Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: dP0BTBuNQ5Lmbd3ly27WAlMPWs2TQPLvBSkKmlHjEsk=
Subject key identifier: D7:E7:C9:6F:BF:05:93:3D:84:17:04:35:E5:92:FC:29:FE:5F:38:78
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 01974A7A8C36227E7AA0991021D5A92A775E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 159E
Signing time: Sat 07 Jun 2025 13:00:34 +0000
Manifest this update: Sat 07 Jun 2025 13:00:34 +0000
Manifest next update: Sun 08 Jun 2025 13:00:34 +0000
Files and hashes: 1: 4D3wEAaKaO-VNYMegevp2dIDiZA.roa (hash: Pboeq/VEw/fEiNcfqVmPGeRB5EfnZp8myD9JUVRtoS4=)
2: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
3: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
4: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
5: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
6: HQ5pk500M9r_ovoVxF0QEcohnog.roa (hash: ww8oMO4jWUVQ6/eBdnQNu3m8JDu+2hsoI9UHwgt7uPk=)
7: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
8: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: BfEzTNpVRxCG5YZAeIfLd6FEGABaEim794LWGCQq8Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:8c:36:22:7e:7a:a0:99:10:21:d5:a9:2a:77:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Jun 7 13:00:34 2025 GMT
Not After : Jun 8 13:00:34 2025 GMT
Subject: CN=d7e7c96fbf05933d84170435e592fc29fe5f3878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:59:75:5b:c9:92:54:52:fd:d8:e0:0b:a5:
33:bf:e4:ed:aa:ad:b3:eb:de:cf:c3:f5:34:1a:30:
ac:b1:c7:3e:2c:f5:21:54:fa:9d:5f:1d:44:04:cb:
9c:99:1a:3c:80:65:4b:13:2f:ae:aa:8b:97:98:0a:
3c:9b:8a:2b:e4:77:e2:93:39:24:e0:1a:f5:b9:2c:
17:02:6f:e0:49:26:18:e2:c2:86:b4:ec:8c:13:db:
57:77:8c:5d:16:a3:5c:1c:ce:ac:db:2d:41:b3:02:
d7:41:86:ce:a1:09:e7:2d:d9:61:01:da:4d:fd:7b:
14:58:fb:f8:6f:13:c6:98:76:7d:3e:34:4c:62:c6:
6f:09:a5:e6:95:66:34:13:b7:cb:ba:02:44:52:e5:
0a:7e:e9:fc:8a:ad:a0:46:50:00:38:d1:2d:68:9a:
ff:dc:be:85:50:7b:b4:fc:37:15:06:0c:ee:6f:f4:
03:b1:e1:85:d2:a8:55:5c:e6:ea:ed:96:39:a8:a0:
2c:e8:f5:b9:0e:3a:7b:50:0e:1f:aa:67:a8:be:1a:
60:4b:a3:57:45:ca:37:55:f1:2f:db:5d:4b:bb:ff:
a1:fa:ce:b0:e1:90:ae:de:51:9a:d6:33:df:89:f1:
c2:da:fa:56:be:29:1a:60:56:9a:e3:80:b1:cc:18:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E7:C9:6F:BF:05:93:3D:84:17:04:35:E5:92:FC:29:FE:5F:38:78
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:34:fc:47:97:d5:bd:56:b3:25:37:43:5f:77:26:21:69:c9:
db:94:02:ae:b2:7d:06:dd:e9:4f:60:96:5c:a1:59:a6:40:be:
23:3b:da:6b:ee:74:92:d7:f4:7f:3c:7f:24:02:a2:ad:80:9d:
7f:44:c3:1d:ee:2f:3e:7e:91:88:a9:eb:39:6a:09:b2:de:63:
36:3f:3f:fc:df:bf:2b:5b:bb:6b:8a:2e:c7:4f:a3:53:8f:66:
d3:b9:f5:cf:75:1a:7a:b7:27:e2:42:9c:e4:a3:2c:e8:ba:49:
d4:64:43:c4:15:85:02:bc:b9:f3:9b:10:c1:c5:a9:9a:87:82:
0e:f6:4f:fd:71:83:e4:05:05:a9:34:71:89:7f:d8:34:b7:c1:
bc:5c:ab:31:f8:65:ce:fb:97:32:10:f2:e0:3a:c7:5c:6b:3e:
32:bc:29:8e:86:bf:52:f7:62:d9:10:8d:8b:1f:8e:17:3a:ea:
96:9f:4c:ce:75:b0:8a:b2:ee:58:f8:6d:c6:e7:8f:66:d4:87:
d9:49:47:98:35:8d:94:e2:6e:72:d2:3d:11:52:21:25:67:e4:
77:0b:d5:fb:8c:cc:6d:12:19:54:7b:e0:61:9f:96:fa:d6:be:
06:df:10:e6:0c:bd:61:66:a7:b6:24:bb:61:ba:bc:17:65:39:
33:96:ae:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:53:58 2025 by rpki-client