Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: ajuNxGtJ6n4k2a6A/rwRNBJ0mR8q/1RDCZzS/5rjOms=
Subject key identifier: 14:95:76:49:9E:EC:71:66:C5:A7:45:7A:46:D1:AA:BC:7A:84:83:83
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 01976FD0CE210487AEF2728BE1D4737A98FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 01A2
Signing time: Sat 14 Jun 2025 19:00:44 +0000
Manifest this update: Sat 14 Jun 2025 19:00:44 +0000
Manifest next update: Sun 15 Jun 2025 19:00:44 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: 1TYRqJ6KWQv4FfsxOkC0CLRhOmudFAc8nqcdfk0E5xs=)
2: lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa (hash: 95YPoU3EnMBScsmNlHgLSHa16IwnjsnV9FN8H0xyPaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:ce:21:04:87:ae:f2:72:8b:e1:d4:73:7a:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Jun 14 19:00:44 2025 GMT
Not After : Jun 15 19:00:44 2025 GMT
Subject: CN=149576499eec7166c5a7457a46d1aabc7a848383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:8c:34:b4:e5:18:6f:81:bb:ff:53:94:1c:
22:30:3f:f7:21:73:4b:ee:4e:75:b6:ff:3b:26:f4:
f2:74:a8:ef:ce:01:d6:df:08:38:af:6d:2d:98:7b:
de:f9:94:19:5c:53:7c:a6:94:8f:08:4e:6c:f7:9a:
4b:bb:37:d7:c9:7e:ed:09:55:cc:76:54:11:c7:b1:
64:f3:27:b8:ae:6c:0a:96:af:ac:df:b3:01:db:2f:
31:ff:2a:f2:01:90:1e:05:45:c2:53:bf:4e:7a:c5:
c5:54:59:0e:35:db:cf:f0:90:b9:38:b5:7b:54:fa:
3b:5a:5e:b2:69:cd:78:dd:23:d0:9e:b7:f4:89:34:
43:24:3f:d9:f2:87:30:96:90:dd:75:83:4f:8d:a7:
f0:04:4e:25:5c:70:a5:ce:3f:b5:9b:04:b8:ba:72:
05:7a:e8:3b:ff:4e:fd:fb:d2:ac:51:85:5e:8c:44:
fb:0c:5c:f2:f0:a8:97:1b:d7:e3:71:da:b3:4b:44:
1b:79:1e:b8:df:9c:c2:a4:ee:e2:d8:08:73:dd:92:
f5:fe:0e:2d:10:3c:1a:a5:23:12:3e:a9:5c:53:d9:
51:ae:47:57:12:8c:cf:9c:7a:cd:59:9a:2b:a2:44:
8d:49:8b:52:21:f8:7f:d9:ae:e5:7a:ce:c4:ea:91:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:95:76:49:9E:EC:71:66:C5:A7:45:7A:46:D1:AA:BC:7A:84:83:83
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c1:64:87:0f:61:20:28:33:85:73:bc:3f:be:50:6b:20:54:
ec:b8:6d:bf:b3:56:4e:51:93:1b:1f:9d:e0:49:fc:66:c9:a3:
39:91:99:cb:ba:94:78:cc:6e:0e:94:ee:38:59:ce:8c:3a:0f:
3c:00:92:68:33:15:e6:a6:51:c4:5c:a1:4c:9d:8d:51:be:5b:
6e:9a:74:dd:ff:96:5a:7a:b9:77:51:0f:d5:ee:b8:f7:49:9f:
ba:d4:66:ca:19:a2:6b:b4:7a:96:21:28:bc:32:94:8f:2a:08:
2b:4c:8d:33:28:db:76:9c:e1:60:64:75:30:c3:ef:58:1a:a8:
cf:4e:ac:1a:0d:5e:ae:06:ad:68:11:0a:44:9f:f6:72:76:b9:
6c:7c:11:ee:9d:03:25:0a:04:f2:06:07:6e:a0:87:b5:be:d5:
dc:4a:f4:de:14:74:d5:a5:40:df:81:9b:69:8f:2a:ce:37:6e:
8d:cf:66:5e:cf:9f:f8:85:94:7f:39:e2:57:ce:5c:10:f4:cc:
20:ef:bf:a9:a5:63:21:03:52:17:e2:d4:b5:68:5e:db:05:7e:
22:78:c5:aa:8b:da:1f:7c:2d:e5:83:29:9d:f1:6e:9f:f0:93:
ee:72:87:2f:d9:7c:35:a3:a0:26:f3:06:1b:9c:16:3c:f0:a6:
a5:94:92:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:17:10 2025 by rpki-client