Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File: wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier: 04vo7rdgHwYBMt7563BFxx3VF4aEfe9FYyXONerb14Q=
Subject key identifier: 88:F5:A5:E4:0E:39:D9:F6:8F:1D:B4:86:D6:63:7C:14:2B:C1:3C:FB
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial: 01974A43F7EEB5EA593706A9534918DBCA94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 12:00:57 +0000
Manifest this update: Sat 07 Jun 2025 12:00:57 +0000
Manifest next update: Sun 08 Jun 2025 12:00:57 +0000
Files and hashes: 1: NO4AW5Gi5epvfnutXf6m_pLoKDw.roa (hash: 1o2hUp8Qay3eqTXCqBb3VcdpmxjfDTdYSgYdj2A3ZP8=)
2: hsaReoXY2mR3_oCjpG4j-yPGtgE.roa (hash: cnraCmQfKTDWUgiiK98Z/023EXxjG/JmIpzpFMXqbwQ=)
3: nChyDb158g4ETV6S1h4UKmIWYw8.roa (hash: nll+aElSurSjLSWtf0Qc8rCb0mOo9oC+4mUSWL5RZno=)
4: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: SXueCHa/XeRd1lLUCm0oP8QX2EsvVlprtEbtp/LyUuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:f7:ee:b5:ea:59:37:06:a9:53:49:18:db:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Validity
Not Before: Jun 7 12:00:57 2025 GMT
Not After : Jun 8 12:00:57 2025 GMT
Subject: CN=88f5a5e40e39d9f68f1db486d6637c142bc13cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:60:a5:80:13:70:6c:34:4b:56:4f:e7:67:
82:be:ea:ac:70:dc:87:ca:dd:52:2a:25:a3:95:60:
88:8b:0e:2e:52:78:9d:d3:60:eb:f0:db:c0:d3:c8:
48:88:85:21:96:6f:16:f1:dc:4e:1f:5d:5e:ee:da:
ca:9f:f2:3f:21:ae:2a:6b:2f:a1:0c:67:82:c7:d5:
8d:56:fd:ba:e1:9c:2f:63:d2:0d:0a:a6:79:1a:cb:
b7:36:a5:51:84:2f:2d:45:96:48:43:c5:bb:e8:8c:
ce:d3:01:20:ba:b3:b2:f6:07:86:37:1b:aa:f6:de:
37:d0:48:11:5c:a1:a3:b8:ef:a9:b0:39:b5:d4:60:
27:2c:c8:7f:74:8a:ec:e2:bf:37:5a:09:48:0b:73:
cf:57:e9:f8:d7:d8:0c:14:8a:3c:48:11:0b:6e:ea:
83:2d:b7:44:84:5b:e3:c6:39:01:9d:35:3e:b4:ee:
0f:9f:03:85:29:84:63:de:98:e6:9d:19:21:b2:e4:
31:53:d1:a1:51:20:2c:9c:4a:55:95:d4:b0:5f:42:
40:0a:6e:4d:69:9a:29:80:7d:86:07:9c:fe:ff:7d:
2d:ca:a7:e5:d6:b0:12:5c:02:24:d6:ac:6e:2c:2b:
b2:bb:70:11:69:bc:dd:92:c7:40:a6:a5:f1:75:f9:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F5:A5:E4:0E:39:D9:F6:8F:1D:B4:86:D6:63:7C:14:2B:C1:3C:FB
X509v3 Authority Key Identifier:
keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b1:a2:0c:cc:04:96:d0:c2:dd:ce:ee:cd:e5:ce:aa:e3:03:
43:36:89:fd:df:b8:77:db:53:e2:31:de:80:89:77:7b:0b:84:
d5:96:ab:77:2f:92:18:51:53:01:80:09:ac:af:76:ae:62:07:
17:28:13:b8:1d:43:1d:92:57:8c:7f:5b:f8:b5:1b:18:7b:8f:
e3:81:65:04:4e:61:f1:59:87:f5:a9:1f:fb:ab:7a:e5:a7:53:
2f:33:4f:e3:93:b9:ee:e9:85:0a:af:16:85:e4:ae:b8:cc:3c:
04:dd:88:88:75:87:4e:c0:f6:21:0c:39:d3:6b:cb:09:e9:e0:
70:57:84:5f:ee:62:a9:b4:ff:21:8c:bd:8e:f8:32:24:a8:c2:
84:4f:4b:97:08:c9:8a:28:07:b9:c5:14:e0:29:8d:62:be:de:
79:c8:c4:93:2d:be:41:ab:e5:53:7c:6f:2f:2b:a0:26:d6:9b:
e8:f3:71:de:26:03:e5:13:96:3c:1e:a6:6c:77:5c:84:29:4d:
cf:ef:9f:55:51:fd:05:b9:b6:ef:ad:9b:57:29:fb:72:ca:f3:
5d:88:05:be:6a:92:5e:cd:ef:b7:96:72:4a:27:ad:3d:32:a3:
11:dc:17:17:c9:ce:cc:d5:b2:f8:df:b5:74:45:ed:f7:39:ee:
55:94:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:53 2025 by rpki-client