Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: MPnRjNybSU+Pxn26Xc3A7TOeDIP3ZF6Ry+HNdInsdTM=
Subject key identifier: B8:5E:17:EF:12:E5:AF:61:A8:3B:FF:73:D3:14:DD:A1:2D:E1:42:14
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 019759EDA75C96E05B74D868F70986059F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 1585
Signing time: Tue 10 Jun 2025 13:00:36 +0000
Manifest this update: Tue 10 Jun 2025 13:00:36 +0000
Manifest next update: Wed 11 Jun 2025 13:00:36 +0000
Files and hashes: 1: kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa (hash: GuGEs/myNDqnLNvt1oCueG5pjZk/wU9SkbqBX0DdzIw=)
2: kZ91QLg0xrut8heY5oLTREuaDCo.roa (hash: MHAbqSvE1IAdHrt1bDct/PVOIuPEBRkSyGqv/6pjqdI=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: zBFc8+snhQF9JfiQZZTL9cmmX3vTDcc+uUZ+UeXew/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ed:a7:5c:96:e0:5b:74:d8:68:f7:09:86:05:9f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jun 10 13:00:36 2025 GMT
Not After : Jun 11 13:00:36 2025 GMT
Subject: CN=b85e17ef12e5af61a83bff73d314dda12de14214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:05:bf:71:c2:bb:2b:c3:b9:e7:82:79:cc:
e2:12:f8:e5:63:0c:84:7b:bc:c8:8d:c2:28:c0:11:
46:20:38:fe:08:6b:b6:c0:c4:e0:c1:0b:fc:de:6f:
3c:8b:e8:7d:de:fd:8b:f3:8d:36:ed:45:72:54:be:
f4:f9:51:c1:4b:56:85:65:67:80:8d:a6:0e:13:dd:
f8:3c:41:a9:27:06:7d:18:23:08:78:67:a6:aa:df:
68:25:b5:fd:0d:73:03:78:8a:89:1a:6a:00:3d:04:
33:8c:1e:7a:c2:4a:80:4c:56:f3:72:b7:1a:b9:91:
af:10:a0:dc:54:67:e6:51:65:1d:f4:ce:2b:a0:4c:
7c:20:9e:df:22:d8:b9:63:b2:83:18:89:c9:9c:66:
a0:e7:91:2a:00:83:aa:90:65:8d:d8:d5:69:a1:3c:
49:df:5c:75:6c:ac:42:bc:db:2d:ea:4b:31:ea:16:
c7:91:76:06:ad:2e:93:48:78:32:2c:5e:57:24:c7:
8e:9f:2f:a5:ed:46:07:23:e9:c5:7e:25:2b:d3:f8:
56:ed:83:c4:65:60:aa:5e:4f:d4:53:9e:b3:86:9d:
e8:f6:66:2b:f8:ad:50:66:1d:9c:17:78:b5:bd:c6:
fc:d3:29:2b:df:b9:fc:3c:6b:2a:7e:ba:fe:36:c6:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5E:17:EF:12:E5:AF:61:A8:3B:FF:73:D3:14:DD:A1:2D:E1:42:14
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:75:45:4a:61:00:ee:74:1a:0f:8e:8d:37:84:7e:c8:9c:ba:
34:4e:43:82:a6:f0:34:6c:fd:0b:1f:bf:20:4a:ea:35:3d:d7:
e1:26:f1:8d:10:f0:04:ca:d4:6d:b4:1f:bc:87:4d:ed:14:51:
05:16:61:73:90:8a:c3:14:dd:d5:3a:ef:c9:a2:93:eb:23:6c:
70:c6:24:fc:6e:6f:02:b4:04:2a:df:8b:de:5b:e8:22:d5:80:
3d:e3:71:bc:18:e1:54:d4:2e:be:a2:77:de:2c:55:3b:b4:6a:
ae:8f:a6:ca:99:10:4f:01:67:b7:ec:d1:a6:af:02:aa:7d:c4:
d4:70:16:a2:1f:d6:f4:81:2d:51:42:26:ce:19:b4:b5:f3:f6:
93:2e:72:7c:d3:d4:aa:db:94:71:ad:e8:97:b4:0c:11:47:12:
c6:44:69:43:9b:8f:34:a1:b5:76:f2:44:07:6c:d8:3b:2f:34:
c2:7a:82:4c:4d:be:7a:59:75:74:1e:0e:92:10:d7:77:19:c5:
11:41:5b:cd:6b:b0:0f:26:39:07:d4:6f:3c:49:27:46:df:80:
35:96:22:cc:75:ed:5c:46:5e:1a:8c:37:47:a1:4c:1e:fc:3c:
5c:3f:82:81:4d:47:0d:b3:98:c6:fb:f3:a6:23:50:34:b1:fd:
d5:18:eb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:12:47 2025 by rpki-client