Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: kKUz+P+6yCmwBSKppalROn2SHf+5sjJ5ElVDsa2pUEo=
Subject key identifier: BF:9E:C7:17:4B:8D:41:87:3D:49:97:79:53:A7:E0:B8:8D:59:B0:AD
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 019750B41AC9063EA4B68E2D54E6A96816CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 18:01:09 +0000
Manifest this update: Sun 08 Jun 2025 18:01:09 +0000
Manifest next update: Mon 09 Jun 2025 18:01:09 +0000
Files and hashes: 1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: kEvRXAwsZVEbtNILHMZXPEAk/OjC8ePIOkhoXI1yu0E=)
3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:1a:c9:06:3e:a4:b6:8e:2d:54:e6:a9:68:16:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Jun 8 18:01:09 2025 GMT
Not After : Jun 9 18:01:09 2025 GMT
Subject: CN=bf9ec7174b8d41873d49977953a7e0b88d59b0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:4d:93:c1:20:d6:9f:07:f4:87:a6:57:56:
1f:02:5a:c4:81:21:d4:05:e8:ea:d1:3b:54:d2:28:
e2:0b:45:52:4d:13:7d:ad:9f:a4:41:05:ef:ab:05:
a3:73:41:f9:68:f3:12:7c:f2:3a:ed:25:d5:7b:36:
cc:e6:3a:20:9f:82:ff:56:f6:ec:de:ae:7b:0d:c4:
38:15:80:c4:9f:d8:e9:ed:30:98:65:90:5b:26:f0:
85:7c:5a:aa:61:70:42:6f:d3:4e:e0:53:63:ea:ec:
60:b3:e1:66:28:13:c1:55:1a:96:63:c5:06:af:cc:
06:f6:73:87:16:db:79:34:59:77:d0:b0:b3:ba:5b:
07:e6:98:1a:0a:12:b7:3d:c4:28:73:ae:2a:cb:eb:
e8:5d:a6:4f:c8:9d:9d:c9:0b:35:5e:8d:34:71:e6:
c9:2b:3f:4c:85:ac:28:fd:2a:a7:f3:63:bc:26:f4:
0d:9b:da:35:55:2e:ff:7e:99:b7:2c:48:27:0f:e8:
16:2d:b1:2a:1f:e9:46:73:59:2a:da:13:23:fc:94:
0c:21:c6:2c:e3:51:c9:a9:86:90:05:70:4e:cf:ff:
67:2c:11:8a:a0:1f:1d:1f:03:3c:64:ac:da:ef:1b:
84:b6:a2:cf:3d:00:0d:84:3e:76:ae:43:a9:bd:c1:
d0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9E:C7:17:4B:8D:41:87:3D:49:97:79:53:A7:E0:B8:8D:59:B0:AD
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:25:5b:b0:04:42:c6:9d:45:64:af:76:80:fd:33:23:8d:f2:
6f:7e:44:46:ce:09:bd:8e:67:e4:7d:e5:20:23:05:86:5f:12:
8a:b0:53:0e:d6:27:d2:a4:73:4f:75:58:65:45:63:cb:3e:4d:
53:bf:ae:40:85:03:9b:72:01:57:1b:55:ac:7f:35:6d:97:d8:
e5:ee:e3:b0:44:91:9c:da:4b:38:5a:19:a6:6c:9d:5b:88:bb:
e0:03:67:15:98:4f:56:23:f3:3a:9e:08:86:07:78:86:78:40:
df:91:01:13:bd:f4:ac:24:c0:9f:2e:65:72:fb:b4:3e:ac:05:
c4:91:41:8f:f6:7b:80:89:b4:33:e1:bc:5c:03:10:7f:f0:37:
b1:3b:63:db:d9:29:30:ea:43:21:76:7a:9c:e8:ba:00:db:7c:
8d:f9:07:da:9e:81:38:25:08:27:42:75:9d:56:52:58:6f:9e:
f1:97:00:79:c1:e2:8a:97:98:dc:98:82:66:1b:ea:1d:89:4c:
66:be:d5:bf:c6:43:a1:0a:77:c2:dd:1e:1c:10:af:49:09:54:
43:e4:c1:c4:7c:23:10:cb:ba:20:3a:43:5b:8e:c2:f3:18:14:
2b:0c:bf:17:b9:fd:a7:90:ea:d9:ac:cd:8e:d0:0a:41:f7:65:
65:0d:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:49 2025 by rpki-client