Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File: WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier: Y+yVq6jqm1wX3A/w4xnyQQ2JkWXTTfVSkweJfOcp6WE=
Subject key identifier: CD:81:FC:D7:B2:1C:4D:14:89:46:E6:3A:98:00:33:3E:EA:01:3B:55
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer: /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial: 019777C0FA41F358097E6E4591654AC89603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number: 1575
Signing time: Mon 16 Jun 2025 08:00:25 +0000
Manifest this update: Mon 16 Jun 2025 08:00:25 +0000
Manifest next update: Tue 17 Jun 2025 08:00:25 +0000
Files and hashes: 1: 19CW3KILFYPXEhHk2Ol76tPUYYc.roa (hash: vdEeJmbxLIeIAD2w3zH+n6I7kJJZC/K9fF2eOSXSZV8=)
2: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: z86o1YIiVFraqK4N6BmdzPsoJXt74ztulLvR6obmdOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c0:fa:41:f3:58:09:7e:6e:45:91:65:4a:c8:96:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Validity
Not Before: Jun 16 08:00:25 2025 GMT
Not After : Jun 17 08:00:25 2025 GMT
Subject: CN=cd81fcd7b21c4d148946e63a9800333eea013b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:5d:67:8a:e0:bd:a1:1b:5d:fb:02:92:00:
eb:f5:a1:c2:e5:3d:4b:4c:ba:fa:d7:29:79:2f:a0:
f2:fe:a3:51:60:50:f6:18:a1:1a:31:e1:46:4a:f8:
e1:ef:40:7d:f2:63:c9:55:53:87:66:08:e7:58:50:
81:b5:1b:73:7a:a3:10:41:d3:63:57:4e:7c:d2:19:
99:80:d5:0d:5c:c5:04:0f:83:41:cf:2a:93:d8:a3:
ae:3f:16:43:75:ac:1f:dd:f1:61:b1:3a:a3:52:94:
5c:e4:09:47:04:72:3a:ed:98:f8:49:75:3a:0e:b0:
93:8f:7d:12:02:9f:a8:f7:6b:bf:6c:0a:f2:68:a6:
5b:bf:43:32:f7:48:df:08:a5:44:a6:ab:ad:fa:a0:
06:e9:a1:ae:0b:e9:d5:66:91:ee:e7:a7:21:7a:d4:
85:69:e4:a0:7d:7c:52:34:36:ec:e3:b9:c4:72:ee:
11:fc:39:0c:a9:20:e0:8d:eb:50:5c:c4:35:20:f1:
a7:66:22:a7:d5:0b:f4:6a:55:fd:70:2b:d5:79:6c:
8f:07:2e:22:90:65:70:c1:37:1c:92:9f:95:a5:59:
5a:df:a4:8a:48:79:ec:de:ed:a7:c7:86:cc:11:73:
e9:96:c6:7b:a4:a0:4e:7f:46:10:f0:33:e3:39:48:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:81:FC:D7:B2:1C:4D:14:89:46:E6:3A:98:00:33:3E:EA:01:3B:55
X509v3 Authority Key Identifier:
keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cf:66:ab:60:ee:d3:97:9e:6c:3f:a1:ac:2a:d0:28:32:55:
2f:4d:bc:27:f4:c3:d3:e2:77:3f:82:7e:a0:db:9e:db:5f:6d:
2a:14:3f:02:78:11:07:e7:fb:83:d8:20:ee:a3:f5:91:5f:bb:
d3:d6:5e:e7:37:a6:ad:76:de:27:0d:2c:41:3e:b7:36:2d:58:
08:33:69:b0:e5:76:77:cb:2d:cd:86:06:24:99:3c:06:14:60:
08:e9:cd:56:44:38:63:b2:a3:78:3d:b7:a0:ec:14:7f:7c:16:
10:37:b8:77:02:ba:2b:09:f7:e3:37:f5:84:22:b2:a5:f4:56:
cb:b9:42:38:56:3b:47:1e:1c:84:6f:1c:9d:fe:22:f2:81:46:
43:6e:c0:81:b1:8b:36:60:12:35:6a:60:6b:56:15:72:01:bc:
51:10:61:e0:d8:e9:13:41:ca:56:60:91:ca:75:b4:7c:97:d9:
07:12:3b:5c:72:f8:89:7f:03:c8:bf:96:3b:3c:eb:99:2d:bb:
3a:c4:1a:20:63:3f:62:0e:15:2f:f7:40:c3:02:4d:3c:81:6f:
fc:63:f0:01:95:25:14:f3:01:ca:e7:46:f0:93:ee:8e:9d:dc:
78:bc:2e:6c:ae:49:8c:90:83:e6:3c:1b:cb:06:7e:d5:33:cd:
ec:0a:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:25:48 2025 by rpki-client