Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json)
Hash identifier: evcDYfhg0USrWl9ODX2MtPaO4tDUrtbtttkFDaGeFXM=
Subject key identifier: F9:B1:1B:96:5A:BE:C5:83:C8:9D:0B:BE:D6:35:B3:B2:0B:6E:05:8A
Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87
Certificate serial: 019747E77CFFFFC843EEA3EB203E53737433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
Manifest number: 07B6
Signing time: Sat 07 Jun 2025 01:00:42 +0000
Manifest this update: Sat 07 Jun 2025 01:00:42 +0000
Manifest next update: Sun 08 Jun 2025 01:00:42 +0000
Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=)
2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: VEMu3MOAnvQTHPGQnuNInwDj0qrs3M9OWzx9oZQ6Fq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:7c:ff:ff:c8:43:ee:a3:eb:20:3e:53:73:74:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87
Validity
Not Before: Jun 7 01:00:42 2025 GMT
Not After : Jun 8 01:00:42 2025 GMT
Subject: CN=f9b11b965abec583c89d0bbed635b3b20b6e058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:c5:15:cf:e2:b7:1f:69:b7:99:4a:98:e7:
ed:9f:7a:c0:52:6c:d4:47:7d:ed:31:16:72:04:48:
3e:cd:1c:b7:14:3e:58:a8:bd:2d:55:6c:cd:0d:3b:
0e:41:42:5d:02:ec:3e:02:6f:ed:65:ff:fd:1f:39:
83:ec:d4:fe:21:98:69:35:7e:81:02:1f:b5:4b:17:
09:76:0a:2e:15:0c:9e:43:50:61:a5:c8:12:17:ce:
40:b1:45:98:d6:d5:37:64:1f:07:09:b0:5b:4b:7d:
b5:49:45:ec:4c:48:45:24:54:c9:1b:1f:9d:ec:da:
a3:a2:8f:49:bd:f3:32:85:12:6c:8c:fc:9f:de:a7:
24:52:68:86:e2:cf:66:e9:c7:3e:7c:0d:a3:9b:99:
94:02:be:b0:77:8c:6d:00:03:34:0e:4e:bc:33:4c:
5c:01:7c:63:9c:fd:95:72:f2:83:51:e9:ff:48:09:
a4:e8:b7:f3:ca:47:f7:21:5b:63:0a:fa:19:8f:ba:
df:2f:3b:23:8e:44:06:6a:9b:76:99:36:8c:fe:93:
20:93:9f:34:2e:31:6f:67:86:ef:18:ed:01:c1:47:
e0:e2:e0:52:38:43:38:5a:19:4a:5f:4c:94:76:d4:
f8:a7:f3:35:2a:7f:bc:bf:a0:bf:7d:ce:a9:f4:e8:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:1B:96:5A:BE:C5:83:C8:9D:0B:BE:D6:35:B3:B2:0B:6E:05:8A
X509v3 Authority Key Identifier:
keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:df:fe:7f:c0:38:f2:41:74:71:c1:7d:64:19:bc:36:86:e6:
9e:39:5f:5a:dd:60:cb:d6:bd:5c:71:e9:31:df:4c:80:a4:39:
90:28:5b:58:e9:12:94:d3:c2:44:25:45:5b:ff:7f:6e:af:9f:
3e:1c:d9:ec:2b:3a:f3:c5:1c:62:2e:98:c6:78:04:8f:f1:21:
e6:d0:91:bb:e9:0e:1d:a6:6d:25:fb:d9:6e:fb:72:d0:0b:ec:
1f:e3:89:50:79:1e:22:c1:20:5c:ce:21:e5:d2:ee:2c:4f:a0:
00:b8:41:ce:91:0e:2b:92:ef:9a:8f:ed:44:b6:15:10:f8:f9:
61:58:fc:3a:1d:df:2c:f7:1f:8d:64:22:e1:68:18:e5:27:ef:
b9:42:c0:4e:f4:73:0e:ac:8b:90:dc:13:1d:7e:ee:85:46:43:
5e:5a:d3:bb:ed:58:34:36:aa:cd:b2:20:bc:c0:23:f1:8e:2e:
c4:09:d2:98:57:cb:f5:fc:16:f0:5a:92:5a:de:45:c6:7a:bd:
84:0f:2d:1e:c7:9b:8c:6e:2a:f9:c1:b6:16:fc:72:ea:70:2d:
93:f0:cf:5b:ca:17:a9:4b:88:d6:5e:5f:1c:ba:46:47:90:3a:
f1:9a:e7:52:5e:6c:5c:8e:2b:22:e9:fa:63:fb:35:3b:64:bd:
89:c7:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:43 2025 by rpki-client