Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File: WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier: dlIa5GB4chjGH9G0wt/+zfP/JM1fUIHdaGRCtUCmHAc=
Subject key identifier: A3:AA:65:4E:FB:70:2D:94:61:48:B8:78:86:D3:A1:F7:FD:70:86:22
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer: /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial: 01976C98E3559849A722966E91DEE17D5FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 04:00:48 +0000
Manifest this update: Sat 14 Jun 2025 04:00:48 +0000
Manifest next update: Sun 15 Jun 2025 04:00:48 +0000
Files and hashes: 1: 02c0qJQBaigaXqN3maDpONIFFAc.roa (hash: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=)
2: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (hash: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=)
3: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: k+04ILbzN15zsh7Wg8Q2vW7dor13gShCd/hmk0/I0zs=)
4: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (hash: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=)
5: ioEYoSKyEtfdiu8IAgBkdSDUxq0.roa (hash: CEmR3YzuPC7K/CwWVdeEu1K1wp1B5QCNbwR4nRi5bvI=)
6: nIj-C3WdkAFcA4_Ngvkfutdaf_s.roa (hash: yzlIgktfxTBSgISHGYHZ7rHc6AI8aMue2aaA1Dfkxmw=)
7: navET64WjDznMyZwQ_DOauhQ_9c.roa (hash: 0cyJx0VGxqHx5SG278Ye2Mukf1TTlmRpgV9pjTpL9aA=)
8: uQzeyhb_YH9D-fUCEABxF4wv1F8.roa (hash: 8/LP96pPXoanusy0qN7hBVY8daOytWMa0c+vNmNso88=)
9: yMil0VU9iMTJivoi_lPAt-4Ce_g.roa (hash: AOwv0RlV94x3NlTYd1oZANIiYY1kB3TCsu+XGZoajDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:e3:55:98:49:a7:22:96:6e:91:de:e1:7d:5f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Validity
Not Before: Jun 14 04:00:48 2025 GMT
Not After : Jun 15 04:00:48 2025 GMT
Subject: CN=a3aa654efb702d946148b87886d3a1f7fd708622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:7c:d8:d8:4d:95:45:9c:bf:29:80:f1:46:
de:00:82:3b:a5:ae:42:2b:f3:dc:a6:4e:a6:70:a5:
ff:dc:70:c3:25:36:a8:1a:90:f3:c4:8d:93:03:c4:
ce:76:1e:74:31:e5:ed:2e:50:8c:11:6c:ab:4a:15:
9d:4c:d1:b7:df:87:67:0f:d3:47:9c:2e:de:80:71:
a3:8a:27:82:6b:53:04:74:33:a9:48:8e:a4:f7:66:
12:ee:81:aa:b2:24:67:95:b5:6b:17:e7:48:68:cb:
e7:da:14:7a:7d:a2:71:88:1a:24:51:19:38:ed:7a:
18:d6:1c:2f:a5:48:ca:16:90:61:5a:ed:96:e1:77:
65:d5:5a:a1:13:81:b8:50:ab:39:73:97:bf:64:66:
64:b9:47:dd:58:69:fc:74:a1:6b:23:d0:0e:15:df:
4b:cb:41:03:60:a6:53:a0:12:ea:92:23:62:78:27:
a2:d7:47:d0:b2:7e:1f:15:37:90:83:95:97:45:0d:
11:ea:f9:74:38:51:20:d9:81:c0:32:7e:fa:d6:e5:
61:0e:fc:a9:06:03:bc:fa:c3:e2:35:c9:a1:8a:22:
75:a3:70:6f:fd:b3:ab:c2:a3:5b:33:6d:cb:1d:3d:
eb:ea:03:67:38:17:f9:2d:4b:fb:db:c3:c3:b6:20:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:65:4E:FB:70:2D:94:61:48:B8:78:86:D3:A1:F7:FD:70:86:22
X509v3 Authority Key Identifier:
keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:db:ea:06:fb:af:ea:44:08:04:57:37:76:cb:84:f1:3f:c0:
1c:a0:9d:66:1f:21:13:f3:63:05:6a:22:b3:b8:a5:97:57:5d:
d4:5d:c5:07:7b:e6:85:7e:ac:fd:16:74:b0:23:e2:00:dd:72:
2b:c3:a5:c7:4e:fd:92:bc:6d:18:98:61:18:28:bc:ae:3f:10:
3d:24:f8:19:02:55:ba:f4:cf:ee:70:e9:e0:89:ae:a4:11:69:
a8:6c:b4:e3:a0:bb:a8:28:2b:af:e9:58:8c:4c:ac:76:24:04:
16:26:e7:58:2c:4d:a6:55:91:e3:19:c1:29:e8:61:78:ed:be:
7c:f9:b9:8d:94:06:7a:5b:f3:9c:d3:59:59:3e:72:ef:de:55:
79:ad:fd:6f:20:ff:02:54:e9:96:6a:1e:a5:5a:77:31:37:36:
ae:74:8d:b0:35:c0:00:a2:c0:0b:14:39:f6:a5:46:40:4d:79:
ab:28:51:7d:65:0c:c3:75:3a:a5:44:eb:85:9c:3f:0d:c7:84:
18:76:82:b1:12:c9:55:0e:ed:38:30:db:32:b3:47:01:f9:6f:
c4:24:8a:c3:23:99:22:6c:99:73:c7:fc:69:f5:7f:f4:55:2e:
76:50:c4:fd:2e:0d:ce:5a:af:b0:4b:47:b1:c0:1c:c2:6e:5c:
02:2b:4a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:14:07 2025 by rpki-client