Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
File: W8FQNhC_gthoe3rvuHmmV4cE8yo.mft (raw, json)
Hash identifier: 1O4L34qg5KFudr1ny3afe8maVkJjI952557b/nnH8Uk=
Subject key identifier: D3:54:CC:3E:37:4E:01:01:C7:9E:FD:06:1B:FA:37:97:6D:0E:1C:95
Authority key identifier: 5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
Certificate issuer: /CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Certificate serial: 019749D58EDECC2048D49D5977741450B2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
Manifest number: 0C20
Signing time: Sat 07 Jun 2025 10:00:21 +0000
Manifest this update: Sat 07 Jun 2025 10:00:21 +0000
Manifest next update: Sun 08 Jun 2025 10:00:21 +0000
Files and hashes: 1: W8FQNhC_gthoe3rvuHmmV4cE8yo.crl (hash: TFUHSO7xSCZ+37YUzmK2KiCyY08TArR+UKBHMPniYkg=)
2: rzLK9K7U47FPPeK7ERJASBVVtlU.roa (hash: X91g9n8reIlS29Iuv4BYArQQP2cYDZgj7Nwx0mw9YJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:8e:de:cc:20:48:d4:9d:59:77:74:14:50:b2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc1503610bf82d8687b7aefb879a6578704f32a
Validity
Not Before: Jun 7 10:00:21 2025 GMT
Not After : Jun 8 10:00:21 2025 GMT
Subject: CN=d354cc3e374e0101c79efd061bfa37976d0e1c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:93:bc:b7:2e:c5:16:cf:9c:09:64:f7:a5:
5e:9b:80:81:fc:df:c5:ef:f7:5e:3f:09:b4:af:a7:
9b:28:3c:b5:5e:0b:6f:31:0e:c2:88:f1:c9:27:4c:
48:f9:01:53:56:0b:d1:db:a7:8d:f2:39:be:22:35:
35:a2:9d:af:55:a3:4a:21:4a:f9:5e:a7:08:83:0c:
59:73:b3:cc:e7:dd:d7:db:68:4d:4c:3c:6c:1e:d7:
8f:37:88:ad:b0:b3:26:a4:5e:5d:54:2a:bb:0c:cb:
13:9d:3a:64:b4:6a:b8:37:b8:cf:d2:99:63:14:b8:
51:0f:1f:e2:16:39:e6:a5:1a:47:c0:9d:9b:5b:e2:
82:8b:b7:8e:5b:dd:3e:be:4a:0f:c9:5c:4d:e0:a8:
56:9d:b3:cc:ce:f6:bd:44:33:4d:c1:6e:24:da:61:
79:0e:ff:2f:ac:35:67:d9:69:3d:ae:21:39:72:d8:
30:e1:47:ee:64:d3:12:4c:7b:ff:f3:a2:c2:6a:34:
24:49:92:0d:02:73:ad:35:c8:ff:56:20:69:70:86:
b6:4b:f6:1b:49:e3:20:c4:08:a0:9c:c0:4e:5a:20:
ea:f4:d9:f6:0b:19:3d:65:7c:85:83:42:64:1b:73:
50:07:da:ed:f3:bd:0e:7f:c1:a6:0a:4c:81:0d:04:
a6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:CC:3E:37:4E:01:01:C7:9E:FD:06:1B:FA:37:97:6D:0E:1C:95
X509v3 Authority Key Identifier:
keyid:5B:C1:50:36:10:BF:82:D8:68:7B:7A:EF:B8:79:A6:57:87:04:F3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8FQNhC_gthoe3rvuHmmV4cE8yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/30a309-b18e-4f27-8e7e-e7b372e4c7c5/1/W8FQNhC_gthoe3rvuHmmV4cE8yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:58:14:c2:40:a9:02:bb:08:7d:30:75:4f:d8:50:52:00:eb:
94:2c:3d:eb:90:57:cc:cd:7e:97:de:9c:c4:03:9b:b0:89:52:
63:32:e9:d7:c0:86:51:f3:c2:42:8a:c9:35:7d:2e:1a:65:2e:
b0:cd:04:4d:e5:32:5e:1a:0e:aa:cd:c9:a2:90:48:e3:5a:1b:
52:d0:94:4b:fc:63:cd:91:1a:79:c1:9b:ec:53:68:01:f4:f2:
87:ff:58:79:b4:a4:e1:fd:e7:52:17:61:4e:2f:29:6c:f3:c0:
7c:de:42:ca:98:d2:70:d4:39:d2:9b:34:cc:50:f6:a2:bf:46:
48:5a:2e:9b:bc:aa:53:7f:09:82:13:46:b5:62:22:f6:76:fd:
a6:a3:28:2d:87:f0:c1:89:0f:e5:0f:c7:05:5b:1d:50:46:6c:
05:67:f6:55:09:6c:60:6c:20:bb:4d:26:32:74:3c:a4:bc:7a:
48:c5:e7:92:04:5f:b0:ec:35:bd:83:fc:0c:3e:30:df:63:ef:
98:52:fb:95:07:f6:27:f9:00:eb:ae:82:8e:7e:1c:f3:db:8a:
96:4c:ad:cd:4f:e3:65:c9:13:8d:f3:69:a7:6e:51:4d:f9:40:
50:c9:3f:75:96:ec:c4:e1:00:0a:8f:c9:95:8b:9c:c5:0c:ac:
e8:65:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:38:42 2025 by rpki-client