Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File: W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier: 5ioPLZdmIHxomIIGJvflQe5E/jKS90JlDy5eMvYJCf8=
Subject key identifier: 6D:66:E0:2B:5D:73:74:86:90:7E:E9:66:6A:7B:C9:D2:60:E2:A6:D4
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer: /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial: 01977D8CBC1D531CF79F1C0BD659EB7E3256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 11:01:04 +0000
Manifest this update: Tue 17 Jun 2025 11:01:04 +0000
Manifest next update: Wed 18 Jun 2025 11:01:04 +0000
Files and hashes: 1: QZDKvK6iw_tPh27glx9LTGGHSYU.roa (hash: XgdxnkBVQi+6Pi+BDAfBhOhlkd5fb/2ukIHoQx2+z08=)
2: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: nsmZgJ36gsunZN8Wp3F+GZb86WI6Bb68Nd10qTlE9Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:8c:bc:1d:53:1c:f7:9f:1c:0b:d6:59:eb:7e:32:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Validity
Not Before: Jun 17 11:01:04 2025 GMT
Not After : Jun 18 11:01:04 2025 GMT
Subject: CN=6d66e02b5d737486907ee9666a7bc9d260e2a6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:42:bd:3d:91:f8:14:48:fe:14:ae:3d:88:
ce:f6:97:1c:0c:6c:27:34:17:b3:ec:bd:bc:5b:db:
de:90:f2:1a:db:ce:de:a6:19:a0:10:16:93:a6:8f:
01:df:ec:f6:11:3f:04:19:2d:92:db:fe:6f:0e:ba:
23:ca:5f:e5:8f:9d:b6:e8:14:af:9e:15:fc:35:22:
25:bf:15:12:86:e1:5b:3a:2d:54:65:74:d3:81:66:
c6:b6:d0:68:77:e1:30:4b:5f:4f:d7:21:96:3a:6c:
51:09:65:d5:d9:cb:56:5d:fc:04:f5:f9:63:23:0f:
56:a5:bf:45:4c:50:79:62:51:a1:85:93:59:fc:94:
d0:f3:c9:47:89:44:08:5c:00:cb:f9:dd:77:20:43:
08:d1:93:bc:f6:20:9b:12:59:4d:ac:76:ef:35:58:
b4:88:4f:b8:41:d1:62:68:52:33:26:a9:31:b7:4c:
c3:ab:d8:04:a7:d9:ea:52:82:43:19:98:90:dd:96:
3e:0c:3e:6e:49:2a:9e:aa:e1:bb:f6:1f:46:68:a8:
05:80:fd:ad:f7:3e:44:99:a8:5e:2a:39:a6:e6:29:
8e:e6:92:a2:45:7f:ad:2f:4d:db:1c:93:d5:7d:84:
85:5d:bd:b6:b4:72:b6:a4:27:c0:55:f2:17:63:93:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:66:E0:2B:5D:73:74:86:90:7E:E9:66:6A:7B:C9:D2:60:E2:A6:D4
X509v3 Authority Key Identifier:
keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:25:f0:6e:15:39:93:ae:dc:49:f6:a6:2e:19:8c:f8:6e:3b:
f1:a6:24:30:db:1c:3a:89:e6:f9:9a:9f:f0:16:66:4d:c6:c1:
c0:45:4b:09:91:49:c1:f8:74:05:b2:30:5d:0f:bd:61:52:81:
85:42:80:2f:57:71:76:70:64:45:69:c8:9a:54:95:f6:39:79:
90:52:cc:76:03:3c:55:7c:c2:29:48:95:dd:74:4c:34:88:2a:
7e:dd:21:72:72:f8:47:2a:d7:ae:49:a3:4c:1e:b6:ea:d8:11:
7c:95:8f:b2:c1:54:9b:7e:5e:c5:00:1b:42:44:40:63:be:e2:
e3:94:54:52:84:3a:e7:83:17:97:ad:dc:f1:4e:b9:a9:1b:99:
0e:6a:77:65:93:1d:16:88:77:6d:61:5f:2a:15:1f:61:49:92:
b7:f4:f3:11:f7:f2:5e:1c:ee:d8:6b:b8:f9:41:5a:57:2e:19:
71:8e:64:a3:fe:c9:86:f6:10:0e:a5:ac:dc:ca:a5:b2:40:96:
51:b0:04:40:66:bd:02:cb:76:b3:2d:07:e2:fa:61:7a:89:d2:
88:79:61:be:62:91:1b:97:8b:a5:54:99:0b:36:38:aa:c1:04:
4a:e0:06:a6:26:77:95:6b:f8:eb:f9:47:a9:9f:20:ee:89:cb:
98:25:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 15:39:25 2025 by rpki-client