Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: 3oo1dyG9+bM2Y3IbcE/F+rkfJaZDX0/NJMhvlyOI4x4=
Subject key identifier: 50:BB:1B:CD:B7:85:90:DC:20:4F:BB:FB:9B:B7:C5:54:AB:B0:7F:F7
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 01984B5527F0A967983F12E109D7D0BF64D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 05AD
Signing time: Sun 27 Jul 2025 10:02:08 +0000
Manifest this update: Sun 27 Jul 2025 10:02:08 +0000
Manifest next update: Mon 28 Jul 2025 10:02:08 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: TYK37DJ2HQ9qqHaH8HtMj9zNiEo2eH4MmmFVH2suy/U=)
2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:55:27:f0:a9:67:98:3f:12:e1:09:d7:d0:bf:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Jul 27 10:02:08 2025 GMT
Not After : Jul 28 10:02:08 2025 GMT
Subject: CN=50bb1bcdb78590dc204fbbfb9bb7c554abb07ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:6d:5c:df:3d:0b:1b:10:20:29:c8:aa:5d:
f2:c9:37:b5:64:e8:b7:39:b8:f9:4a:48:55:48:06:
5d:de:de:56:83:a3:8d:e3:21:de:cd:2c:30:03:1e:
1f:99:6a:41:a1:d5:03:bb:16:d5:45:56:69:e6:75:
5b:e6:e0:26:ef:b8:72:3d:49:9d:77:90:c2:a8:b6:
81:33:77:65:58:08:50:5e:dc:15:01:61:84:60:e8:
00:cd:a2:9f:5b:be:05:16:f0:ff:1d:a9:e6:18:64:
40:98:16:e2:fd:b8:5f:9e:1c:07:32:ef:86:fe:e2:
93:c6:85:29:a7:c5:30:cc:ff:27:d2:f0:18:76:3b:
c6:2c:7f:c7:7a:d1:9f:6a:9f:df:53:bf:5d:db:c3:
32:aa:55:52:f8:ec:b5:4d:dc:26:90:47:aa:1d:d5:
8b:af:5e:55:c2:3e:79:bd:c3:93:bf:73:6b:55:bd:
6c:d3:84:ba:51:0b:eb:c2:7b:53:cf:2f:da:4d:cd:
fc:b0:9c:18:7c:6f:8a:4f:d6:68:fb:19:d7:b5:f9:
73:3d:76:cf:86:ee:20:c4:2e:af:b9:7a:2a:df:b0:
33:d3:18:32:7f:fc:8c:c4:19:84:62:0e:e5:df:c8:
ff:55:a7:28:ae:92:78:1d:bd:06:a8:c7:9a:8b:96:
1b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BB:1B:CD:B7:85:90:DC:20:4F:BB:FB:9B:B7:C5:54:AB:B0:7F:F7
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:12:b4:9f:cf:0d:ca:de:e9:19:aa:cb:1b:4b:1c:70:83:80:
ed:40:95:79:7d:93:0d:b5:f3:df:35:89:f6:fb:23:03:24:f2:
10:bb:9e:00:66:74:f6:14:c2:4a:e5:c5:06:c9:32:31:75:26:
d7:2a:27:35:e6:e4:ae:8e:b3:8e:e1:2c:56:92:6d:23:e7:e6:
24:13:12:7f:ac:c1:58:23:94:e0:27:24:bd:03:ef:3d:46:83:
2c:34:39:80:62:42:00:b6:93:33:78:1e:ae:d5:52:71:71:d9:
5d:e4:fa:88:aa:ca:ad:cf:f8:d4:c0:be:dc:1b:f7:a0:00:1e:
32:43:2d:7e:59:31:eb:56:82:91:11:31:0a:4b:7d:67:86:a1:
6a:67:89:53:e4:5f:4c:59:73:0f:8a:39:e9:17:bc:80:bf:3d:
55:56:16:fa:04:d5:6b:c0:2d:2c:20:ca:2c:12:5b:76:61:45:
c6:7e:f8:e5:61:15:82:f1:14:e4:cf:a7:68:db:c1:45:56:37:
f1:9e:f6:f4:b5:09:5c:c6:7f:e3:fd:64:ea:29:90:bb:68:5e:
c8:5e:cb:d6:37:a6:1f:1e:d6:11:3f:a0:c2:a6:5f:ee:f7:c4:
f5:fb:8f:ac:4e:df:97:24:83:96:1d:38:45:1c:73:4b:92:2e:
7e:94:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:08:20 2025 by rpki-client