Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json)
Hash identifier: K7taTsDVwmHYhW+FLRf6mvglZIub4tsihm61x0aZusY=
Subject key identifier: 9F:68:26:47:73:49:5B:5A:B4:44:11:50:1D:AD:D0:3B:EC:51:5B:6C
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 01974E8E745317FB447619B084273C79B8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
Manifest number: 13B0
Signing time: Sun 08 Jun 2025 08:00:48 +0000
Manifest this update: Sun 08 Jun 2025 08:00:48 +0000
Manifest next update: Mon 09 Jun 2025 08:00:48 +0000
Files and hashes: 1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=)
2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: maUY5TnDMPmXfSgEswoaCSMU3+bdXTnx3EeENShML0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:74:53:17:fb:44:76:19:b0:84:27:3c:79:b8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Jun 8 08:00:48 2025 GMT
Not After : Jun 9 08:00:48 2025 GMT
Subject: CN=9f68264773495b5ab44411501dadd03bec515b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:fc:23:da:82:06:54:2c:cb:be:b5:09:a3:
b3:e4:24:65:5f:5f:96:d6:65:0d:3a:fd:8e:7f:ab:
13:3a:57:76:e1:8d:44:53:bf:bc:35:88:71:e1:68:
11:6c:ab:4a:c0:43:12:25:19:b5:73:70:ff:45:f6:
ce:ba:1c:6b:d0:13:88:36:14:6d:e9:84:eb:f3:03:
52:09:5b:0f:7b:54:05:e1:16:2b:9b:b5:9c:9d:f3:
ce:f6:c2:6f:ac:9c:88:f3:9f:af:ae:9b:76:fc:e7:
bf:cc:70:d8:e9:59:f4:95:68:67:a2:f2:0d:ab:89:
57:7b:2f:16:14:e6:b2:8f:84:4e:56:02:a9:a2:27:
9c:bc:95:b8:c3:d4:93:d0:23:2f:26:7b:59:51:30:
64:4d:24:bd:8c:69:65:2f:f5:39:92:77:16:1c:d9:
a1:55:ff:66:b4:70:7b:97:c8:94:07:91:ae:2f:06:
b9:34:39:73:89:6d:da:b2:bf:df:29:18:f3:d2:ea:
5a:3f:0a:c5:7e:0a:03:ff:8e:6a:34:19:1e:9f:1f:
af:af:8e:39:f8:a3:b8:17:cd:57:b0:8e:84:bf:2f:
0a:55:29:5d:a9:3b:93:3d:e5:e4:c5:47:28:65:ea:
41:92:fe:8b:ce:c8:16:92:4a:c4:c6:d2:c7:50:2d:
11:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:68:26:47:73:49:5B:5A:B4:44:11:50:1D:AD:D0:3B:EC:51:5B:6C
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:98:90:49:71:40:b6:1d:3f:d9:c2:ee:cd:a1:26:09:62:47:
69:98:e4:92:e8:da:63:42:48:41:8c:d3:3a:28:d3:a3:b5:ce:
b8:99:3b:49:29:ba:f1:25:78:65:25:c9:5b:77:c9:ce:e0:97:
f1:a7:dd:79:66:f6:02:69:05:0e:cf:79:98:4b:0d:19:c7:8a:
a3:ce:9d:a1:f6:d7:53:48:29:2b:0a:3c:db:46:cb:2e:e2:35:
87:20:6e:68:88:f3:93:77:4a:cc:90:14:33:71:3f:04:8c:02:
cc:cd:f0:4b:6c:c0:c3:f7:ec:14:c1:e8:7a:d2:58:95:1d:d1:
6b:ab:0f:4b:09:fc:5e:0b:3a:73:97:98:e5:ab:fc:0a:ba:09:
12:ce:05:a6:c0:8a:5d:99:d4:4d:cf:16:d1:8d:9b:fe:6b:36:
f2:08:86:4b:0f:52:6d:c4:2b:23:27:6d:67:53:9d:bf:0e:3c:
6f:ff:66:64:f2:90:e3:3f:d1:d7:38:0e:7e:99:88:2d:aa:b8:
c3:b0:cc:10:ce:23:93:20:17:14:31:7d:e0:0b:e9:46:85:49:
d3:99:91:65:aa:40:16:eb:27:23:e6:7a:c8:c7:bf:19:6e:a3:
cd:17:68:1b:b4:36:bd:73:65:8e:90:e5:99:fc:bf:fa:23:fa:
44:c6:c2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:31:20 2025 by rpki-client