Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json)
Hash identifier: LYdgeXk83s7Gk6dFdQLjOXBlp8j/dq5TnOgb4xW4Rzo=
Subject key identifier: EC:41:41:D5:DA:7C:25:7B:91:CC:BD:D5:42:3D:57:75:77:F7:37:37
Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Certificate serial: 01974D7BB4237E807FD0A5860F40714797FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
Manifest number: 022E
Signing time: Sun 08 Jun 2025 03:00:41 +0000
Manifest this update: Sun 08 Jun 2025 03:00:41 +0000
Manifest next update: Mon 09 Jun 2025 03:00:41 +0000
Files and hashes: 1: HfvQGv3fkx8EbAZWjLyDRRI_Z8o.roa (hash: L6g/T7YHsTiEPnLp25ze+rccMiIRyJAPI1nh81w0wDo=)
2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: I7byH6TT4yXhpJDRpO48TaAB8vTSbhOoJhCk7KAH8BA=)
3: x4NMd_GpZKC3wjvt7UJp4kwmNNg.roa (hash: KiYRpe0+Ri1YnwEQ5QKwXeajhvNgmP7QYMIxZrED/ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:b4:23:7e:80:7f:d0:a5:86:0f:40:71:47:97:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c
Validity
Not Before: Jun 8 03:00:41 2025 GMT
Not After : Jun 9 03:00:41 2025 GMT
Subject: CN=ec4141d5da7c257b91ccbdd5423d577577f73737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:f1:e6:97:5f:07:d2:a4:31:1a:37:2b:07:
60:6b:22:89:bd:81:f6:c9:17:91:fb:fc:6b:76:ab:
42:27:db:de:f9:78:0d:b8:b1:68:98:01:43:9e:7c:
0b:66:c0:ed:6b:4f:ac:44:ee:d0:f2:a8:14:5c:c2:
8d:ae:0a:be:bf:b4:90:6c:37:50:52:4c:cc:43:bd:
3b:71:4f:64:9d:16:12:36:c8:2e:22:04:68:d6:19:
d5:3f:cd:c9:ab:86:14:d2:c0:2a:81:fd:e4:d3:f2:
14:aa:7f:94:3e:71:f5:21:c4:2b:2e:40:e6:47:42:
6b:53:d7:3b:e0:a2:87:82:f4:c2:a1:e0:f9:f8:0f:
41:fe:2e:90:aa:ec:b0:03:54:a7:7e:5d:bb:e9:8c:
a9:6f:f3:3b:2e:96:5f:70:54:54:37:32:79:82:0b:
bd:c2:12:df:f0:9f:00:cb:9e:5b:d7:31:e9:94:c9:
5c:58:b3:45:61:08:ff:04:e8:82:e7:ad:56:1d:57:
c0:67:de:81:9b:b0:42:a9:c4:f3:eb:1d:18:4d:3d:
75:7c:51:2a:5b:e1:3d:9a:71:3f:d2:f4:6d:c9:27:
47:56:b7:3f:c7:af:7e:1d:62:e8:2d:8a:a7:8a:2f:
2f:a7:62:8f:1d:8a:d7:73:7c:46:59:f6:c5:e6:61:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:41:D5:DA:7C:25:7B:91:CC:BD:D5:42:3D:57:75:77:F7:37:37
X509v3 Authority Key Identifier:
keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:12:4c:9a:a6:31:09:78:46:e4:0d:d3:6a:f9:0c:cb:b6:f3:
33:d4:43:9f:d4:52:1e:01:84:44:12:d9:d6:96:29:c6:56:4f:
1f:56:2c:f2:fb:b1:11:6c:02:6a:2a:09:88:5c:5b:13:13:34:
41:49:4d:fe:56:67:e1:e6:8d:85:91:34:4d:59:ad:60:bc:f4:
7c:58:de:c1:22:f8:ff:e5:0b:bf:8d:11:b6:20:b8:22:03:c3:
73:e1:25:b5:96:c4:41:4c:1c:f3:93:03:bf:ca:c6:33:1d:64:
b6:2b:36:e0:5f:7e:01:7e:e0:3f:55:ea:c6:38:f4:72:0c:e2:
69:0f:b8:13:27:f2:84:38:62:28:f4:1b:41:d4:04:1b:d7:9d:
e6:c9:1d:0e:f9:a5:6f:67:8e:22:43:7d:6a:45:6f:b6:d7:ab:
21:0b:ae:8d:87:85:a0:78:74:7d:c8:46:fa:7d:15:98:ad:e2:
5c:67:21:d8:48:8e:c1:be:fb:a2:ae:69:58:e8:f7:73:4b:49:
03:74:38:34:f5:ab:de:19:4d:4c:62:97:a7:e4:3c:3e:2e:1f:
4e:34:cd:2a:e0:6f:65:f6:8b:7b:0e:30:64:3c:27:a8:df:4d:
9a:6f:f0:73:15:7f:3f:db:55:33:32:fe:8a:f1:c2:d2:3f:70:
35:a0:6b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:37 2025 by rpki-client