Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
File: WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft (raw, json)
Hash identifier: B8vZpEvELMT2XmoLnRg24nWEpSKJKXD+syNISz3xu1Y=
Subject key identifier: C6:FD:08:B8:77:05:9F:EF:E1:1F:4D:CD:0A:E9:83:9C:A6:2E:24:08
Authority key identifier: 5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
Certificate issuer: /CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Certificate serial: 01976D745B4F6F5EEB12617AD8994AE55E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
Manifest number: 11EC
Signing time: Sat 14 Jun 2025 08:00:31 +0000
Manifest this update: Sat 14 Jun 2025 08:00:31 +0000
Manifest next update: Sun 15 Jun 2025 08:00:31 +0000
Files and hashes: 1: Oh-cQnXBc3lf8_SsKrCv90dr1do.roa (hash: /clQdBNjFo+DPpzGiAtMduHa7oP5zjEdGJ0IRP2uvgo=)
2: WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl (hash: yh2EherImIpP5Ma7IwBUMkhToz6Eg1RadMSweBP0FiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:5b:4f:6f:5e:eb:12:61:7a:d8:99:4a:e5:5e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a155e32c4a9cda1a81bd9c7370dc34ab00653a0
Validity
Not Before: Jun 14 08:00:31 2025 GMT
Not After : Jun 15 08:00:31 2025 GMT
Subject: CN=c6fd08b877059fefe11f4dcd0ae9839ca62e2408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:1c:87:94:5e:0d:32:91:99:22:e1:72:c9:
1f:86:80:09:49:d6:c7:56:a6:e4:6b:e3:80:4e:02:
09:3c:07:6c:73:14:3a:7c:67:38:5b:98:c5:0b:35:
a7:db:12:5c:ce:50:83:e7:b6:93:94:4c:b8:b3:12:
4a:c3:2a:7b:b8:d2:15:75:ee:f7:3d:60:09:69:4b:
60:fe:0a:f4:1a:0b:cd:1f:f4:77:c7:cb:52:8f:90:
0b:b9:85:0e:3f:90:61:23:95:d3:06:1b:e2:b6:fe:
a2:de:be:de:2e:5d:fb:ef:0a:0d:3e:cf:e7:6a:65:
e7:72:2f:47:2b:40:cc:5b:78:99:4c:12:62:84:ce:
9c:a6:d6:01:ff:55:85:e6:f5:2a:94:29:c9:ea:e2:
70:bd:e6:29:ab:aa:86:08:0a:ce:7a:0f:4f:c7:0f:
3b:bc:0a:eb:12:cf:60:bd:0d:80:ba:04:c5:49:86:
4d:24:b3:1d:5a:70:ff:24:06:89:5f:94:51:b7:7d:
2c:d0:a4:8e:5b:ad:40:7d:d6:95:0c:0f:f0:35:44:
5c:69:93:46:b9:a8:9a:81:15:a0:af:5e:b1:b2:3e:
48:50:d7:e2:c4:b7:67:08:59:2a:55:c8:f2:3b:a6:
40:53:df:30:55:a3:94:6f:89:54:03:fa:9e:57:e5:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FD:08:B8:77:05:9F:EF:E1:1F:4D:CD:0A:E9:83:9C:A6:2E:24:08
X509v3 Authority Key Identifier:
keyid:5A:15:5E:32:C4:A9:CD:A1:A8:1B:D9:C7:37:0D:C3:4A:B0:06:53:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhVeMsSpzaGoG9nHNw3DSrAGU6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/52bcda-f97e-4765-aa95-cd2f5771da98/1/WhVeMsSpzaGoG9nHNw3DSrAGU6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ca:5d:6a:f4:65:40:60:27:a6:76:c1:77:81:87:69:d8:91:
33:d1:3c:83:a9:5f:86:35:15:b9:cd:d5:37:63:92:a2:45:00:
d7:b8:32:1d:21:28:d9:78:66:dc:19:3d:2b:49:43:8e:d5:88:
c6:17:47:17:d0:78:d1:63:87:23:85:72:8c:f4:cc:f6:5d:ed:
b6:ad:0c:15:73:ba:05:99:f7:b1:e6:1b:2d:00:e3:03:49:19:
cc:0e:df:3f:3a:16:46:c7:d2:44:57:6c:6a:07:96:2d:eb:cf:
2f:85:14:9f:24:75:83:74:7a:25:95:31:20:6f:49:13:f0:11:
e8:93:f8:e9:eb:9a:cb:a3:c8:55:2d:21:e1:f2:92:37:84:8c:
b0:34:0a:20:66:1f:96:f9:a5:25:3f:72:31:7a:1c:57:65:c6:
71:13:71:a5:83:94:1f:1b:34:8e:df:cb:74:53:d2:ea:e2:2d:
4c:60:84:ae:0a:12:34:49:ee:0f:37:cc:f2:06:6f:5a:3d:40:
cd:01:58:56:fb:55:61:0e:97:27:a8:18:3a:9c:e0:d8:65:0c:
f0:aa:ef:d2:7b:9c:ab:4a:be:7d:aa:aa:7b:6a:ff:6f:26:0d:
f9:9e:ef:e4:4d:51:47:fe:1a:31:5c:07:db:48:ee:7f:f8:41:
2a:b2:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:44:34 2025 by rpki-client