Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
File: pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft (raw, json)
Hash identifier: 9T1BNiEDQNbFDHhhsp2IqVVEB2Os3HhgulVfBF+PR8U=
Subject key identifier: 6D:F5:42:B7:03:1E:3B:06:A6:FA:0D:FF:92:14:01:7A:02:10:4B:91
Authority key identifier: A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
Certificate issuer: /CN=a561ccb03741056715a6be4805321662d88e7e7c
Certificate serial: 0197488C822E31C203125430FF3E59EBFD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
Manifest number: 07A5
Signing time: Sat 07 Jun 2025 04:00:57 +0000
Manifest this update: Sat 07 Jun 2025 04:00:57 +0000
Manifest next update: Sun 08 Jun 2025 04:00:57 +0000
Files and hashes: 1: Ht6Wd5Bw2md9CUATtRL2VX-XFlc.roa (hash: 6oTLBNPocrrlaUNBq/IOSo88GlYRhWvOfw5kea2nyRc=)
2: ZrGtCqKCK6D0hI3hPtXzoUeoPWc.roa (hash: 2oHhvMXHLj14EEFTSzUZ5GuRtYtjQRNwBSzyWSxhAWE=)
3: pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl (hash: WPYCv5L9wGRagcB1HwXvxREp3s3KSAIofATZSJ+iP6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:82:2e:31:c2:03:12:54:30:ff:3e:59:eb:fd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a561ccb03741056715a6be4805321662d88e7e7c
Validity
Not Before: Jun 7 04:00:57 2025 GMT
Not After : Jun 8 04:00:57 2025 GMT
Subject: CN=6df542b7031e3b06a6fa0dff9214017a02104b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:35:24:4a:46:e4:81:55:a0:c9:8c:8a:cb:
9b:59:08:26:37:56:76:88:f9:e8:98:55:cf:fb:91:
5d:c0:fe:d7:6d:07:e4:05:8e:f6:09:cd:7a:cd:79:
ff:d4:fa:85:f6:07:f9:55:07:f7:b9:f3:42:b9:0b:
ed:fa:df:27:77:86:ec:e9:9e:1a:03:f7:31:ee:e1:
5c:94:4b:b6:ab:16:dc:81:a1:67:66:b5:14:ad:c4:
79:cc:23:a5:d7:58:f4:12:21:b7:b9:e2:7a:3f:c1:
91:ca:30:d0:8c:38:42:29:21:5c:b6:b2:2b:2b:94:
ca:94:72:9c:21:b5:58:ec:e6:13:ba:c7:44:a4:de:
0f:56:3e:5e:15:8f:9a:73:98:96:ec:7f:46:4e:b7:
da:d1:e3:ad:d8:5b:89:ea:c3:cd:54:74:0c:b7:6e:
32:51:e9:76:81:fa:5c:79:f1:9c:d0:28:48:10:10:
1e:e8:01:4d:3e:27:fa:15:92:60:36:63:04:c6:d3:
13:12:02:88:31:eb:c3:ab:f8:38:55:23:60:6e:84:
3c:ca:fb:59:30:d7:9f:3a:59:23:63:31:ce:ed:17:
d0:33:90:23:75:0a:ee:26:e5:cd:8e:4d:07:dc:ae:
23:54:71:5b:97:0e:f6:85:90:60:cc:17:01:b4:24:
f0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:42:B7:03:1E:3B:06:A6:FA:0D:FF:92:14:01:7A:02:10:4B:91
X509v3 Authority Key Identifier:
keyid:A5:61:CC:B0:37:41:05:67:15:A6:BE:48:05:32:16:62:D8:8E:7E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWHMsDdBBWcVpr5IBTIWYtiOfnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc7fa-0462-4cf6-9189-ae4e698664f1/1/pWHMsDdBBWcVpr5IBTIWYtiOfnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:42:5e:1c:c8:ad:e0:c0:a6:bc:18:98:fd:43:3a:9d:17:f4:
0b:d3:0f:d9:34:c2:1d:c4:6f:0e:a4:99:f5:79:95:30:88:fa:
18:cb:6d:a6:c3:58:ea:84:7a:41:f0:f2:15:29:77:26:e0:3f:
ff:1d:1f:5c:e7:84:ea:0b:fd:96:88:92:b9:e2:e4:b6:77:1c:
39:12:9a:77:8a:44:48:db:0e:72:81:f7:3e:2a:be:e2:9a:28:
e8:4c:42:d1:64:10:4c:94:30:32:79:9d:d2:61:1f:96:53:05:
e0:1a:7e:31:f0:cd:ad:0f:54:e4:fc:58:3c:1c:f9:02:7c:fa:
5d:ae:c8:14:86:93:98:b7:9d:80:3e:8a:da:62:c6:65:d9:b2:
37:2d:98:f8:51:31:a0:75:1a:41:ee:10:dc:a1:7d:d6:07:4f:
b4:b0:eb:1e:a1:c8:3a:fd:dc:45:e2:f5:ff:b8:e3:38:46:fe:
dc:2d:e1:12:b2:c0:34:76:77:ef:16:7a:8b:16:0d:ff:8e:83:
34:65:eb:22:7c:4f:9b:25:71:19:ec:b9:f6:1a:4f:71:31:c3:
5c:0b:24:6a:f7:57:a6:98:3a:a5:c3:86:84:7a:32:fa:4a:f3:
07:34:d3:0a:49:81:11:bc:24:66:a0:a8:56:ce:64:8d:9f:24:
dc:f6:07:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:50 2025 by rpki-client