Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
File: W_fQ5HEirv77Ys6iFnSoECVVmxo.mft (raw, json)
Hash identifier: R6rW5nLycCHpK6Mp9sHu38sVOnJP+3za2ZYRD4In49w=
Subject key identifier: E0:FA:FC:B0:78:DA:5B:D6:C0:5F:B4:3C:57:27:7F:9F:9C:E2:B1:B0
Authority key identifier: 5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
Certificate issuer: /CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Certificate serial: 01974B56568D8B235402FCB1BC965A24C402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
Manifest number: 0539
Signing time: Sat 07 Jun 2025 17:00:38 +0000
Manifest this update: Sat 07 Jun 2025 17:00:38 +0000
Manifest next update: Sun 08 Jun 2025 17:00:38 +0000
Files and hashes: 1: W_fQ5HEirv77Ys6iFnSoECVVmxo.crl (hash: ojwPm/PzbPnD1JZ9F9Ez/qzjFvLYJe5taNx5VI/yArQ=)
2: asNSq8lkmS1XdMPBwyGi7exxYUQ.roa (hash: IeZFlfU/tf7kNLd1ueG9wWhJ27KVNelvhJ00kXOKzso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:56:8d:8b:23:54:02:fc:b1:bc:96:5a:24:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bf7d0e47122aefefb62cea21674a81025559b1a
Validity
Not Before: Jun 7 17:00:38 2025 GMT
Not After : Jun 8 17:00:38 2025 GMT
Subject: CN=e0fafcb078da5bd6c05fb43c57277f9f9ce2b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:be:ed:3e:01:eb:e0:d1:2d:9f:9d:d2:d2:8f:
3d:1d:83:b7:5b:00:c2:9a:2d:a8:16:48:6e:a4:b7:
05:d1:38:0b:54:87:b9:8c:02:1f:86:a0:9f:e2:99:
47:2a:1d:4e:46:55:e0:97:c3:dc:b8:cc:99:07:c0:
39:5a:57:d9:c1:a0:d1:15:ad:8b:50:3f:5e:6e:07:
38:ec:5f:6c:75:98:66:b9:3a:c9:52:4a:da:52:58:
c8:68:35:9f:bf:4c:60:7a:da:d8:bd:32:e0:80:3b:
8a:4a:d7:96:90:67:88:3b:04:d0:85:47:85:04:20:
77:f9:55:16:2a:3b:c2:cd:54:60:49:07:dc:c1:98:
f5:e3:29:4e:68:1d:71:db:ea:96:d8:46:ba:cb:bf:
db:ce:f8:2b:c0:65:ae:bb:d8:ed:fb:82:31:d7:7f:
19:d1:ff:17:36:96:3e:91:83:ee:ef:d8:82:16:df:
1c:f4:01:65:f2:83:7d:99:54:d2:99:b6:c6:dc:df:
97:2e:4e:6e:ee:8a:8f:16:7c:ab:4a:00:b9:4b:04:
52:b4:7f:a2:a2:1f:f1:79:0f:d5:f5:85:07:7b:9b:
c8:3e:ff:82:05:89:d0:7e:f4:60:e9:fa:a1:cc:bd:
22:d0:73:aa:e1:3d:c2:66:7e:83:a2:69:5e:09:32:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:FA:FC:B0:78:DA:5B:D6:C0:5F:B4:3C:57:27:7F:9F:9C:E2:B1:B0
X509v3 Authority Key Identifier:
keyid:5B:F7:D0:E4:71:22:AE:FE:FB:62:CE:A2:16:74:A8:10:25:55:9B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_fQ5HEirv77Ys6iFnSoECVVmxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/094c50-2c86-4a55-8eb0-1cf722517baf/1/W_fQ5HEirv77Ys6iFnSoECVVmxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:53:ad:ef:47:31:d1:83:f7:c1:20:b4:c6:66:5b:f1:b0:cd:
c5:45:c7:3d:dc:58:0d:81:8e:bd:51:ce:96:7e:21:56:e8:d8:
de:f7:21:c0:19:76:a0:1d:d6:5a:02:92:bb:d4:a7:59:cc:de:
28:0b:be:63:b0:c1:ea:8c:9b:e0:9e:69:be:eb:4e:cf:9f:b6:
90:bc:05:38:de:98:61:41:0d:c7:79:c5:7c:8b:0e:63:e1:2b:
a7:0d:08:9e:76:75:1a:61:a2:f6:ad:a6:c0:5c:b0:83:e7:0e:
54:03:b5:9d:88:c6:a6:19:fc:8e:a4:1d:9f:16:cb:47:0b:b0:
0a:9b:53:1c:80:3c:a0:07:b0:28:e7:61:e0:12:dc:b5:b8:96:
e9:f0:6c:90:74:72:5a:53:12:a3:97:78:bb:09:17:23:51:2f:
78:b1:4f:b9:e2:cd:7a:e6:be:83:fa:1f:20:51:35:4a:56:c7:
16:4c:95:3d:3a:32:c6:0a:06:f8:2b:a2:89:8c:43:d4:ce:80:
16:36:4e:e3:d5:9f:18:5e:30:8e:5a:66:ad:11:cf:89:d8:71:
ba:a8:6a:14:7a:55:44:0d:39:fd:46:1d:7e:ef:43:8d:72:35:
78:5b:be:cf:5b:6c:fa:20:92:24:ef:20:94:e7:bc:38:06:f5:
3b:9d:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:44:13 2025 by rpki-client