Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json)
Hash identifier: EKDkn5U1p3IokG7Csj8IbS6kg74viGlrT12OIfGVfMo=
Subject key identifier: EA:D4:BF:09:76:99:88:99:A7:E3:60:2E:CA:E8:F5:CD:1D:8F:30:32
Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802
Certificate serial: 01976BBD783333F828D6BD58C99989722E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
Manifest number: 0FEE
Signing time: Sat 14 Jun 2025 00:01:08 +0000
Manifest this update: Sat 14 Jun 2025 00:01:08 +0000
Manifest next update: Sun 15 Jun 2025 00:01:08 +0000
Files and hashes: 1: 9c0rgR7sx5b0INcSJYu5W29d3Lc.roa (hash: y70EM6GErQtflpK0nFkjr6koXzt1x9WLonWw/bb44FI=)
2: GGiu1L5lhvZ8MzbHc6hTc-r37u4.roa (hash: rDG83BQh2P4hrlgqRkJ2V5CxzCdFANpJED+WOO84WlU=)
3: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: 8B9J5DFtF3ar1YkKQdzFdhU/VQNo4kPur8KtEdLAvEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:78:33:33:f8:28:d6:bd:58:c9:99:89:72:2e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59877720c014688494ea6910c83474de13e99802
Validity
Not Before: Jun 14 00:01:08 2025 GMT
Not After : Jun 15 00:01:08 2025 GMT
Subject: CN=ead4bf0976998899a7e3602ecae8f5cd1d8f3032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:46:71:bb:50:63:b5:27:98:58:52:b2:9c:
ee:12:90:97:91:74:97:61:9a:28:3d:da:ae:c9:b7:
99:6f:af:6e:eb:89:0c:ba:45:6e:95:23:c3:b8:6b:
4d:73:9b:c8:88:05:c0:1a:3d:0d:84:42:df:52:00:
b5:57:77:3a:a5:71:18:c3:94:6c:12:3c:57:89:e1:
6e:fb:cc:5c:7e:a1:8f:63:f0:13:65:e1:f0:74:32:
5f:2f:94:fe:49:dd:d1:55:6d:9a:a9:ea:48:89:f7:
7c:61:1c:01:f7:5c:ea:d1:1f:9c:44:5e:91:b1:0a:
5f:5a:c1:fe:84:d2:b9:9c:19:bb:d3:b1:29:70:2e:
79:b6:26:a1:8e:df:a1:f9:19:74:cd:17:a1:b6:12:
79:c0:08:8e:fe:a3:0d:c7:4a:99:0a:87:71:18:b0:
a3:cb:0a:5f:8c:83:68:4a:87:54:c1:2f:a3:f9:a6:
c6:5c:91:2a:1b:40:79:98:9c:0d:13:e3:03:1b:87:
d0:0f:26:80:03:8a:46:20:71:b4:58:f3:b5:1f:89:
6b:dc:41:3b:54:86:e1:11:f6:1a:54:f3:18:62:1f:
5f:78:1a:8a:8a:fc:b0:71:fe:e8:80:6b:5d:be:32:
d5:8c:6f:2a:03:d6:b4:d6:91:01:c3:70:4c:94:5a:
00:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D4:BF:09:76:99:88:99:A7:E3:60:2E:CA:E8:F5:CD:1D:8F:30:32
X509v3 Authority Key Identifier:
keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:f6:14:04:0d:2a:03:ce:ef:c4:ba:fd:84:15:23:45:cf:26:
1e:6d:06:a7:97:76:89:06:f7:7e:ab:c6:1d:c0:ba:bc:0e:57:
d6:34:34:ad:0c:54:41:3d:e3:30:1a:c4:c6:9a:84:4d:9a:48:
df:eb:21:50:0c:6e:22:3c:f2:79:c9:50:c5:25:2c:f1:e3:8e:
75:4f:d3:7f:ce:4e:9d:da:8a:bc:b7:00:2d:e0:84:ce:15:b8:
8f:21:b9:54:e7:4d:49:f7:3d:96:12:17:96:c0:1c:c4:aa:11:
ba:84:35:16:56:97:df:cd:86:7f:0e:31:d7:ce:da:ad:6f:9f:
18:92:5a:18:7b:7d:22:74:1a:b2:d2:1f:68:97:24:4f:2a:5d:
7c:1e:bc:9f:e7:59:cc:b4:97:a7:3b:ca:10:c0:26:9f:37:ff:
1c:e6:d3:d5:c2:71:8f:47:bd:05:b2:fe:42:d4:ca:21:e5:4e:
ab:98:ed:88:fd:78:4d:b8:a8:fa:20:d2:3c:91:0f:5e:8a:f2:
d2:8f:e7:7a:98:7b:f9:18:19:69:9b:1b:30:1b:f6:d9:ec:c1:
40:d4:3e:f0:29:85:b9:fc:c9:9f:5b:df:d0:7c:cd:19:85:68:
74:4c:45:28:ca:40:e2:6f:93:b7:3a:f7:e1:40:76:f7:56:b6:
05:6f:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:27:00 2025 by rpki-client