Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier: GhtVJPDh/ETyIcOGXWTJ9C2FPNxJQesN1nIXveuFjYo=
Subject key identifier: 34:AC:37:6A:B5:EA:27:D5:FC:CE:FF:A9:0B:AF:E2:2F:8F:CE:39:E6
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial: 0197715178D686740E189E0D1C8E5AF79A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 02:00:54 +0000
Manifest this update: Sun 15 Jun 2025 02:00:54 +0000
Manifest next update: Mon 16 Jun 2025 02:00:54 +0000
Files and hashes: 1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: armwbBXL4ZT2bcaouUydua7oI2NG+SXlw1zyP3c3dQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:78:d6:86:74:0e:18:9e:0d:1c:8e:5a:f7:9a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Validity
Not Before: Jun 15 02:00:54 2025 GMT
Not After : Jun 16 02:00:54 2025 GMT
Subject: CN=34ac376ab5ea27d5fcceffa90bafe22f8fce39e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:d0:c6:ca:8d:75:13:cb:01:21:bb:72:e4:
35:c9:b7:12:82:30:5c:cf:27:15:53:aa:ac:cb:6a:
af:e1:e2:0a:d8:08:d6:05:49:f2:f3:c9:fb:35:c5:
40:f4:ff:fb:9f:3e:79:0e:eb:f3:87:76:c6:2b:c2:
3a:11:7c:24:e5:c0:43:34:5a:ee:7a:2d:15:16:61:
61:98:8b:56:39:e8:b7:86:41:9b:70:01:16:df:38:
be:8a:d6:57:49:89:c1:65:1e:9e:cd:dc:0e:b4:5a:
83:f5:4f:49:06:f3:99:e3:ec:34:22:ce:0c:07:af:
c4:90:25:85:e0:62:96:7e:c4:7f:50:3e:cf:b1:a7:
e3:66:cc:a1:7a:0c:35:d1:f9:c3:ee:22:63:f0:34:
4f:62:88:9b:39:81:2a:70:e8:7d:19:c8:09:4e:87:
2d:35:98:a8:8b:6e:79:3b:6e:6e:8d:e7:4a:c5:81:
36:57:86:e2:8f:73:47:ff:62:1b:3d:3b:55:5e:89:
6d:da:9d:99:7f:31:27:28:66:26:4d:7b:44:e6:e3:
47:36:a8:88:61:b2:0a:61:57:72:e2:3f:3b:6f:c3:
e3:53:13:2c:ad:82:81:f0:c8:2d:b7:fd:da:d7:b5:
7b:96:6e:e0:fd:bc:ae:f6:12:ed:5b:e6:6c:1f:0e:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AC:37:6A:B5:EA:27:D5:FC:CE:FF:A9:0B:AF:E2:2F:8F:CE:39:E6
X509v3 Authority Key Identifier:
keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:76:aa:a9:27:7c:4e:13:5a:bc:ed:0b:14:c9:66:57:c2:4e:
0e:6a:87:72:ee:2e:b7:ce:6d:c9:77:0f:8e:a7:d8:4b:96:73:
b8:ac:de:73:21:cd:ff:9c:a9:d1:87:1b:30:40:fa:7b:66:aa:
08:81:81:be:7f:5c:c0:7c:65:bd:c9:c9:7b:9b:ba:59:f8:27:
68:8a:b9:8b:72:75:33:89:0c:d8:67:4c:04:06:c2:8d:7b:0d:
4b:35:7c:97:31:ca:55:2f:53:f0:c3:53:e4:c7:b6:8a:3b:50:
a6:b4:42:16:ef:5b:e7:9f:fb:d6:c8:64:17:ae:9f:dc:1e:59:
91:cc:15:ce:9d:ab:b0:ad:9d:f7:b2:a3:53:f7:f1:e1:6c:a6:
41:0b:00:cc:54:22:ec:23:b1:cf:28:aa:e9:e3:33:1e:13:91:
40:b9:50:31:3b:df:d1:34:4b:43:b7:2f:c5:6c:77:99:78:b0:
2a:67:eb:76:a3:2c:56:4c:ba:2b:57:db:f1:8d:2a:40:ab:46:
36:a4:19:ee:20:30:8e:ad:e8:f0:9b:b1:f7:81:11:8c:20:52:
0c:d2:b8:62:71:09:fa:e5:2d:87:20:d6:e8:a9:d1:8a:11:4b:
64:89:10:0a:54:13:b7:41:4e:ae:3d:4b:2c:6a:89:e5:f9:82:
8d:99:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:42:43 2025 by rpki-client