Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier: WdpA+2H5tTZ/Me+Y+JQUv/MACSgIJAiQLz1GLpYxZDI=
Subject key identifier: 41:D8:BD:80:33:DF:3D:38:93:B4:49:DA:2A:32:70:04:DA:82:17:10
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial: 019776E570D51867CEAE50097643958C725E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number: 1593
Signing time: Mon 16 Jun 2025 04:00:37 +0000
Manifest this update: Mon 16 Jun 2025 04:00:37 +0000
Manifest next update: Tue 17 Jun 2025 04:00:37 +0000
Files and hashes: 1: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=)
2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: bVbqadRC7+MV8fscEDJcBZbmvK9L+V0bhEcoEqgE8lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:70:d5:18:67:ce:ae:50:09:76:43:95:8c:72:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Validity
Not Before: Jun 16 04:00:37 2025 GMT
Not After : Jun 17 04:00:37 2025 GMT
Subject: CN=41d8bd8033df3d3893b449da2a327004da821710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:67:ca:21:84:ff:ef:5f:17:38:3b:eb:c3:
19:9c:45:cc:52:0d:09:5b:87:eb:ee:43:e1:64:64:
9d:aa:1d:42:1f:49:ce:19:b8:5a:44:42:8f:44:c8:
f5:fc:0b:f9:ce:1b:97:6d:47:c8:78:cc:44:19:76:
75:bd:6c:56:c9:f3:23:d3:dd:85:44:00:b1:24:66:
f9:52:6b:20:0a:91:c8:1c:58:1d:2f:16:bd:c3:7b:
cc:71:17:5e:ce:05:78:38:cb:60:06:1b:be:a1:d7:
dd:7d:58:73:95:03:b3:20:ee:33:82:0f:77:97:dd:
88:04:c3:25:9a:e7:34:93:c8:80:99:8d:31:6a:fa:
9c:03:2b:81:bc:b3:38:4b:03:17:f6:c8:31:e3:53:
e6:81:97:c8:90:45:3b:56:71:c8:3d:ed:e7:47:9f:
a6:d5:c2:03:58:65:85:57:be:84:ec:51:8b:0f:b2:
59:f1:9e:43:05:23:2f:ba:3a:bf:f7:5a:e8:35:e2:
f4:7b:7a:05:57:3d:52:51:8e:49:97:5f:d2:9d:55:
7b:2c:fa:81:9e:a9:f4:2e:d8:2f:1a:71:42:ad:f1:
e7:22:ca:43:01:e2:84:6a:34:40:e8:97:43:1f:55:
2d:aa:a7:51:7d:c3:d2:03:b6:1a:9c:83:51:18:67:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:BD:80:33:DF:3D:38:93:B4:49:DA:2A:32:70:04:DA:82:17:10
X509v3 Authority Key Identifier:
keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3b:e7:b2:c5:26:da:ca:a5:36:e3:5d:91:1b:53:64:3e:c4:
ad:c7:cf:2e:18:2a:9e:4a:24:fa:85:60:fa:bf:0c:a1:8a:d2:
41:f4:c7:2c:96:da:53:51:4a:c0:8f:0d:89:fe:81:15:17:e9:
15:2d:8f:26:45:b0:f1:31:15:f9:3c:f6:c2:82:f3:79:03:dd:
51:5f:e7:fd:4c:bd:aa:b2:5c:86:9a:c1:17:10:8a:5b:dd:35:
99:f1:b4:99:3d:ee:5b:1e:f1:81:3c:14:d2:72:42:54:03:2b:
ea:e9:2f:df:8d:06:28:c4:9c:01:03:e2:29:80:5c:b6:5e:1c:
d5:22:b2:6b:6e:2a:7b:14:41:54:c9:50:cd:b1:3a:d7:df:59:
6d:0f:68:91:bf:fa:c9:de:6a:54:d3:d8:40:cb:50:41:25:72:
70:30:7e:4f:91:e6:09:c7:a7:02:9c:55:cc:68:c5:69:0b:f5:
66:dd:88:97:b8:ea:53:8e:6f:18:bb:bc:08:4c:3b:7e:35:fb:
d0:5c:3b:19:3f:f3:14:fa:87:d6:fd:fc:2d:15:fd:3e:85:4e:
1c:5a:29:44:fb:d7:33:91:c1:34:f5:3d:8b:12:6a:d9:65:b9:
7f:dd:b8:51:a9:6d:da:c1:89:97:ef:39:d3:0b:b6:e5:70:81:
9c:d4:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:20:39 2025 by rpki-client