Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json)
Hash identifier: 5umHWuxpBbTtAA1C+EGaTjWWoVEVqDSjAkwogrlFLH0=
Subject key identifier: 5C:1F:18:69:DE:EF:C1:CB:F4:36:B9:D0:3B:EA:8E:AD:F8:CF:92:AF
Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Certificate serial: 01974B1F971169F4CCB2AFA83E7B6735CF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
Manifest number: 034F
Signing time: Sat 07 Jun 2025 16:00:50 +0000
Manifest this update: Sat 07 Jun 2025 16:00:50 +0000
Manifest next update: Sun 08 Jun 2025 16:00:50 +0000
Files and hashes: 1: 84jYv05HnlXjbNLOmoRHkF8n8LQ.roa (hash: /X9ewNFlsp/9ZFMAjrGm5l3SwfH8c42hlaaVDkUgEww=)
2: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: L2IRBovwnVTve8qhLq1TE4mgU5KElPeBg/HGJVjhy3A=)
3: y8uNxN4Qz-KJWpwgdJjEk856rFg.roa (hash: gCH8Gmi7LtX/qDiok3OTFvIkgdYcX5Le/2ybuhXBvN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:97:11:69:f4:cc:b2:af:a8:3e:7b:67:35:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288
Validity
Not Before: Jun 7 16:00:50 2025 GMT
Not After : Jun 8 16:00:50 2025 GMT
Subject: CN=5c1f1869deefc1cbf436b9d03bea8eadf8cf92af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:47:ab:ae:99:2a:89:06:28:58:df:f9:d0:
a6:e8:63:97:02:10:0e:3c:3f:65:c9:25:f6:25:57:
3a:90:0a:f2:cb:54:e0:f0:64:3b:e8:3f:1d:9f:9e:
f1:81:d7:17:90:4c:cb:1e:79:6d:1d:2b:28:97:03:
da:d1:25:65:47:f7:b7:61:ad:13:d7:d7:82:6d:13:
fc:f7:67:87:9d:69:03:98:77:a6:85:e8:d4:5a:61:
fa:f2:12:49:2e:03:53:7e:c5:43:1d:dd:47:b9:2f:
99:4c:56:70:36:b2:09:b7:39:fd:00:ed:09:09:ce:
8d:21:f4:26:56:13:dd:e0:36:29:aa:6a:50:5b:73:
fc:a3:48:01:3a:54:13:54:c9:ea:33:ea:6b:9b:1b:
8c:e6:2e:25:1d:45:da:5f:ce:71:4d:f4:af:ad:9c:
1a:2b:a5:c9:2a:35:31:ac:73:37:09:72:a6:8b:0e:
fe:e2:4c:57:02:d9:7d:c7:c3:0a:1c:d4:e7:aa:a5:
13:29:ba:09:e8:28:c4:77:d9:8e:99:ff:58:5b:92:
2a:d9:d1:94:9e:6b:d4:de:3f:09:0c:9e:a7:25:eb:
33:c1:f2:f5:6b:a5:57:09:a6:10:d9:82:0c:5b:f5:
25:1a:6f:a2:e4:21:5c:33:71:78:de:11:c5:9a:4a:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1F:18:69:DE:EF:C1:CB:F4:36:B9:D0:3B:EA:8E:AD:F8:CF:92:AF
X509v3 Authority Key Identifier:
keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5a:5e:c6:34:40:a9:ad:e7:65:f7:22:4f:b1:cd:80:3c:a3:
c5:7b:d4:91:db:9f:ca:df:e2:77:2f:28:61:07:5d:4f:dd:a4:
db:f2:48:ed:f8:76:65:60:82:0a:86:91:25:be:f8:22:d7:db:
4a:96:65:2b:e7:14:c4:5f:66:bf:10:49:7c:46:78:1e:d7:a2:
69:62:06:f9:10:3f:5e:b6:4a:ea:a3:cf:e6:1d:48:2e:f4:cd:
18:89:fe:12:8b:50:a7:f1:60:e2:e8:b6:c0:55:18:fe:c0:ff:
57:d0:73:4b:3b:8c:b0:7d:2e:ef:8a:70:ea:86:ff:33:bb:63:
59:90:ea:23:b3:95:22:0d:55:9b:09:0e:56:7b:85:ad:5a:40:
7b:04:72:bd:9d:e1:5b:e5:cc:f9:45:f3:74:f4:df:bc:6a:c3:
69:89:7d:3d:6e:c0:84:9d:73:64:dd:18:6f:4f:e8:1c:f3:09:
a6:d0:c2:7f:ca:d9:77:ff:28:dd:4f:0b:f6:c9:5a:33:97:3f:
13:42:e6:e9:71:66:30:1a:af:55:f8:84:cb:67:59:4f:2d:5e:
76:9c:78:e6:e3:b0:41:8b:05:51:f7:46:31:1d:1b:c7:37:8c:
50:fe:9a:e2:a3:bd:6f:2e:89:b3:e6:07:45:db:0d:f7:0d:5b:
09:3d:fb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:00:51 2025 by rpki-client