Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: VgLRlP1L3fvV93xYg3NbHKWwb2mdrQ/pM8dKJLG8QtE=
Subject key identifier: 2B:1F:C6:43:D4:4C:74:DE:9A:EE:47:A8:90:F1:26:50:8C:A7:42:C3
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 019776E5CA45E41223D2FEC7EFC2A586CE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 07BD
Signing time: Mon 16 Jun 2025 04:01:00 +0000
Manifest this update: Mon 16 Jun 2025 04:01:00 +0000
Manifest next update: Tue 17 Jun 2025 04:01:00 +0000
Files and hashes: 1: Ht6Wd5Bw2md9CUATtRL2VX-XFlc.roa (hash: 6oTLBNPocrrlaUNBq/IOSo88GlYRhWvOfw5kea2nyRc=)
2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=)
3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: EyIIyh24aT3qr9v/qORTztb5v6rmLxi9zRI5hC0xcsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e5:ca:45:e4:12:23:d2:fe:c7:ef:c2:a5:86:ce:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Jun 16 04:01:00 2025 GMT
Not After : Jun 17 04:01:00 2025 GMT
Subject: CN=2b1fc643d44c74de9aee47a890f126508ca742c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:cf:ae:03:98:81:9c:cb:bc:99:45:04:60:
eb:ab:ca:d3:d5:8a:bc:7a:2e:66:b0:28:05:df:cf:
82:0a:4e:87:3b:45:11:8d:b4:aa:b1:f3:35:f6:92:
48:29:d6:47:49:5e:42:23:09:6e:a9:c7:0a:a8:74:
9a:df:99:82:1b:07:2d:4b:84:01:9f:b7:5a:64:ec:
4f:cd:41:31:6f:94:f7:ab:7c:77:6f:b8:58:b5:84:
04:5c:9c:a9:c8:98:bc:98:60:49:8d:97:51:e3:19:
b7:ec:65:55:d6:80:78:7a:24:07:2c:70:a2:fa:7e:
31:44:c6:3c:d8:6c:71:dd:57:71:90:56:d6:06:8d:
42:c1:60:d0:fe:91:00:02:64:29:21:6e:7e:61:e4:
36:07:48:89:85:4f:aa:2e:30:86:eb:59:bf:16:bf:
d6:32:22:a5:87:c9:c1:cd:2b:ad:e8:d5:cf:b6:47:
51:df:09:cc:dc:89:67:9f:3f:b1:f0:3a:75:4c:96:
ac:71:3d:02:f5:12:a8:d1:d1:d4:f0:cd:92:28:66:
ab:da:ac:48:b5:36:98:3e:06:92:bb:04:21:b2:fb:
b6:fa:f4:60:d7:aa:99:8a:77:b1:0a:73:c4:5c:f2:
22:c4:d9:c4:b4:20:ef:eb:f2:a2:e1:12:cb:bd:11:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1F:C6:43:D4:4C:74:DE:9A:EE:47:A8:90:F1:26:50:8C:A7:42:C3
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d1:92:76:1f:a9:40:c4:26:e3:83:89:51:b3:a5:3a:34:53:
da:08:6e:75:c8:9e:64:83:6b:44:87:00:30:6a:c4:62:17:9a:
73:7d:ca:58:33:bf:71:ad:75:67:7f:f1:6a:c4:ba:1f:2b:3e:
e0:7c:eb:5c:c6:b9:df:ed:17:e2:b5:b1:8d:20:39:1c:7d:2e:
39:e9:fe:92:fa:59:6f:86:00:bb:a0:d9:28:35:68:00:89:af:
23:2c:88:f7:c6:1d:83:e8:9d:1a:80:21:08:f5:d0:b7:78:61:
87:71:d8:0f:b6:de:46:fc:85:20:81:4f:a3:60:a7:f3:5b:98:
a4:f0:97:07:66:7a:09:40:7c:fb:fc:69:ab:e4:b2:72:88:d6:
5d:a1:e6:af:91:98:1d:01:61:f5:02:e7:c0:15:c8:fb:fb:49:
13:59:10:b4:ed:10:c2:95:b7:4e:5a:10:7e:a3:1e:5b:0d:8f:
50:92:b4:52:34:23:d1:cc:80:e5:26:0e:5e:83:ca:da:77:c5:
76:09:7c:c5:a7:7f:f1:58:9e:77:65:83:c6:0e:24:d6:8f:ee:
44:33:31:18:a7:76:21:d1:3d:cd:4b:a7:06:1a:83:fa:71:e5:
e1:b3:e6:8c:87:e9:a4:14:64:f5:e0:54:cf:4d:60:6e:db:8a:
bb:98:41:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:28:12 2025 by rpki-client