Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: H2H5Zxh6oQCo+AZ8zMcLQBYAD8h+/usR17drrO1qZzo=
Subject key identifier: D7:0D:BD:79:1C:45:6D:19:84:54:F5:38:13:62:90:A4:B4:1B:3A:F3
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 01976BF4525B2FD2311A8F857E51DFC9080F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 135F
Signing time: Sat 14 Jun 2025 01:01:03 +0000
Manifest this update: Sat 14 Jun 2025 01:01:03 +0000
Manifest next update: Sun 15 Jun 2025 01:01:03 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: bGyzPvjI+Lc+tMvkTGmZ07ZXGRSRi24p1P3EeZMvSp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:52:5b:2f:d2:31:1a:8f:85:7e:51:df:c9:08:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jun 14 01:01:03 2025 GMT
Not After : Jun 15 01:01:03 2025 GMT
Subject: CN=d70dbd791c456d198454f538136290a4b41b3af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:00:ca:c7:25:33:e4:23:0f:66:01:72:d0:
c6:6f:db:d9:d6:2c:39:4d:dd:e4:a6:fe:1f:f1:ef:
b4:6b:04:54:17:3f:13:45:ad:96:f6:60:bd:66:d0:
be:c0:4e:4e:4a:a0:3a:90:cd:1e:4d:47:ae:f6:3c:
c4:e6:66:7d:f0:37:1f:99:15:ad:15:01:80:dc:e7:
3a:91:2c:51:fd:33:54:46:e2:75:92:38:ba:9e:d6:
1d:b4:f0:cf:d8:81:2b:15:83:0e:63:66:72:71:ce:
c8:15:db:b7:f3:fa:2b:5e:f6:65:6a:d0:a3:f3:a2:
98:39:d6:28:b9:09:1d:85:86:14:ef:1d:63:37:b7:
93:b8:b1:d5:3d:4a:62:37:f7:af:ad:be:2e:4b:6d:
31:ec:db:5e:64:fc:73:b4:13:75:f2:5a:39:e6:b1:
53:04:37:4f:84:fd:e8:46:de:fc:24:88:35:a6:0f:
08:07:8b:d3:86:de:b9:80:10:75:b3:4a:ce:49:93:
69:4f:9a:a9:b0:19:50:f6:a6:c8:f5:f1:0f:fa:3f:
58:bc:9e:d9:f3:07:6e:ed:56:e7:80:70:b5:4f:c5:
ed:e3:9c:d5:1f:b3:5a:2e:cd:00:66:cf:4d:d3:25:
89:41:aa:da:43:0b:be:80:75:22:7c:29:9d:5b:bd:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0D:BD:79:1C:45:6D:19:84:54:F5:38:13:62:90:A4:B4:1B:3A:F3
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:36:4d:31:7e:eb:25:86:36:16:8b:6e:9a:c1:bd:be:53:
49:b8:b8:89:ec:9d:c5:37:8a:52:bd:34:ab:58:27:66:31:0a:
9c:56:64:15:0c:bb:4e:02:89:6d:b0:49:cd:c2:0b:f3:f1:a6:
78:17:73:3e:f2:e8:b6:93:ed:aa:54:ff:e4:e6:cb:c1:ab:32:
95:4c:ac:e5:0d:06:05:5e:f7:bf:e5:29:95:f3:1e:25:d7:b4:
71:9d:76:9a:a7:69:85:14:e0:8b:fe:58:47:09:c7:1e:ed:92:
8f:ef:f4:fc:d3:51:09:dd:1f:ca:ff:d0:53:cd:7e:15:36:58:
da:5f:ba:e7:9f:18:a7:0c:da:c2:1c:c9:a4:9b:57:b8:1d:d7:
8e:6b:47:98:fd:2a:b4:8b:26:fe:17:a4:e4:b6:45:43:f3:ec:
18:fa:2f:fa:62:02:cf:ba:45:55:a9:a6:b2:9c:58:f0:75:d9:
91:09:ca:d3:ed:24:4d:7b:f5:88:9d:0a:4b:78:81:16:f2:02:
0a:e6:c7:06:11:53:c5:e6:d9:df:c0:d0:1d:59:ac:1e:22:1d:
db:a6:f0:96:46:1e:ee:47:0b:9f:50:ba:61:29:ac:1c:cf:97:
34:60:be:02:98:88:ff:31:85:8d:27:67:c1:fd:3a:a3:86:5e:
19:2a:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:18 2025 by rpki-client