Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: T7KSwF257kofh7xqWkSz6B26yMnyuHYT8L0OXT6j1qs=
Subject key identifier: 06:FB:2D:60:32:90:E3:9C:78:3C:C2:FC:98:36:80:2C:2F:FD:B6:DD
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 01984A418909757DBA79D1F1BC12E712543F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 1594
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: 67DDgzuGY6GhyQ995CKGjB4Pcck2MKgaywkp+rvTzyM=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:89:09:75:7d:ba:79:d1:f1:bc:12:e7:12:54:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=06fb2d603290e39c783cc2fc9836802c2ffdb6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:75:34:37:3d:38:d4:a8:7c:84:b7:93:d6:
6b:ea:4a:f7:47:a0:a9:78:4f:a9:60:59:dd:a9:5f:
a7:c4:ca:e8:81:98:2b:cd:18:aa:b5:44:11:3d:17:
ec:c3:28:ea:37:ab:d6:09:5c:0c:84:18:61:59:7e:
4c:28:c5:e1:ab:44:1c:9b:48:9b:ae:ca:56:52:a8:
ec:8c:81:b2:84:6a:f0:99:e7:74:6e:a6:6f:64:be:
d2:f1:c0:c7:0a:8f:fe:11:c3:da:08:9b:1e:8a:b5:
18:22:68:63:35:86:b8:22:a0:0c:1d:41:37:7c:57:
fb:8b:03:f6:06:0b:e8:93:e8:f4:90:e7:28:f3:43:
0a:68:42:69:7f:da:54:40:2b:6d:d4:81:8f:25:6d:
3b:50:a2:85:13:31:1b:a2:0c:8a:ed:4a:73:4b:a9:
96:30:00:e0:47:94:f3:69:92:0d:55:03:87:5d:ce:
8c:70:88:28:15:fa:6b:23:0d:fc:cc:83:f2:b6:6c:
c4:2d:60:39:39:26:69:e5:5c:68:f4:f1:11:52:8d:
48:c8:2d:f2:dc:47:39:18:84:d0:2a:1f:a3:3c:26:
59:28:f8:b3:cc:c5:63:93:62:e5:0f:7a:a0:e8:4d:
d5:21:53:7e:51:33:ca:c0:23:5d:c6:f5:06:a8:eb:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FB:2D:60:32:90:E3:9C:78:3C:C2:FC:98:36:80:2C:2F:FD:B6:DD
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:73:cd:0d:6d:e0:0b:29:24:1e:a6:4b:ec:7d:f2:1e:5f:
43:40:60:84:4d:dd:27:d7:8e:2c:d2:12:0f:06:de:32:0e:69:
cc:bc:69:4a:e9:22:fd:8a:e0:1c:e8:7f:67:55:67:0e:83:bb:
27:9a:fa:ea:a1:47:32:2f:6e:27:5c:cb:03:aa:10:b2:e1:14:
fd:98:26:48:a7:18:8f:04:0b:47:05:a1:00:50:fa:79:f7:41:
e7:3a:19:c9:5c:c4:c5:a4:14:16:75:e6:e1:97:28:94:b8:cd:
22:77:87:99:51:49:18:4c:4f:71:58:91:79:6c:4a:52:78:02:
5b:62:0c:1b:09:83:c1:a6:6d:a3:f2:7f:ec:7c:f2:de:dc:95:
c1:02:ba:cd:74:ab:ef:30:5a:45:aa:ec:e9:fd:bf:47:a3:4b:
ec:3b:6f:41:93:47:6a:5e:fe:a2:53:43:20:20:e4:94:07:f4:
d9:66:b3:20:3e:a9:dd:60:fc:c4:cf:30:b4:6b:4a:12:c2:6a:
93:fe:ea:2b:b1:c3:11:73:6f:ac:62:52:9b:fc:07:c9:cc:1c:
d5:46:5f:a5:67:60:65:b6:2f:de:49:ea:69:d5:52:38:78:e6:
0e:45:9a:56:c8:61:f4:65:c0:eb:7c:4f:61:3a:96:87:c1:e6:
c3:a6:17:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:21:13 2025 by rpki-client