Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier: 6uxebqFL+xLvNFSxdGMEPcsuT5zh1LP7oXSjAZ49ghI=
Subject key identifier: AA:84:51:B4:78:D4:69:1D:5B:F9:E9:C6:76:91:AF:98:B0:A9:20:3F
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial: 019768F2C86D0B0D0D9A32062475FBA30A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 11:00:30 +0000
Manifest this update: Fri 13 Jun 2025 11:00:30 +0000
Manifest next update: Sat 14 Jun 2025 11:00:30 +0000
Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: O54o5hGo7WrtYMmtwyPmaPIsWpx1pUy3JVT9LFE0qFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:c8:6d:0b:0d:0d:9a:32:06:24:75:fb:a3:0a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
Validity
Not Before: Jun 13 11:00:30 2025 GMT
Not After : Jun 14 11:00:30 2025 GMT
Subject: CN=aa8451b478d4691d5bf9e9c67691af98b0a9203f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:b5:72:4d:2b:65:1b:10:5a:5c:1e:b4:21:
53:74:fe:ae:b4:ec:11:82:7c:1e:82:ee:d7:03:89:
f0:91:dd:cc:fc:b9:3d:e6:e5:9a:72:ef:a5:0c:69:
2b:fb:15:51:05:eb:18:03:92:33:db:60:f8:4a:4e:
29:47:e9:dc:f4:dc:ac:54:59:67:ee:52:3b:95:a4:
40:ee:e9:3c:1b:db:94:b3:69:7c:97:d9:02:14:61:
c4:b3:9c:24:2d:eb:59:d9:e0:08:98:3e:79:dc:de:
a5:b0:b3:d2:cd:c1:58:1d:95:ea:60:f8:b0:39:3f:
81:2c:01:5a:94:cc:b1:9f:d3:17:c8:1a:31:f0:eb:
17:bf:01:d4:a9:8c:9e:d6:c7:79:da:f8:bf:4e:1b:
72:98:52:5f:d1:9e:bb:87:4e:a8:47:71:33:cc:58:
8f:7c:10:6d:25:2e:b2:ed:0e:32:12:51:b1:db:c3:
6f:00:96:63:30:85:bc:2a:84:5a:51:81:44:38:8b:
d9:94:3e:41:6c:43:e0:4a:b7:ba:6a:9a:53:53:0c:
fd:be:60:b7:72:56:fe:d9:d4:6f:8d:39:4d:12:c0:
a8:81:54:9d:bd:73:3c:41:c8:be:97:a7:d9:f0:73:
e5:26:f9:e1:db:2e:4d:85:bf:80:a8:1f:7a:33:4d:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:51:B4:78:D4:69:1D:5B:F9:E9:C6:76:91:AF:98:B0:A9:20:3F
X509v3 Authority Key Identifier:
keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d0:87:12:07:63:67:28:ce:8d:e4:aa:66:6b:23:91:f0:ae:
92:d2:45:43:f5:97:ce:ce:85:84:e5:f8:37:69:88:10:31:6e:
a2:08:51:33:bf:be:04:12:4f:8e:f1:b6:d8:d9:88:b2:01:b7:
f5:66:96:18:82:7e:35:c0:af:89:b4:40:ba:7f:c8:b1:c4:b9:
35:6d:7b:a2:4a:82:8c:83:3b:b7:27:2e:0e:20:c6:61:fb:b7:
21:66:01:12:04:e6:4f:9b:89:cc:32:cd:d0:7a:8f:94:3c:57:
18:c1:ee:75:b4:88:d3:cf:36:9f:2f:30:6b:85:d9:fe:1d:8b:
d8:26:d4:76:e5:a9:cd:d8:45:7a:11:24:be:37:a9:e5:b4:ca:
cb:dc:e7:96:14:46:41:d7:a0:cc:3b:03:ea:11:59:b5:84:d3:
07:f5:da:82:25:48:bd:a4:bd:31:f2:55:ac:d9:3a:92:e4:ab:
4f:79:8e:5d:84:64:17:12:50:11:f4:6e:d3:29:55:23:4d:81:
39:a8:18:ad:c2:f3:ee:cf:93:56:51:dd:05:4b:1d:6b:04:96:
2d:25:46:72:17:11:27:f8:c8:49:d4:cb:33:78:d0:32:a5:ec:
bd:e4:4a:af:d4:1f:40:b0:f6:18:a9:4a:94:eb:61:3a:09:b0:
f5:b7:18:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:53 2025 by rpki-client