Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
File: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft (raw, json)
Hash identifier: a6kwXETO7USXhvurwvuIkPoEg4ehCtxvJeE7NViwvS8=
Subject key identifier: 68:CD:CC:8D:F6:BC:A2:72:D3:58:C7:B4:29:83:6B:84:35:74:4B:40
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial: 01976C2AAE4EB6C7ECBBA6E8C886E261AD1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
Manifest number: 04CC
Signing time: Sat 14 Jun 2025 02:00:25 +0000
Manifest this update: Sat 14 Jun 2025 02:00:25 +0000
Manifest next update: Sun 15 Jun 2025 02:00:25 +0000
Files and hashes: 1: 1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl (hash: XZW5humUmaauXfpTSScRR55vnMu4e6OnJS5o0gIQWYs=)
2: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (hash: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ae:4e:b6:c7:ec:bb:a6:e8:c8:86:e2:61:ad:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
Validity
Not Before: Jun 14 02:00:25 2025 GMT
Not After : Jun 15 02:00:25 2025 GMT
Subject: CN=68cdcc8df6bca272d358c7b429836b8435744b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:d9:3a:1c:f5:56:9f:53:47:c3:d7:52:c0:
f1:de:6e:6a:57:92:29:59:2c:7b:e1:b8:da:d3:81:
91:4f:ba:8b:8c:4d:da:96:50:02:49:c2:d4:ab:7c:
cb:b1:8a:48:46:7d:46:5f:85:8a:a4:3e:d9:42:f9:
a4:a4:25:d1:10:2d:d8:fb:39:0f:92:c3:4d:be:d5:
78:dd:8a:11:86:57:86:8d:79:ce:7b:4a:ee:29:8f:
4e:a1:6d:2e:de:69:c5:3e:4f:23:48:85:9b:8e:86:
27:41:50:3b:bd:21:e4:e0:fb:f2:0f:8d:f0:b4:e6:
9f:ca:d2:07:e0:57:08:b5:03:26:c0:c7:30:61:af:
eb:1c:78:d7:06:1c:13:15:e9:3b:c4:25:b8:6d:e2:
68:02:61:d4:cc:d5:92:3b:1a:95:c4:7c:f4:c0:6a:
f0:c7:91:b8:36:50:9a:e5:32:9a:46:df:64:94:72:
a3:1b:18:64:28:65:4b:7c:b7:77:f7:18:13:e6:01:
91:73:be:3a:77:56:92:15:c3:08:f1:e2:b9:ba:ad:
c1:8b:d7:19:0e:e7:06:10:23:e1:c6:79:95:34:b7:
97:69:3f:47:49:fb:4e:51:74:da:86:9d:7d:e9:12:
79:6a:46:29:24:6c:4a:2b:ce:04:81:fa:0a:9a:9e:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:CC:8D:F6:BC:A2:72:D3:58:C7:B4:29:83:6B:84:35:74:4B:40
X509v3 Authority Key Identifier:
keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fe:5e:26:72:81:a5:ec:b3:3d:61:fc:c1:b3:87:ac:75:cc:
78:88:28:1f:be:8a:bc:7e:c5:17:ba:77:a3:e5:41:29:0c:03:
0c:b6:c7:b8:25:eb:6e:44:81:6a:e9:29:de:3b:46:bf:e3:dc:
ae:8b:73:d2:df:db:33:73:19:72:c7:00:37:5a:c0:64:ff:f9:
8e:8e:0b:8f:40:00:b1:c5:00:70:00:ef:f4:d2:d8:c8:6b:9c:
3c:1f:a0:fa:9b:37:da:7a:b4:47:22:51:af:c1:f4:8b:05:2c:
63:cc:41:85:a8:05:6a:0b:43:56:35:f1:33:7e:ff:a1:ca:23:
33:a8:17:87:86:d1:f4:a1:1d:55:48:e7:ca:bb:8b:48:54:76:
d7:54:5c:14:a5:63:88:07:d6:97:ad:a1:1f:aa:88:7d:73:13:
81:75:23:7b:62:7f:5b:53:84:aa:70:6e:55:29:76:05:0d:d8:
27:a8:b9:91:28:c3:1a:58:45:4a:71:99:80:29:5f:9f:11:60:
24:63:98:64:9c:73:29:dd:dd:7f:af:ee:22:f2:17:be:62:14:
8e:05:39:48:11:43:21:11:26:d2:6e:f0:fb:85:6c:92:64:11:
9f:04:0e:ac:7e:b5:c4:61:b7:d3:20:33:46:a0:5a:95:27:04:
96:b1:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:33:55 2025 by rpki-client