Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: eFjkZj/K58okIiXjvNRoj7d7r2uIhullN3DPG8dpIBE=
Subject key identifier: 64:C1:02:19:50:D1:C1:B2:39:39:F1:74:C2:89:D5:5B:42:EE:B7:4E
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 019849D382D05B6123DD9CD0EF2E9595A5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 1037
Signing time: Sun 27 Jul 2025 03:00:54 +0000
Manifest this update: Sun 27 Jul 2025 03:00:54 +0000
Manifest next update: Mon 28 Jul 2025 03:00:54 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: p4XHYemtSaT6F4CavIJx+psFgFe9xFNCkrVq7r/l0vc=)
2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=)
3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:82:d0:5b:61:23:dd:9c:d0:ef:2e:95:95:a5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Jul 27 03:00:54 2025 GMT
Not After : Jul 28 03:00:54 2025 GMT
Subject: CN=64c1021950d1c1b23939f174c289d55b42eeb74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:af:cd:4f:d1:14:53:70:a8:69:a7:59:76:
ce:17:4f:07:7f:3f:1f:e7:a7:1e:55:8b:00:33:ac:
fe:da:ad:61:8b:39:1b:78:fa:38:03:57:b7:3c:0a:
e2:fb:28:f9:4d:95:45:a1:bc:29:f6:d3:cd:55:a8:
ff:42:26:6b:50:6d:b3:3b:49:a3:e4:6f:8b:96:d6:
bc:83:c0:91:80:3f:e6:2e:8d:53:09:97:3d:dc:4a:
4b:dc:e8:1c:52:88:83:b7:06:f1:23:b6:05:4c:48:
8c:50:a2:0c:5e:0b:8d:ca:34:fe:c6:9c:54:40:72:
02:aa:14:92:8d:b5:7e:13:ac:49:62:6d:6f:40:a4:
b1:99:c0:a9:9d:69:d4:5d:74:c4:86:40:4a:8e:5c:
a8:a0:58:89:a5:53:3c:7e:14:d9:96:02:36:33:38:
bf:fe:3c:78:61:c4:f0:c7:28:a4:c7:ec:14:8b:cd:
7f:a7:6c:6b:6b:05:61:e1:3e:e9:fc:7d:b9:cd:38:
8e:68:1f:ed:15:d3:30:2e:2c:06:8c:4e:5c:4a:16:
e0:15:a3:82:aa:c4:11:b5:f5:9d:80:bd:9a:9d:76:
f7:90:8f:d2:57:4a:76:87:c3:4b:4b:0c:3e:1f:ed:
ab:cc:44:75:1c:e6:56:81:ac:5c:22:72:ee:4e:2d:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C1:02:19:50:D1:C1:B2:39:39:F1:74:C2:89:D5:5B:42:EE:B7:4E
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a8:88:d1:7f:c6:16:bb:37:a9:b9:c9:8a:85:40:4f:a2:4c:
f0:1e:87:f3:70:5e:d2:62:c8:da:fd:d0:8d:89:60:55:da:1c:
84:0e:7f:f3:81:c5:bd:9c:96:b7:e9:cd:ea:45:78:c6:a7:3e:
0f:93:9f:56:94:88:7f:fc:13:8e:fd:0b:50:0b:3e:d3:a0:7c:
68:d8:0b:6d:6a:5a:8e:56:10:7f:43:67:7c:ed:6d:62:30:36:
01:42:cf:d6:fd:e1:56:e2:44:ed:9b:71:35:fc:91:90:38:91:
ee:53:e8:e4:de:52:ce:af:d7:51:a2:f1:dc:a2:70:19:ba:92:
cb:06:c3:f9:b3:90:b6:63:c2:58:1d:8f:36:7b:78:b3:0e:fb:
32:0c:41:6b:0b:f8:bf:b5:9c:4e:de:ee:b9:6a:c7:db:64:5b:
48:0b:ad:85:fa:1b:a6:93:34:9e:2c:ef:bd:e7:c7:db:07:19:
ba:dc:17:88:60:0b:54:83:39:9a:10:e0:13:40:33:7c:60:dc:
c6:b9:2c:24:a5:e7:cc:0c:bf:b9:ab:46:66:f1:e6:ff:4b:30:
7f:9e:a9:57:cb:78:c0:f6:e3:ff:16:3e:61:b5:cc:22:e2:d2:
95:fa:54:51:f2:c2:dd:69:a9:01:f9:fd:15:a9:38:e8:08:3b:
5d:d9:cb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:27 2025 by rpki-client