Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
File: WyxHDbJENILhlSOVOnjB7woWlHk.mft (raw, json)
Hash identifier: WaEgl43ET4HdhNFVnivHU065dl+H3fQ5b4O6ydXkmTQ=
Subject key identifier: DB:A7:97:A3:73:5A:16:F2:21:E6:AA:82:21:D5:3D:AD:E0:DA:22:85
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial: 01976D3D9597B9D0D99FC391BB96652B8146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
Manifest number: 0D2E
Signing time: Sat 14 Jun 2025 07:00:41 +0000
Manifest this update: Sat 14 Jun 2025 07:00:41 +0000
Manifest next update: Sun 15 Jun 2025 07:00:41 +0000
Files and hashes: 1: 0AdevnLlsxFU0_MXijL2HLDuliU.roa (hash: Oq6mu5Hbl5chx/r3WVWbX/YQvEZQoJ2rWVh4OUcVSO0=)
2: WyxHDbJENILhlSOVOnjB7woWlHk.crl (hash: yloqOuG9NskuWxK7Ok2UHOi71VRGLNMKoZtnsyZTFhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:95:97:b9:d0:d9:9f:c3:91:bb:96:65:2b:81:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
Validity
Not Before: Jun 14 07:00:41 2025 GMT
Not After : Jun 15 07:00:41 2025 GMT
Subject: CN=dba797a3735a16f221e6aa8221d53dade0da2285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:6b:71:4d:d2:09:cd:ac:9b:67:02:1f:a1:
26:7c:0f:66:71:a1:e9:b3:62:a8:8a:2c:e9:71:c2:
30:cf:17:00:a3:4b:3d:60:24:a7:3d:23:b9:6d:4e:
63:a7:a0:0a:50:72:49:7d:8d:3b:12:41:83:12:21:
9b:dd:d8:3b:fa:29:5e:7b:21:d7:58:69:17:c0:68:
d1:33:75:33:02:34:07:56:cf:ad:0c:91:02:d4:98:
dc:ad:1d:97:09:0c:b9:cd:73:09:00:b1:93:9b:a1:
8e:ff:50:a4:3e:ed:eb:2e:14:c1:6c:3e:ba:f7:d3:
22:ce:c9:80:50:c6:f4:39:32:47:cc:62:66:ac:5b:
d1:01:b1:18:2a:32:3d:89:a8:60:cc:be:b8:1d:18:
65:df:40:3a:85:67:0b:67:90:84:b2:ca:aa:a9:12:
96:59:9d:3f:19:4d:f4:01:02:97:8f:b7:1e:bc:23:
88:f3:3b:12:74:20:95:58:72:dd:89:ed:c8:51:b6:
ab:59:3e:3c:6b:07:ba:7b:82:5c:3f:27:b4:b2:6e:
2e:e7:ff:1a:41:15:1a:66:06:2d:92:9c:2d:e6:1c:
26:3b:b3:57:b2:26:1b:a5:dc:b9:22:f8:82:d5:05:
56:f2:0d:8b:7b:40:21:9a:7c:e8:49:35:58:fb:ad:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A7:97:A3:73:5A:16:F2:21:E6:AA:82:21:D5:3D:AD:E0:DA:22:85
X509v3 Authority Key Identifier:
keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:59:9a:4c:da:c9:7a:aa:c7:94:4f:96:1f:8c:23:83:f4:7d:
8e:92:fd:6a:fc:57:6d:2a:b5:70:bc:79:26:ff:30:ba:81:3f:
c5:74:af:8d:5e:2a:b0:b5:eb:83:ab:62:70:2d:b9:35:c6:95:
61:80:93:8f:c9:fc:13:04:d4:2f:f9:f4:f8:9a:7f:0c:fb:da:
19:4d:15:8d:b8:69:b1:2d:eb:f2:62:00:67:c5:76:1c:ad:43:
45:b5:b4:97:d7:39:0a:29:b5:32:36:b8:a1:7e:a5:14:b7:37:
b2:a7:5c:c1:cd:3a:cb:f2:97:0c:80:34:7d:f8:cd:85:a4:68:
30:ad:2d:5b:e2:22:4a:01:66:02:24:46:3a:5a:80:d9:d2:cd:
7a:44:33:42:4e:ef:7e:ef:a3:10:cf:91:f5:1a:a7:8b:92:f8:
50:c7:57:62:be:71:eb:9e:ae:0b:5f:4c:42:cd:e6:b4:ce:3d:
99:22:0a:c8:fd:1e:89:02:c7:ba:1d:62:76:b7:6e:94:68:c5:
ce:d4:ac:52:51:ec:fa:93:b1:e9:96:5a:42:dd:95:5b:c0:1d:
fd:6f:49:3d:13:74:f9:c8:56:b3:ba:1c:7b:d3:e9:ab:2b:60:
82:7a:19:4d:b9:91:44:cb:18:10:ea:1c:6f:c2:61:b3:cc:9d:
8c:c8:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:31 2025 by rpki-client