7:7b:c5:f9:fc:4c:1c:48:22:85:d1:ab:5b:b3:38:b5:ba:9a:
d8:20:48:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:08:36 2025 by rpki-client