Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json)
Hash identifier: WSXkrpvH3KpCPfN2Lkrl/8HSQcP6WdBpIQ88+M+JpY0=
Subject key identifier: 43:D8:5A:EB:33:02:2D:DA:2B:54:07:AC:A7:51:77:AF:57:4B:09:A0
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 01974B1FE13BBB0A06DA94B8FF5B144DECC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
Manifest number: 134E
Signing time: Sat 07 Jun 2025 16:01:09 +0000
Manifest this update: Sat 07 Jun 2025 16:01:09 +0000
Manifest next update: Sun 08 Jun 2025 16:01:09 +0000
Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=)
2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=)
3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: GctbLujkoSRxqq0HrI8D8MI4YHdk+NseSdVEP0L4vkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:e1:3b:bb:0a:06:da:94:b8:ff:5b:14:4d:ec:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jun 7 16:01:09 2025 GMT
Not After : Jun 8 16:01:09 2025 GMT
Subject: CN=43d85aeb33022dda2b5407aca75177af574b09a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:8a:5a:3b:05:4e:3d:81:73:24:6b:00:fa:
d6:60:c2:31:24:58:a6:84:ef:31:f1:8c:f0:b1:d2:
18:42:af:0a:3b:c8:5e:61:6d:b8:59:06:ab:7f:2c:
37:cc:96:10:48:6d:8d:6c:6f:45:8d:cb:eb:85:16:
9c:ad:19:a4:9f:df:39:0f:cc:7d:2b:fa:53:c1:5f:
e5:a9:7c:6a:13:0b:59:cb:60:3d:5a:81:b9:18:fd:
a3:2d:46:9c:d2:bb:9a:5a:96:94:05:9b:31:79:e1:
a2:d5:dc:02:3e:dc:d6:09:a9:85:f9:bf:69:39:21:
88:20:a8:b9:65:91:1e:72:c8:4a:0b:c9:a1:da:68:
6a:66:29:38:ad:bd:fb:98:c3:8a:d7:65:a9:b5:19:
81:2c:5f:b5:66:68:9d:46:bf:fa:10:d9:98:5a:21:
c4:01:14:e5:b7:ba:f5:ef:9d:05:aa:52:6e:fb:03:
63:ea:1d:b7:03:c6:cd:54:78:15:e5:46:08:64:61:
cb:26:fe:57:b7:db:d2:23:70:e5:2b:61:7a:fc:55:
89:f4:46:eb:f4:b6:0e:88:5e:89:25:d3:d4:71:10:
11:0f:2f:0d:9c:a5:69:e3:f0:f2:a7:b1:1b:a3:aa:
d7:20:cd:17:66:09:de:ee:c8:41:73:e6:be:1a:e6:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:5A:EB:33:02:2D:DA:2B:54:07:AC:A7:51:77:AF:57:4B:09:A0
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b0:97:37:4c:25:ce:b4:78:f0:fc:b3:96:77:91:62:a7:20:
37:34:d9:db:66:6a:cb:69:df:ca:b6:85:18:1c:85:a5:cf:65:
03:51:e3:11:13:5a:f0:ed:99:55:6f:9d:bc:89:98:f1:13:af:
12:e1:f5:07:91:03:8f:4b:11:ea:6b:6a:5b:ee:f9:ef:92:2b:
e3:84:52:6f:5d:58:9c:94:a8:f3:2e:fb:54:ec:38:5d:f9:38:
92:1f:d6:c1:6b:d5:3d:74:39:97:7f:8c:6b:2a:b3:ae:69:81:
e1:e4:0c:56:d1:2e:1c:e8:51:22:14:8a:de:ca:61:21:aa:6c:
e0:63:fe:72:cd:89:1d:54:7f:83:c9:46:96:b4:92:47:a2:bd:
7b:79:72:a0:a9:06:00:e6:2e:61:c0:30:28:c5:43:8d:1f:57:
d8:83:29:20:2e:03:eb:eb:12:b2:20:05:00:4f:7c:b0:43:a7:
36:d7:ef:8a:63:1e:ce:b7:95:35:a2:75:e7:a7:7b:1c:98:84:
ff:29:60:2d:1f:45:7f:a9:a9:3f:ca:05:59:f9:f1:91:da:35:
15:e0:73:93:d2:45:fa:5f:66:7d:15:20:75:d7:11:94:7f:88:
ec:ce:6c:03:06:29:83:64:95:79:95:74:c7:0f:d7:69:09:a7:
9d:f7:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:38 2025 by rpki-client