Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: UVKR2hwuZHJXkarYUcvmB73/ZT0uLTRbXU9u8Je0xNg=
Subject key identifier: 44:ED:27:A1:E1:8B:34:5C:18:80:D6:DF:E7:A5:AB:C5:3B:CB:C9:97
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 01976C620AC7A347CCD579495AF4FB523CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 0E8B
Signing time: Sat 14 Jun 2025 03:00:53 +0000
Manifest this update: Sat 14 Jun 2025 03:00:53 +0000
Manifest next update: Sun 15 Jun 2025 03:00:53 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: TiQIeudAaafF1Ce+hhqtdV11ndAvvkNllQCy0JbPip8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:0a:c7:a3:47:cc:d5:79:49:5a:f4:fb:52:3c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Jun 14 03:00:53 2025 GMT
Not After : Jun 15 03:00:53 2025 GMT
Subject: CN=44ed27a1e18b345c1880d6dfe7a5abc53bcbc997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:83:86:63:1b:24:b6:37:a4:86:49:fc:ed:
6a:b0:cc:7a:87:f3:d5:2a:04:89:9d:3a:c1:95:5d:
0f:57:46:2f:99:7a:fb:7a:78:c0:c0:89:7d:65:42:
ea:d1:d9:2b:76:35:18:a2:59:1d:fc:02:fa:4f:87:
56:3b:8d:01:6a:0a:42:f7:f7:1e:8c:24:fe:9d:f1:
0d:c7:24:f4:21:4f:88:05:2d:b0:0c:07:66:db:76:
01:21:ae:05:8e:de:1a:d2:0c:e7:76:a1:d6:33:68:
4b:21:1e:90:59:7a:04:04:7d:9e:39:d6:90:7a:fd:
bb:de:dd:24:6e:bf:ca:cf:7e:0d:85:dc:fe:95:71:
d3:3c:5a:de:2c:57:0c:f8:dc:27:5a:f4:8a:03:21:
d3:31:b4:7c:c3:f0:3a:59:23:ee:a3:f1:f2:c3:a0:
db:eb:ad:48:e0:ca:17:58:40:91:b5:0d:aa:72:17:
13:08:73:d4:e8:c9:b9:07:a1:6a:75:85:1c:3f:db:
4f:06:d3:78:2a:af:a7:ed:66:a4:c8:5e:3e:39:7b:
8d:d0:b3:95:1e:a0:43:9b:2f:27:f5:76:38:ab:fb:
58:3a:dc:65:b3:ff:6d:72:4d:eb:88:91:0c:36:02:
be:cd:47:35:90:b1:9a:98:63:76:a8:74:c9:05:b3:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:ED:27:A1:E1:8B:34:5C:18:80:D6:DF:E7:A5:AB:C5:3B:CB:C9:97
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:8b:04:b8:16:a3:a5:b4:e3:5a:1e:19:31:16:07:51:e7:da:
10:a6:3f:e2:cf:98:71:46:d2:f5:4d:1b:8d:c5:99:a0:2e:c3:
47:aa:d0:e8:57:a1:71:c8:a3:05:39:e7:ce:5b:67:eb:62:79:
ce:01:9b:6b:ca:e4:38:11:5e:ec:3b:38:d5:cf:72:3e:83:b1:
e2:76:e2:0f:ad:0f:75:75:7d:80:4c:ea:d7:9a:de:54:f4:55:
d0:58:19:ae:90:d3:a9:ec:19:c2:9a:f1:26:f3:1c:98:52:c6:
02:8e:79:bf:4a:6f:00:1e:66:42:d3:b8:1c:f1:b8:5d:fe:72:
af:69:92:05:3d:71:66:0e:c7:34:f9:f2:c8:b4:fd:ce:85:87:
2f:16:6f:3b:02:f8:44:8a:8d:43:2f:51:cc:28:3c:b5:1c:22:
ec:aa:92:00:2a:c4:61:10:77:c4:79:87:f9:6b:6b:31:dd:c0:
6e:12:b2:e1:a9:a7:20:72:53:34:f1:a1:75:e4:a2:3a:ae:93:
58:e7:8f:3f:59:7d:4b:2a:2a:f8:00:b0:64:81:bb:3f:72:11:
12:26:01:eb:7b:0c:fd:ff:e2:92:eb:47:b4:ee:9e:6c:5c:11:
b9:25:89:6c:d0:cc:73:fe:6e:be:e5:10:97:7c:d7:18:71:a4:
0c:3e:95:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:52:48 2025 by rpki-client