Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: rYx2BZIdGskQJfoi9loUyyElqVXKl7GG08V9Qi1YdkA=
Subject key identifier: D5:2E:1F:90:F8:3C:EE:6C:D1:23:27:AD:46:25:D2:1F:89:F2:37:CB
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 019769619C6373D9B2534E9F504B1E06816E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 13:01:33 +0000
Manifest this update: Fri 13 Jun 2025 13:01:33 +0000
Manifest next update: Sat 14 Jun 2025 13:01:33 +0000
Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: PFUSoAtpuV81M6Dd+s65vUhgme3YKBuGe4u7svymf1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:9c:63:73:d9:b2:53:4e:9f:50:4b:1e:06:81:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Jun 13 13:01:33 2025 GMT
Not After : Jun 14 13:01:33 2025 GMT
Subject: CN=d52e1f90f83cee6cd12327ad4625d21f89f237cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:21:f7:ba:b6:bd:4f:bc:cf:de:c8:11:23:08:
b1:3c:c0:94:d8:12:e8:60:ad:93:77:f6:09:55:ff:
af:03:6d:84:dc:98:e7:21:36:f5:fd:f6:8a:4d:e5:
38:62:ec:f6:f6:b3:3d:48:73:a1:7e:a2:ca:b8:7f:
85:8c:79:f2:51:3c:79:84:dc:85:58:93:32:87:30:
d4:c2:ac:88:14:0e:1b:8c:e9:21:32:f3:cd:c2:48:
a6:3a:d7:78:4f:00:99:15:34:b1:f0:32:02:b2:b1:
9d:bd:f6:ff:91:75:d8:46:59:3f:d3:3c:2b:01:bb:
97:3d:b3:30:2b:b3:44:bd:e8:11:18:a0:3e:f9:30:
e1:4e:20:f4:1f:b8:36:fd:5d:1d:c8:2c:02:ba:29:
37:4f:27:7b:c4:e9:f0:9e:6b:1a:b5:e9:d4:aa:a9:
84:06:be:f3:3e:d7:42:0c:d8:ba:0d:34:76:a3:6c:
6e:5c:80:d8:29:47:bc:25:b2:ff:38:52:2d:07:8c:
30:dd:ba:c1:9b:ae:9f:9b:bf:2f:33:b3:d3:38:46:
be:d6:b5:4b:0d:11:db:d4:dd:03:3b:04:6c:d9:1a:
85:12:9a:44:92:33:0f:e0:5a:48:c0:fe:0f:ee:61:
45:0d:a0:09:78:88:07:0b:6a:ed:3d:8e:d6:d8:72:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2E:1F:90:F8:3C:EE:6C:D1:23:27:AD:46:25:D2:1F:89:F2:37:CB
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bd:0c:96:d2:8b:f8:d7:f5:e7:9e:7f:67:80:8b:c4:4e:87:
2b:0a:97:b4:d0:2f:d4:ca:47:f4:eb:ef:f1:6b:9e:89:f2:d3:
9b:bc:35:05:d2:a6:08:3e:5f:6e:04:de:c9:70:44:71:d3:22:
88:e8:8d:1a:32:c1:d4:8d:3b:3d:cc:5e:ba:87:6f:6f:ba:a9:
72:71:50:ad:4b:d8:06:9f:a4:72:53:8e:a9:71:57:5d:de:37:
9b:21:73:84:18:a1:cb:83:81:57:c4:92:6b:3e:a9:74:0f:43:
5e:9f:58:9b:9a:18:54:82:78:e9:cc:2b:e0:32:5e:2c:23:a0:
95:8c:2e:b9:bc:66:30:0d:fd:81:0c:37:12:97:12:61:08:80:
8c:72:d8:c9:47:95:2e:2f:c6:56:eb:e5:7f:f3:9f:e1:28:35:
0e:67:3e:74:73:da:84:20:be:c9:21:47:74:30:f8:f4:f7:6e:
46:78:d5:aa:db:c7:d6:30:09:58:65:16:65:c6:d0:47:f7:61:
23:c8:67:e4:e6:f4:bd:02:18:3a:dd:21:26:e2:6c:34:c4:59:
43:92:b9:3c:98:b5:8c:f6:ba:1a:18:bd:a0:de:70:57:7a:d4:
7e:ce:73:e0:b7:46:6f:4f:18:23:8b:15:c5:c9:3a:fb:6b:e7:
5f:e1:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:27 2025 by rpki-client