Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
File: W_YzYv7e4ciRNdVDTTe3N17VoQg.mft (raw, json)
Hash identifier: LgIhp7F0PQF0WewHCCHrBayshKfJSfnToa+hqBMfqfk=
Subject key identifier: 3D:7C:D9:44:07:1E:B0:86:76:BA:F2:C6:B1:7B:FC:83:42:9B:9F:1F
Authority key identifier: 5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
Certificate issuer: /CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Certificate serial: 01974967E4509FF69F0A6B2B185B651B4401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
Manifest number: 119B
Signing time: Sat 07 Jun 2025 08:00:34 +0000
Manifest this update: Sat 07 Jun 2025 08:00:34 +0000
Manifest next update: Sun 08 Jun 2025 08:00:34 +0000
Files and hashes: 1: 63salWhc3QRvjl4PRdN20jEnN1g.roa (hash: yuGZxPr7QCy1Hv8ABdlA7QRlK++I2cpETqHSsD2+rR4=)
2: W_YzYv7e4ciRNdVDTTe3N17VoQg.crl (hash: AKIGoH06yjeKX9y31Q9GXZxwDEbZTb/Nsmy3F2r3JaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:e4:50:9f:f6:9f:0a:6b:2b:18:5b:65:1b:44:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf63362fedee1c89135d5434d37b7375ed5a108
Validity
Not Before: Jun 7 08:00:34 2025 GMT
Not After : Jun 8 08:00:34 2025 GMT
Subject: CN=3d7cd944071eb08676baf2c6b17bfc83429b9f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:32:53:15:b9:c7:47:43:68:36:d9:69:ba:
df:d3:ee:bf:fc:45:10:00:54:30:0f:3a:c9:b0:28:
3f:7f:89:75:a3:a1:49:45:9f:f7:a4:8f:f2:36:d9:
3d:26:d3:2f:d2:84:d6:4d:43:3d:66:b8:7d:f6:b4:
c8:4e:34:dc:af:46:44:fa:3d:50:66:f6:c8:9b:93:
a5:6a:e6:9e:51:c3:da:8d:f8:f6:fd:35:ea:63:cd:
da:9e:81:ef:5a:32:23:71:b8:65:17:bb:d2:98:03:
60:b3:c4:a5:f2:d9:15:64:1e:3a:bd:02:74:c5:91:
2a:3f:45:a3:85:aa:40:10:2a:f9:b1:33:3f:75:bb:
ae:65:c5:57:3a:4f:92:17:53:28:ef:08:ff:42:7a:
e9:67:d7:6b:c6:bf:36:66:fb:85:14:6e:84:09:f5:
8b:c6:b4:c7:c6:a0:b5:2d:80:4f:8a:ab:c8:10:dc:
0a:32:a1:a8:5f:60:6f:a9:ae:28:94:a3:7e:4b:4f:
f6:b4:c2:10:fb:b3:03:cf:7c:f4:08:c1:3f:bc:d0:
bc:dc:31:2c:9f:35:b1:9b:ad:76:36:13:c4:2d:a6:
b0:71:80:59:6e:e7:7a:9b:ef:57:66:8d:3d:ff:a7:
45:a8:3c:47:46:7c:75:e6:ac:40:11:a3:6e:b2:9e:
ab:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7C:D9:44:07:1E:B0:86:76:BA:F2:C6:B1:7B:FC:83:42:9B:9F:1F
X509v3 Authority Key Identifier:
keyid:5B:F6:33:62:FE:DE:E1:C8:91:35:D5:43:4D:37:B7:37:5E:D5:A1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_YzYv7e4ciRNdVDTTe3N17VoQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7709e7-8372-4824-a81c-6ad0b69b208f/1/W_YzYv7e4ciRNdVDTTe3N17VoQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:05:0b:ec:6c:b9:6e:27:85:ad:a7:0b:a2:10:c5:d9:94:aa:
17:eb:da:43:17:95:d2:c9:1d:ab:c6:ab:87:5c:24:ba:94:74:
bb:39:ad:06:3a:57:bd:f4:1b:d7:98:74:77:a1:34:ea:69:8a:
19:11:3a:25:ea:b0:eb:7b:74:93:65:09:6e:94:fb:86:41:8a:
9d:4f:dc:b2:d6:aa:07:7b:45:af:54:42:e9:f5:9c:f4:4f:25:
1d:5b:00:3c:93:84:7d:a6:b0:5d:ff:2e:80:0e:d0:01:e8:05:
71:11:da:1f:82:02:5d:b8:b0:bc:48:73:35:5a:d3:6f:ef:d5:
a7:1b:78:7d:9f:e5:56:c2:12:0c:26:d6:03:c9:dc:7c:72:3c:
18:01:7a:7d:63:ce:3a:d9:f7:49:39:d2:58:c9:7c:8d:15:5a:
f0:c7:e9:23:23:d5:d0:81:b5:a4:94:f8:a3:e9:ae:81:47:b5:
dc:0a:2f:75:69:8a:1f:c8:93:35:e9:ab:34:bd:22:3c:0e:c3:
9d:f1:3c:2a:fa:cc:85:01:81:7a:13:6a:5e:08:8f:1b:9e:d9:
17:82:9b:18:ee:8f:7e:d0:3a:7f:9e:cd:1f:1d:81:3d:ea:82:
ee:67:92:3d:41:1d:c5:ab:5f:6e:8a:69:1b:a7:cf:92:f3:5f:
8f:e7:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:50 2025 by rpki-client