Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json)
Hash identifier: AyKB3K9V6RZ/L6/Xfls6eZgh76BbXqT72AvZoFQy6mc=
Subject key identifier: 54:F3:81:60:5B:69:A3:AC:E4:E0:90:D2:66:07:36:5A:39:86:A5:B2
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial: 01976884DA0970C2B4D500DE5136E76FC192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
Manifest number: 0EE0
Signing time: Fri 13 Jun 2025 09:00:26 +0000
Manifest this update: Fri 13 Jun 2025 09:00:26 +0000
Manifest next update: Sat 14 Jun 2025 09:00:26 +0000
Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: amSgrA40iUYYTbuio87AU3nyCiDhI/+Kysxau3QM3UA=)
2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:da:09:70:c2:b4:d5:00:de:51:36:e7:6f:c1:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Validity
Not Before: Jun 13 09:00:26 2025 GMT
Not After : Jun 14 09:00:26 2025 GMT
Subject: CN=54f381605b69a3ace4e090d26607365a3986a5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:a8:11:d4:2d:89:e8:7a:38:f0:14:1d:1b:
5b:5d:f3:17:c2:b4:4b:08:b7:11:95:5e:11:fc:0b:
b6:62:44:46:dc:56:0b:08:10:f5:97:4d:5f:78:af:
bb:74:1c:5a:cb:9b:92:d4:f2:54:ea:6d:62:73:6e:
a3:61:e5:69:d9:9b:82:d7:e4:5a:85:e5:63:e7:1f:
dd:e4:4d:75:18:2f:49:50:99:0f:41:6d:bc:65:c5:
69:ce:c4:4f:71:98:3e:7b:ae:4b:40:33:e7:8e:9c:
4d:98:79:ba:3a:70:a5:d0:fe:95:a5:f7:e8:e2:f4:
47:79:f8:a4:7c:dc:83:75:39:e3:4e:d5:d6:4f:2d:
71:85:8c:2e:41:01:f9:1f:73:f1:1c:d6:12:55:22:
e4:59:7c:4e:4b:01:69:18:d8:fc:9a:db:4f:87:49:
d9:2b:5e:cc:b0:73:25:08:6b:47:98:a4:68:47:14:
6f:5f:6e:9c:f6:04:3d:83:d2:23:e2:a4:3a:aa:b4:
eb:c5:d1:93:e9:d1:73:84:f9:09:68:02:d7:69:c9:
d8:bf:b9:35:60:11:82:3f:bf:37:a3:93:59:b4:e9:
51:c6:52:ce:aa:c7:fd:a9:70:4d:dc:af:7e:18:65:
a4:48:b1:60:4b:7e:98:38:ba:e5:f3:d5:f7:95:0b:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:81:60:5B:69:A3:AC:E4:E0:90:D2:66:07:36:5A:39:86:A5:B2
X509v3 Authority Key Identifier:
keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:30:92:79:6f:ed:fb:33:6e:b5:05:ed:a5:57:66:90:5c:eb:
fe:ff:b1:cc:ed:b5:5c:4b:21:09:ad:43:f6:36:1e:93:b9:f5:
e4:be:74:52:19:08:ea:3a:23:b7:2b:66:5b:62:e3:8d:d3:04:
b8:dc:f1:49:33:00:8e:d1:e9:97:be:fe:c4:3c:5f:9d:1e:83:
df:9a:65:64:e3:c3:6c:58:68:ee:c6:07:94:b3:00:2f:13:0a:
6c:be:8e:00:1e:45:10:09:d3:02:28:6a:fa:71:49:e2:21:3c:
de:45:8c:a4:74:b0:c4:11:9a:98:24:48:1f:f2:ea:cc:f5:1e:
68:4c:15:82:50:b9:46:38:63:8f:58:cf:1c:5a:a9:30:68:f2:
b4:13:aa:5c:0d:e3:b4:53:2b:bf:f9:62:e1:7d:16:be:76:d6:
42:d4:12:37:26:81:ea:7f:95:c5:ce:da:25:9f:6f:52:54:bf:
fc:1b:d9:d8:83:e9:d2:fa:01:e9:d2:a4:04:62:d6:b8:7a:8d:
cc:61:f9:7e:b6:64:6d:34:aa:c3:6d:4d:9e:6e:12:07:33:93:
13:0b:ee:dc:8e:8d:4f:8a:4c:83:09:57:69:b9:55:c6:8b:af:
5a:6e:4d:82:dd:17:1c:6d:4f:23:d5:05:62:77:72:9b:13:5d:
47:73:98:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:13 2025 by rpki-client