Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json)
Hash identifier: TdwCu/kkpV3ag6WlcC0lYJ/cRkz5HfT04OIYfcaz0Eo=
Subject key identifier: 70:CD:3D:CD:54:54:3C:9B:64:34:1A:D8:19:97:D2:FE:7D:D9:0C:FA
Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Certificate serial: 01974C9FB17F9F7E182309AA82A1C97E9973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
Manifest number: 0907
Signing time: Sat 07 Jun 2025 23:00:23 +0000
Manifest this update: Sat 07 Jun 2025 23:00:23 +0000
Manifest next update: Sun 08 Jun 2025 23:00:23 +0000
Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: m6JOebawmyBJqpVVWnugqie0yLtlaVinA28TGlDzZ/8=)
2: zKInD_uJ0MzVuNFZ1nxujfzo5eE.roa (hash: ywKe3EUqcRYUSRMVsCEquUk7tolOVlQ1ahf+CyiEesM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:b1:7f:9f:7e:18:23:09:aa:82:a1:c9:7e:99:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1
Validity
Not Before: Jun 7 23:00:23 2025 GMT
Not After : Jun 8 23:00:23 2025 GMT
Subject: CN=70cd3dcd54543c9b64341ad81997d2fe7dd90cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:be:75:cd:11:ca:d7:86:c2:61:1d:1a:a4:
bc:42:57:e0:92:f6:df:e4:1b:a2:39:b2:fc:db:a9:
28:c4:08:91:47:ae:a1:bc:d8:f7:f9:ab:6c:fd:59:
53:84:7a:ac:da:8c:0e:ce:c6:cd:9e:e1:1c:25:29:
b9:01:81:ea:55:ca:2a:3c:d4:04:e2:97:6b:7c:00:
f9:cb:04:03:5b:a1:43:86:73:6b:04:5e:44:c5:d4:
01:13:1a:57:12:fe:03:08:80:97:42:9c:9f:39:e3:
e9:bb:f4:86:32:64:24:e5:30:cc:f4:27:39:b4:f7:
75:11:ef:ba:05:6e:c0:0c:c8:e6:ca:01:80:bf:7e:
e0:27:68:de:28:e5:56:5d:5b:3a:20:49:a3:3e:26:
6e:08:3c:85:cb:4c:9c:27:f2:f2:aa:e8:46:69:e7:
7a:07:6c:e9:66:7a:03:d7:ff:aa:91:9d:c7:5f:5e:
a6:86:b7:06:26:23:b1:56:b2:31:ed:f2:89:59:bd:
d5:18:ab:cb:1e:0f:67:14:9a:89:42:eb:71:80:9d:
39:be:ed:0c:86:02:f4:fc:a5:de:90:be:10:6f:2f:
b0:26:57:d6:e7:ba:da:fc:f7:1c:fb:de:63:56:60:
d5:20:64:00:9a:e1:c5:48:d9:db:c9:2e:b9:32:63:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CD:3D:CD:54:54:3C:9B:64:34:1A:D8:19:97:D2:FE:7D:D9:0C:FA
X509v3 Authority Key Identifier:
keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7f:92:3c:aa:57:f5:10:f2:f5:99:6a:1f:b7:58:5b:c5:aa:
4d:53:68:8d:f7:cf:60:bb:be:62:7e:1c:ee:09:83:b9:19:da:
1b:09:a9:6e:53:56:77:75:54:ca:59:35:06:6e:a4:2c:f2:70:
fc:37:5c:4f:f2:50:dc:43:8a:8d:ab:ce:a7:36:5e:0e:4a:e4:
05:6d:70:9c:45:03:e8:f4:62:3e:07:04:08:9f:45:65:eb:6d:
21:af:cb:3a:8a:b5:fa:98:4a:63:a2:e5:b3:df:e4:dd:7c:fa:
8a:5b:91:aa:2c:85:63:01:b5:eb:f5:1e:11:f3:4f:dd:93:7b:
c0:a8:ed:35:5f:01:25:c5:0d:9d:40:af:69:17:36:90:fc:f1:
55:de:15:9a:49:06:24:61:32:3e:fd:6a:8c:0a:f8:e7:e2:ae:
7b:42:7b:cc:40:69:73:77:fb:04:de:d5:14:c1:f7:64:58:26:
36:73:05:74:2c:a6:db:09:25:de:f1:77:0f:18:93:6b:0f:39:
83:61:93:7d:74:ba:ab:6f:99:ef:f5:1a:4d:a9:67:f6:b4:b8:
a6:85:63:94:53:d7:07:d1:02:05:aa:a3:e0:ff:9b:81:28:8d:
e9:0a:57:2c:4a:6b:f4:90:b0:5e:c7:fa:28:d1:7b:ba:e7:be:
66:f1:50:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:20:13 2025 by rpki-client