Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier: qFCFXWdtAiJqsEe89w1aYTE9I2s+2yNMR/zyfS8OCtA=
Subject key identifier: DA:5D:35:F7:51:5B:E8:73:A3:59:2D:D9:3A:25:E1:7E:BB:68:40:DC
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial: 019787347C5C624D40F19B0252009A9B8637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number: 15A3
Signing time: Thu 19 Jun 2025 08:00:53 +0000
Manifest this update: Thu 19 Jun 2025 08:00:53 +0000
Manifest next update: Fri 20 Jun 2025 08:00:53 +0000
Files and hashes: 1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: Ajy5hCShozA7fuKOADZwek2Bm+/dd1WH15NHsSRG+Zc=)
2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:34:7c:5c:62:4d:40:f1:9b:02:52:00:9a:9b:86:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Validity
Not Before: Jun 19 08:00:53 2025 GMT
Not After : Jun 20 08:00:53 2025 GMT
Subject: CN=da5d35f7515be873a3592dd93a25e17ebb6840dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:22:4c:a6:ef:50:6e:84:e1:33:57:6f:f4:
e4:6d:4d:ec:06:19:2a:c7:68:72:bc:a0:01:28:1f:
f9:ef:3b:c9:ec:96:eb:fd:2f:29:a3:ad:5e:e8:1f:
6a:f5:5e:a7:38:f2:23:bb:9e:29:6d:44:ed:7c:e5:
50:6b:8a:fd:1a:54:de:85:7f:78:53:c9:49:65:ec:
de:88:05:c6:45:6f:8a:31:6a:f5:f6:81:96:6f:26:
8c:37:7f:b4:1d:a4:7e:f9:7a:53:85:df:4a:85:dd:
ef:e0:73:5c:a1:02:ef:11:62:80:1d:2b:f0:8a:73:
cd:ca:6e:35:fd:7e:fc:92:c9:1c:a2:f4:f3:f0:f3:
a9:c0:fe:43:a3:73:00:d5:95:c7:4c:9f:df:c8:12:
0f:a5:e7:cc:dd:38:db:2b:27:17:0c:a9:e7:8c:f0:
b1:16:0a:2b:82:7b:46:27:81:57:6f:3a:af:98:fa:
be:c3:7a:91:1c:9d:b4:dc:01:90:09:8b:8f:c5:43:
63:cd:6e:70:53:45:65:fd:b8:dc:40:3c:9b:d3:e2:
0e:1b:b6:c3:f2:4b:d1:f9:b6:37:cf:ea:a7:0a:53:
01:09:dc:b4:02:e5:c6:08:af:2f:bd:25:eb:89:94:
54:95:85:b0:a4:ea:e3:0d:95:c4:2e:9c:8a:82:0c:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:35:F7:51:5B:E8:73:A3:59:2D:D9:3A:25:E1:7E:BB:68:40:DC
X509v3 Authority Key Identifier:
keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:25:3e:92:a0:b0:c3:95:b7:cf:33:1a:c7:55:76:79:77:9c:
4a:55:a4:db:e2:e7:a8:45:51:4d:f0:51:97:b5:2f:32:ed:88:
cc:87:a8:0a:58:c1:bd:25:96:ef:49:f9:5d:4b:59:d7:dd:d7:
17:ec:cb:4c:b7:8f:8e:8e:37:58:b4:27:99:4f:48:63:2d:4b:
ed:e9:36:3a:38:4e:6b:12:07:82:0b:4f:00:2a:82:53:51:09:
0f:b7:4f:29:13:01:2d:3e:cf:80:90:b8:e8:32:11:e6:e3:76:
53:39:eb:c5:05:46:43:87:23:a5:29:d0:d2:26:1d:e0:6f:fd:
e6:63:db:c7:5a:56:c4:e0:4a:89:33:d7:6e:c1:81:d5:cd:e7:
9b:c6:32:11:75:4d:cb:0a:7a:1e:79:6e:b8:0c:4e:99:0d:58:
a9:34:a9:2f:63:a7:4f:5f:27:81:21:db:9c:c0:6c:ad:11:91:
ca:9d:48:25:52:97:11:29:ad:83:08:66:90:8e:42:b7:ac:3c:
f7:35:55:31:9a:74:42:8f:f8:47:ed:fa:f5:cc:6c:c9:d9:bc:
dc:bf:b2:48:b2:50:a6:38:1b:fa:0d:a8:ea:2c:b7:28:0d:38:
7a:e3:45:5d:3d:e9:79:f9:14:98:4c:95:c4:2e:08:b7:e1:2f:
9c:2b:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:56:45 2025 by rpki-client