Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
File: P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json)
Hash identifier: ytEmaMUALJegOBFpDMBBTsa6MNxGS9boUHwMwn066bg=
Subject key identifier: 56:99:0A:4F:3D:D0:EC:38:23:20:9B:E2:E4:CE:BE:4B:F8:82:7C:22
Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63
Certificate serial: 0198530CCEECCFACDB12CCCE7C37690272F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
Manifest number: B4
Signing time: Mon 28 Jul 2025 22:00:04 +0000
Manifest this update: Mon 28 Jul 2025 22:00:04 +0000
Manifest next update: Tue 29 Jul 2025 22:00:04 +0000
Files and hashes: 1: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: UPsih9PigEd151zQg0DZAihgmIywo8fD6GJ2sg/oHMM=)
2: SOJJoBTyyJua9tdu4tZ2B31g56k.roa (hash: YMViz3GkzFQZUT08/Yf5mLb5Z5Bzg+msMTH8wr8BZ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0c:ce:ec:cf:ac:db:12:cc:ce:7c:37:69:02:72:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63
Validity
Not Before: Jul 28 22:00:04 2025 GMT
Not After : Jul 29 22:00:04 2025 GMT
Subject: CN=56990a4f3dd0ec3823209be2e4cebe4bf8827c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:19:95:08:d5:cf:b3:40:5e:5a:e3:34:0f:
50:26:d2:c9:1c:56:a4:b8:b0:0a:af:d9:3c:4c:24:
b3:50:09:9d:e0:5d:07:41:54:bb:36:4f:83:7c:a6:
a6:25:e4:c5:1a:e5:59:3e:5a:c9:f6:fc:f5:63:9b:
f0:55:b2:95:db:f0:4c:79:f3:94:ce:69:37:d1:6d:
d7:d9:db:f8:03:16:74:4a:c5:cb:9a:51:fd:0c:81:
7b:5e:b1:f3:88:53:75:f6:c0:54:84:95:ce:85:c4:
e5:9e:df:ab:af:e0:10:39:fd:a1:9b:5d:c9:0c:77:
fc:b3:74:c6:8a:fd:31:96:7a:ad:16:40:1c:02:54:
29:69:17:c3:1b:e9:79:65:31:33:7a:59:4a:89:05:
90:1a:d6:f6:d9:a8:b8:ab:d6:8a:99:54:18:03:f1:
da:d9:88:32:7a:6f:d1:65:8f:cb:80:72:8c:c5:ad:
70:4e:7c:0d:76:c4:a0:41:27:91:5e:21:3d:70:d8:
72:97:c1:46:98:00:90:1c:26:88:b1:6b:c0:ee:c2:
c4:45:72:71:85:18:3f:01:6b:5e:af:5d:f4:9e:3c:
84:6b:8d:9a:5f:4f:21:e3:cf:23:8a:4c:ee:6f:3d:
55:e4:c6:e3:89:8e:57:84:32:ff:ac:0d:b3:b0:1b:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:99:0A:4F:3D:D0:EC:38:23:20:9B:E2:E4:CE:BE:4B:F8:82:7C:22
X509v3 Authority Key Identifier:
keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0e:11:e6:3d:84:16:69:75:c2:51:61:5d:b4:ca:4e:f7:e1:
9c:5c:c5:1f:cc:90:e1:42:99:a6:64:48:83:57:cd:a8:98:3f:
99:7d:e3:cb:d9:10:7b:a2:2d:d9:b0:6b:30:37:31:a5:48:86:
21:11:fa:47:25:33:d3:5a:fd:bc:e2:dd:0d:df:da:81:ad:21:
c1:6e:c9:da:b0:23:fa:95:57:bd:43:e1:67:38:3a:3f:f4:65:
78:d3:9e:cd:dc:1a:7d:a8:78:9c:08:ae:50:e9:5e:b8:5a:2e:
69:25:06:f8:b4:15:59:20:3d:d9:52:ac:34:4d:89:e6:fd:d4:
2b:d6:28:26:49:c1:35:c1:27:cd:81:d4:c4:01:63:ab:d6:b4:
c5:71:ad:68:f0:1c:00:dc:ce:fd:d8:5e:4b:a1:2d:99:33:a3:
7e:f3:4c:23:80:fd:89:2e:f5:4f:c0:ac:52:dd:4e:7a:70:dd:
43:a4:a5:25:14:d9:9d:71:3c:c9:07:69:11:c0:57:6b:a3:ba:
11:48:a7:cf:ef:23:f5:db:0c:7a:a5:9d:90:f5:1f:71:6f:f9:
f3:b3:5d:af:a0:c8:0e:c4:07:33:64:85:9d:8a:74:4a:70:31:
3e:33:f3:11:7c:01:73:fa:76:74:2e:1b:c5:93:33:9d:de:58:
93:9c:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:07:44 2025 by rpki-client