Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json)
Hash identifier: JzljiglW7Pwth2yB6BsfMANQVfq5lWlu2Znfh3/tJXk=
Subject key identifier: 95:93:9B:14:FC:60:EF:70:02:A6:54:61:90:D3:3D:75:E2:69:12:BC
Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Certificate serial: 01975FB8F3F301D82B36ED53886FEF71ACEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
Manifest number: 1588
Signing time: Wed 11 Jun 2025 16:00:45 +0000
Manifest this update: Wed 11 Jun 2025 16:00:45 +0000
Manifest next update: Thu 12 Jun 2025 16:00:45 +0000
Files and hashes: 1: kRQmIjZUZcW_fI2_4gYw0CKPjk8.roa (hash: GuGEs/myNDqnLNvt1oCueG5pjZk/wU9SkbqBX0DdzIw=)
2: kZ91QLg0xrut8heY5oLTREuaDCo.roa (hash: MHAbqSvE1IAdHrt1bDct/PVOIuPEBRkSyGqv/6pjqdI=)
3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: PRFks+zj2NEJg4klHQQ70iI8glKl2Fxu5zQ37im4ZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:b8:f3:f3:01:d8:2b:36:ed:53:88:6f:ef:71:ac:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287
Validity
Not Before: Jun 11 16:00:45 2025 GMT
Not After : Jun 12 16:00:45 2025 GMT
Subject: CN=95939b14fc60ef7002a6546190d33d75e26912bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:9b:2a:de:93:62:a0:8f:28:de:31:55:18:
8a:3e:af:e0:1b:54:38:a8:f4:b1:a9:40:ac:54:49:
c5:65:30:ab:ab:2e:45:3b:21:bd:c1:43:65:c3:75:
90:36:69:86:12:8c:7c:10:13:e4:c3:03:20:4a:46:
4a:41:3e:9d:6f:a1:90:bd:bc:9f:f9:0b:48:d7:8c:
db:5e:9a:d6:df:ce:aa:a0:f6:8e:b1:05:14:0d:b1:
2c:50:fc:b0:77:35:6e:44:2b:06:6c:09:fc:9f:24:
3a:3c:dc:a0:86:26:62:46:18:a2:08:23:cb:82:86:
98:bf:b4:2c:20:cd:74:ec:29:e9:9f:63:3f:df:bb:
15:c0:0c:2c:12:5d:2a:2a:a0:ee:77:7f:73:7d:7f:
f4:78:53:14:ff:c7:6c:41:8e:4c:37:04:03:90:4c:
30:43:13:0d:5d:ad:3c:f4:b1:60:32:2b:ba:f1:94:
48:3f:21:42:b7:3d:49:e3:22:c0:6b:4a:1e:df:64:
af:ee:e2:71:28:05:74:6e:b1:92:a0:64:ad:ef:79:
7f:9c:f7:0e:fe:7a:39:ab:d7:32:34:a7:fa:d8:3c:
e9:bd:68:cb:f2:02:53:90:ed:8d:5a:ea:29:67:89:
03:db:df:e5:b1:f1:84:c7:40:b2:8e:60:74:89:22:
38:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:9B:14:FC:60:EF:70:02:A6:54:61:90:D3:3D:75:E2:69:12:BC
X509v3 Authority Key Identifier:
keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4c:22:b5:c8:43:d4:6a:11:ab:a1:18:90:20:35:df:cb:21:
48:73:b8:ac:f7:e0:55:ca:22:a2:64:52:8e:89:bd:ff:69:46:
21:7a:92:62:e9:a8:e7:42:e3:1c:7e:8b:a2:d9:6a:70:0d:5e:
06:f9:14:0c:17:71:42:9a:b2:f5:ce:3b:09:35:f7:95:62:45:
51:8d:1d:d2:a5:fa:b0:3e:de:68:a9:fa:e9:30:e0:d5:38:e2:
e4:85:28:56:dd:73:28:c6:4b:88:2a:bf:60:b1:d5:f3:bf:d2:
bf:a1:52:4b:a2:ad:a1:74:bc:e1:38:09:2b:be:2f:b3:1c:62:
ba:72:dd:e2:70:16:3f:e4:b8:cf:8f:8c:dc:c4:98:d6:85:72:
b7:58:28:d5:14:be:24:74:81:b7:79:a9:43:87:62:2f:69:08:
a9:a4:c2:93:dc:a1:00:fe:34:76:25:f7:c5:d1:dc:0c:99:bf:
39:58:7c:48:59:3f:82:d5:5c:8c:e0:94:93:e1:cf:8c:9c:20:
f0:aa:ae:35:57:71:1e:46:7b:9b:c8:01:59:24:d9:27:c2:69:
a4:68:c7:a1:88:87:2b:de:1d:02:73:f3:7c:d1:ce:f5:0b:d6:
ba:2f:8c:0c:6f:25:00:7f:1c:24:d7:49:2b:c5:f2:4c:c6:ae:
8c:e0:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:13:25 2025 by rpki-client