Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
File: WtYtZLAg5sARSELydiZePAfT6lw.mft (raw, json)
Hash identifier: y7MwIQJkD7TORYU1hwfJAzKPaRUI2Fy1oZdlldhle1Y=
Subject key identifier: 25:BF:6F:68:B8:4B:A7:F3:1D:05:3B:18:78:FC:53:C1:FC:D3:9C:D4
Authority key identifier: 5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
Certificate issuer: /CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Certificate serial: 01976DE2CF5E9AD682C3AB08E26E4D79DE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
Manifest number: 01A1
Signing time: Sat 14 Jun 2025 10:01:10 +0000
Manifest this update: Sat 14 Jun 2025 10:01:10 +0000
Manifest next update: Sun 15 Jun 2025 10:01:10 +0000
Files and hashes: 1: WtYtZLAg5sARSELydiZePAfT6lw.crl (hash: nHmQbPTnZ+KPNGFjPLHIg4rdrz2XX3dWksqNTNw0epM=)
2: lZfbUbYtdAwEvAPz9QgaQ6AiUzc.roa (hash: 95YPoU3EnMBScsmNlHgLSHa16IwnjsnV9FN8H0xyPaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:cf:5e:9a:d6:82:c3:ab:08:e2:6e:4d:79:de:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad62d64b020e6c0114842f276265e3c07d3ea5c
Validity
Not Before: Jun 14 10:01:10 2025 GMT
Not After : Jun 15 10:01:10 2025 GMT
Subject: CN=25bf6f68b84ba7f31d053b1878fc53c1fcd39cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7a:95:66:8e:9c:cc:72:d2:7f:0c:62:bf:e0:
6a:79:41:d6:01:53:3d:e9:35:8f:3e:4f:3d:37:3b:
48:e1:63:d2:17:62:7d:b8:06:5b:c0:c0:23:e3:ba:
85:a7:37:9a:77:50:66:ca:92:f9:79:89:88:1e:03:
eb:22:c3:98:6c:81:da:32:5d:ec:23:22:88:aa:17:
e4:24:4e:a8:87:0f:27:d2:9e:cd:ce:2b:11:95:da:
a3:1f:f5:63:f7:65:4d:d3:9b:bd:d6:02:a1:c8:dd:
17:ce:80:54:b0:e0:95:1c:05:35:ed:ba:33:55:43:
18:5f:b9:41:20:25:7a:81:14:48:e7:ab:d2:64:5a:
e2:46:02:29:02:5c:ce:db:8c:f5:78:b8:d8:eb:78:
01:8d:44:61:b0:8a:ca:d6:db:36:c0:c0:24:e9:48:
98:44:d5:a5:fa:03:e3:c9:50:1a:d5:dc:00:6b:2c:
95:c4:c4:27:08:e0:30:05:33:44:df:08:f7:b4:d1:
a5:62:c0:0a:16:3f:e1:9a:9e:a5:45:af:4f:51:90:
63:cf:c9:fc:b1:fb:69:7a:7e:2c:01:02:00:42:7e:
c8:57:62:64:d5:7d:ed:36:a6:6c:fb:d4:89:b8:43:
07:59:d4:cf:f3:c3:63:7e:70:51:0c:1d:9a:19:ef:
52:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BF:6F:68:B8:4B:A7:F3:1D:05:3B:18:78:FC:53:C1:FC:D3:9C:D4
X509v3 Authority Key Identifier:
keyid:5A:D6:2D:64:B0:20:E6:C0:11:48:42:F2:76:26:5E:3C:07:D3:EA:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYtZLAg5sARSELydiZePAfT6lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21195c-566a-4ff0-9496-508081499be7/1/WtYtZLAg5sARSELydiZePAfT6lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:74:b4:9d:ba:63:74:e7:d8:24:3a:14:9a:58:29:d2:7f:9b:
c0:80:9f:ba:1c:8c:29:f6:ff:2c:47:48:15:0f:91:88:db:00:
6b:52:7f:e2:85:75:af:fb:27:f5:7f:aa:a0:f0:f1:b2:f5:a0:
af:5e:07:5c:b8:a9:f5:17:c6:27:b8:4f:d6:74:fd:0e:8f:2a:
c9:44:ce:23:22:32:06:1c:92:78:d7:da:24:50:34:9f:9e:c2:
37:19:b9:91:94:71:45:7a:dd:a3:c8:ba:ce:c9:b9:6b:e0:ea:
93:ef:6b:4b:5e:95:30:24:d8:4a:0b:a3:5c:e6:ae:91:b4:1c:
9c:1a:fe:4d:b5:db:f9:d1:11:b0:19:2c:ca:a0:9a:bc:8e:a4:
f3:fe:2c:fe:ec:6e:94:18:d4:5f:a6:3f:4d:cc:c4:fd:e0:19:
37:87:dd:5d:f7:7c:2c:f6:ae:1b:8f:61:2c:00:eb:0c:08:bb:
21:aa:55:0a:42:d1:da:67:37:ff:df:69:fc:c8:cf:1b:97:af:
49:1d:31:e5:a1:96:e0:a0:db:db:44:ac:5d:04:8f:8d:f8:18:
cb:09:18:0a:ce:16:22:40:15:10:13:40:d2:f5:de:0e:dc:dd:
0b:f0:f2:30:59:6b:57:9b:fd:15:2d:3a:df:46:e6:8a:b0:91:
06:85:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 15:35:07 2025 by rpki-client