Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json)
Hash identifier: TH58SUSl1qx08wOxN3AobjdgbuXEijOJqWXF8AzgImI=
Subject key identifier: 18:14:51:91:0E:0C:C5:27:BC:6B:27:91:2A:55:17:E7:5D:29:67:3A
Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Certificate serial: 01976929F7EAA536847C23F92BD4845CA2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
Manifest number: 0DBB
Signing time: Fri 13 Jun 2025 12:00:47 +0000
Manifest this update: Fri 13 Jun 2025 12:00:47 +0000
Manifest next update: Sat 14 Jun 2025 12:00:47 +0000
Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: NBJ/LLrPbuMofhWB9t75SQ5ELKo90X/Xe/HcjXUN2q4=)
2: gRqe05O7FJ-3whaf6RiaMKovVHw.roa (hash: Amo4rFyICByEK7RCP/ax/RVJMXu+W6BkFpTvi0xsm7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:f7:ea:a5:36:84:7c:23:f9:2b:d4:84:5c:a2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4
Validity
Not Before: Jun 13 12:00:47 2025 GMT
Not After : Jun 14 12:00:47 2025 GMT
Subject: CN=181451910e0cc527bc6b27912a5517e75d29673a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:35:8a:1e:60:0e:0c:75:95:17:00:a4:83:77:
29:25:71:11:e8:05:ed:49:5c:2c:f4:65:48:89:eb:
a9:35:d2:85:05:e2:b1:89:75:35:b5:ea:1a:07:55:
63:64:01:2d:5e:bb:37:72:21:59:7a:5e:3e:1f:41:
da:c4:a6:26:38:88:4b:c3:f5:4d:11:96:c8:3d:c9:
00:f5:04:6d:95:02:fd:07:ba:f0:e8:f8:e1:38:82:
29:34:3b:44:37:0a:c4:b4:7c:30:5b:b1:05:4a:6f:
f9:e9:38:bb:be:81:97:81:84:a8:e0:70:2b:1d:65:
b1:22:a0:90:ca:ca:c7:b6:e3:09:aa:b8:59:58:1e:
62:fd:fb:87:ce:6a:a8:23:53:ee:e2:97:fe:0d:c1:
01:98:dd:28:62:62:4a:36:16:9b:38:9d:91:3c:0b:
77:50:04:6e:70:1d:84:34:9d:97:4a:e6:59:4b:18:
6c:33:5f:dd:ba:b8:92:3a:01:30:d8:33:a2:c0:46:
2a:dd:fa:36:3e:ee:96:b7:70:68:ab:2d:79:78:21:
7a:e1:47:22:ea:24:44:9d:83:e8:7c:25:ef:d4:05:
c8:71:55:03:5d:d2:64:56:2d:15:83:64:89:99:4e:
3f:00:f5:dc:ee:86:dc:51:be:29:9e:e7:8e:cf:2f:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:14:51:91:0E:0C:C5:27:BC:6B:27:91:2A:55:17:E7:5D:29:67:3A
X509v3 Authority Key Identifier:
keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d4:f1:d7:f1:6c:68:d9:49:ef:cd:fe:25:45:eb:97:18:fc:
2a:9c:b5:ed:1f:91:8f:29:7a:20:c0:a0:da:d7:ea:3c:d2:a7:
65:f7:ff:01:7c:22:62:5d:09:2b:60:df:5b:de:46:7e:d2:af:
3d:10:bf:98:c9:0d:f2:9f:78:0d:ff:e1:1e:6e:e0:6e:07:d9:
ef:29:4c:f7:b0:18:7c:ef:eb:85:29:99:ed:59:f6:9d:71:51:
56:2c:36:42:07:41:15:aa:87:20:86:9e:b5:bc:40:79:ac:1b:
85:f6:7a:9d:4f:87:a2:a0:b7:c0:b3:56:9c:44:25:54:55:7b:
7d:54:c7:0f:85:80:88:39:4a:20:a9:ec:99:e4:00:46:42:e7:
a7:d4:8a:3b:d5:f0:fd:09:c3:71:c8:62:38:22:67:26:4c:fb:
6c:7d:20:03:2a:a8:19:a8:d2:16:28:20:04:46:18:51:a8:64:
9d:eb:33:1d:f1:2f:75:f1:fb:01:56:0b:62:83:fa:07:e3:88:
4a:3e:6c:d5:0f:19:a8:20:c8:e1:d6:02:01:bf:52:28:24:13:
9a:04:14:e8:ba:aa:f2:9b:00:67:82:f8:60:c4:f8:69:55:2c:
5e:80:85:67:8a:68:27:59:90:af:5a:ce:7c:75:55:53:8b:b6:
38:80:0a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:52 2025 by rpki-client