Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File: W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier: VYPcI4w7DruWbremaNcxL/qa6F7PYz+NvwnI5i/X7SQ=
Subject key identifier: B4:F3:67:68:84:CF:C8:67:46:8F:8C:8E:94:DA:EA:CC:31:C4:AE:7F
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 01974A4383690DDB8ED364B137EACD47085F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 12:00:27 +0000
Manifest this update: Sat 07 Jun 2025 12:00:27 +0000
Manifest next update: Sun 08 Jun 2025 12:00:27 +0000
Files and hashes: 1: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: M6Ty5oGUdMyprIS1dGeFlO5ZRDqqbOsKpXJRrOOv76w=)
2: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (hash: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:83:69:0d:db:8e:d3:64:b1:37:ea:cd:47:08:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Jun 7 12:00:27 2025 GMT
Not After : Jun 8 12:00:27 2025 GMT
Subject: CN=b4f3676884cfc867468f8c8e94daeacc31c4ae7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:0a:55:26:92:d4:6d:0b:67:8d:0f:3a:ab:
77:b5:5e:26:6d:09:96:ea:25:b6:6d:bb:d1:ba:a6:
8f:db:a1:e8:09:d2:20:4c:ab:94:11:62:0c:78:3a:
a4:6b:20:67:9f:41:a6:76:55:51:25:9d:d0:2f:af:
bd:87:68:91:af:e2:6e:0f:96:22:5d:d0:fc:16:78:
98:bd:a0:d7:93:01:c1:c5:2c:92:4d:b4:ab:81:51:
cf:4b:e6:bb:a8:24:01:2a:82:ea:83:c5:5d:5f:82:
2d:6e:47:a3:f7:89:76:05:90:da:ef:21:65:93:7e:
18:12:a3:e7:cd:6e:f2:28:3f:c8:f2:9f:13:2b:2c:
5e:56:29:fa:a8:2a:ae:88:c5:48:e7:67:00:9d:c7:
0c:15:7b:80:2f:73:1e:88:37:45:04:2c:1c:4f:71:
16:d1:f5:33:05:88:03:21:c3:c4:49:31:4d:de:84:
30:a3:5f:a7:39:4a:6e:cd:f7:25:fb:2f:6b:b7:d6:
b1:c3:79:2e:61:61:ae:25:c0:4d:80:e9:f5:46:fc:
26:c3:b5:cc:a1:31:8d:d4:f4:bc:ab:8b:93:7f:76:
0f:7b:5c:0b:9b:cf:a6:e2:9a:a1:f3:1e:09:67:a8:
53:79:b5:25:0b:b1:64:c8:61:17:06:43:d1:98:be:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F3:67:68:84:CF:C8:67:46:8F:8C:8E:94:DA:EA:CC:31:C4:AE:7F
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a5:b9:19:7d:66:cd:78:0f:44:6b:43:8c:67:39:0e:f4:7c:
a1:df:94:61:35:80:da:34:a1:85:e8:09:b1:77:55:34:72:67:
1e:73:45:76:2a:8c:e8:d0:20:c3:05:41:99:8c:40:02:6e:55:
3d:6a:ae:7b:fd:89:39:c3:e7:f0:b4:d9:59:c8:bc:4f:5b:47:
80:70:0b:63:9b:43:79:a5:e8:ac:77:e7:6c:7e:b4:7c:ee:43:
2a:87:19:56:d7:fb:df:af:0a:fe:5e:f4:6b:29:d1:0e:e9:77:
8c:44:1a:50:de:68:ee:93:36:42:64:40:d4:af:44:60:aa:6d:
cf:d0:32:28:b5:de:63:73:a8:cd:31:d3:1c:4a:ea:0e:20:b4:
12:17:1b:c7:ab:bf:64:bc:69:ea:a9:89:cc:86:ed:23:78:fa:
f7:55:86:29:0d:1e:3c:6e:6a:1c:d4:7d:16:ae:65:35:9f:7d:
86:ba:24:19:6d:27:8b:14:75:d9:6f:41:71:b6:e2:37:c2:21:
c4:05:81:19:cd:7c:e9:88:50:df:1a:fd:91:45:c9:f8:0f:34:
20:14:e0:ca:8b:86:a2:39:e8:68:3e:c6:8e:ff:d0:9a:25:e9:
bd:d2:6b:79:59:1a:b0:67:82:f7:f7:72:9a:1b:ac:c9:07:46:
0a:89:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:43:03 2025 by rpki-client