Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File: WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier: MNuDT6FJFwVJDGJw47PG0MCx0dWFWJxC1PdKM0noU5g=
Subject key identifier: 4C:57:C6:70:C5:BA:46:A6:6D:80:E2:72:3E:81:EC:3A:17:31:E2:3E
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 01974BC452A3DA2D16282778A04882A3BBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 19:00:46 +0000
Manifest this update: Sat 07 Jun 2025 19:00:46 +0000
Manifest next update: Sun 08 Jun 2025 19:00:46 +0000
Files and hashes: 1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: 34iM0F6KB6e1hynqSflnaQX0pteSiQunbF4BdGJatAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:52:a3:da:2d:16:28:27:78:a0:48:82:a3:bb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Jun 7 19:00:46 2025 GMT
Not After : Jun 8 19:00:46 2025 GMT
Subject: CN=4c57c670c5ba46a66d80e2723e81ec3a1731e23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:0d:61:0d:98:f4:eb:3f:ce:d0:cf:02:f1:
36:61:cd:ab:32:77:31:9e:5c:8c:be:80:11:62:ab:
c6:84:68:29:22:fe:4d:65:3c:86:ce:8b:d7:b9:1c:
d4:78:88:29:d3:5d:99:6d:14:f3:c6:8d:dc:ba:ae:
5e:1d:46:cb:89:48:12:e8:7e:5b:b9:c9:46:13:09:
aa:9c:13:ea:bd:4c:b6:72:5f:a7:d9:ed:9c:15:73:
99:ce:bf:45:86:3f:f5:29:8d:20:cf:29:82:3e:72:
7e:bc:5d:98:9e:26:de:68:f9:cb:35:eb:fa:55:d5:
54:f7:9e:90:04:e2:7b:8b:e2:11:a3:b8:e7:59:14:
23:0a:f1:10:4e:fd:85:ef:03:c9:38:38:5b:b8:ef:
81:1e:d5:55:68:c1:5a:35:b5:51:a9:ac:6d:b3:0b:
68:ba:08:a9:79:a7:7a:b4:e0:b8:c8:c5:6c:e9:fa:
26:29:55:5e:83:f1:ab:df:f3:f9:da:b7:19:bf:c6:
0c:ad:53:4d:1c:11:ec:de:f8:94:55:b3:0f:82:26:
1f:62:eb:01:52:86:95:23:d2:19:7d:be:3a:9b:44:
39:0f:90:87:10:74:42:dc:0c:47:3c:3c:1b:e6:ad:
9d:42:f7:32:3d:ca:72:0c:c2:3b:d4:4d:ea:31:50:
4c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:57:C6:70:C5:BA:46:A6:6D:80:E2:72:3E:81:EC:3A:17:31:E2:3E
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:51:40:45:ec:dc:ff:ea:89:9c:be:08:9d:6f:f9:15:d1:d5:
f2:cb:a9:91:31:92:b4:42:1f:ac:d0:fc:b2:b2:9c:93:52:43:
9c:91:7b:2c:ed:4b:54:26:64:d0:4e:b3:35:44:35:94:00:fd:
9e:84:d9:99:29:d9:89:22:a1:d8:20:9b:ac:92:a0:e6:3f:12:
da:e0:24:e0:33:c1:35:fc:a0:c0:0c:e8:2e:ec:c6:8a:84:7b:
70:37:8d:d9:0c:7b:14:f0:e9:ae:d9:93:37:d3:d5:ac:65:75:
f3:42:35:f9:7c:c0:c3:a6:7b:75:22:5c:97:07:ae:38:ae:25:
52:c7:06:0b:9b:13:3a:c1:a4:c9:60:d2:db:28:6f:dd:e2:34:
ee:47:ef:74:07:2e:53:ce:75:80:ae:5d:09:5b:8d:f2:e3:4f:
f9:a3:cd:0d:e5:2c:18:61:f1:37:8b:64:71:be:93:94:64:94:
75:68:8c:9a:b5:83:70:26:13:27:86:0d:74:49:88:3a:70:f2:
87:c0:cd:b3:67:6a:58:8e:5e:b4:78:49:a4:a4:0b:3e:32:49:
8e:3c:8e:d5:35:6b:8b:ad:8a:24:f2:bc:11:23:b5:7d:23:66:
10:f6:92:64:91:25:80:af:9b:ea:32:34:2d:91:8a:76:56:ce:
88:b5:9e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:56:42 2025 by rpki-client