Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json)
Hash identifier: Pz/D1ubi7q57YE2zmhzCsDrFyu8iNfIS6JrYvXz/fT4=
Subject key identifier: 6E:93:DC:96:D8:0E:9D:7A:9D:34:CF:11:83:DF:F9:4E:B1:05:6B:63
Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d
Certificate serial: 01974EC5D47BF6AB8AEB31936BED21C72940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
Manifest number: 1007
Signing time: Sun 08 Jun 2025 09:01:16 +0000
Manifest this update: Sun 08 Jun 2025 09:01:16 +0000
Manifest next update: Mon 09 Jun 2025 09:01:16 +0000
Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=)
2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=)
3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: 5yZ+5S/Iz6sl7dH0wOH59AduhMjQ2cqEShosuEd/eS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:d4:7b:f6:ab:8a:eb:31:93:6b:ed:21:c7:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d
Validity
Not Before: Jun 8 09:01:16 2025 GMT
Not After : Jun 9 09:01:16 2025 GMT
Subject: CN=6e93dc96d80e9d7a9d34cf1183dff94eb1056b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:f8:7f:c0:ea:67:60:1a:90:ba:d1:98:14:
fa:ed:c3:1e:b1:2a:eb:1d:63:f3:37:88:c1:1b:d4:
52:e0:3d:51:8c:75:44:80:1a:66:2e:64:10:5d:ec:
5b:54:65:ad:9a:e6:7f:98:1d:f9:09:14:1d:95:2d:
e9:5f:1e:27:5b:5b:a8:ca:13:28:e5:91:9d:9d:be:
62:c0:97:d5:39:a3:0c:d7:9c:0e:cd:58:fa:e0:32:
c0:0f:5b:dc:f5:8f:75:93:66:8f:fc:c5:a3:9d:c1:
b1:17:45:ad:ae:58:52:59:c4:ad:a6:7d:8b:6e:e5:
99:67:8b:ee:d9:f3:90:f2:21:b3:12:65:97:31:78:
05:68:b3:6b:62:2b:5f:c9:a1:1a:b5:5b:45:82:20:
05:94:c5:f0:d1:a6:5e:ce:fa:47:47:cc:0a:5c:13:
3d:3d:c3:c8:c5:f1:83:7d:ce:88:3d:23:a6:96:f0:
1a:db:18:29:c7:1d:3e:dd:72:19:f5:86:05:24:da:
e4:2d:93:fb:f8:dc:db:1a:fd:52:28:0e:5f:1b:58:
dd:2a:3a:7e:e9:0f:40:19:e5:51:c4:19:db:ef:64:
3b:6f:06:e3:f5:91:49:0c:ab:61:06:a3:8b:97:a6:
df:e9:5f:ea:2f:4f:df:7b:f9:cb:c5:a3:9e:44:fa:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:93:DC:96:D8:0E:9D:7A:9D:34:CF:11:83:DF:F9:4E:B1:05:6B:63
X509v3 Authority Key Identifier:
keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:99:c2:e5:d5:1a:04:c6:05:05:9c:42:c8:85:25:bf:29:8f:
fa:1e:57:08:9f:9e:ac:d8:21:7e:10:10:4a:ed:70:fe:93:96:
ae:24:7a:7b:5b:b2:e4:27:c4:21:a6:ed:f6:2e:29:4c:11:7d:
b2:8a:ad:be:ca:b9:12:14:95:fb:ee:9c:9e:c7:7f:60:01:a0:
e2:a4:88:f7:24:e6:55:0b:69:40:8f:44:7a:ca:51:0b:3b:ec:
a5:3d:91:40:34:5e:66:c4:35:d9:37:99:5e:d9:3c:5c:a8:e5:
71:7e:03:72:9c:ad:9d:50:8d:f0:e4:2f:f0:2a:2c:f6:f0:2a:
89:7a:9f:62:6c:e7:0c:50:36:88:cc:9a:72:ac:82:ad:da:f1:
f1:f9:52:c0:9d:c9:2e:6c:19:4b:5f:74:4e:aa:38:3e:e6:ac:
0d:98:5f:10:d1:28:bb:9d:b9:5c:db:f6:d4:4d:5e:29:d2:80:
eb:dd:2a:18:d3:ed:5c:e0:ea:66:02:84:c7:a0:71:a8:0d:64:
72:e4:d5:fa:15:1f:0f:77:64:13:2c:f5:c0:7a:52:1d:65:3d:
ea:a4:f4:3e:06:b7:b5:88:5c:40:c7:fa:c9:4b:e4:bd:36:af:
e3:1d:4f:01:65:f3:a4:ea:1d:d5:e4:cf:7c:d1:8c:aa:4c:43:
96:99:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:02 2025 by rpki-client