Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File: WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier: splFk+i2dlUDbHje/oQTjz3r0Y27yYXNoih9c5VkJrE=
Subject key identifier: 5B:AF:45:0C:50:56:9D:0E:EA:82:52:02:7E:C7:07:EC:F6:B8:CC:CE
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial: 01974A0C995D679251DEABFDFD95D0001003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number: 1432
Signing time: Sat 07 Jun 2025 11:00:29 +0000
Manifest this update: Sat 07 Jun 2025 11:00:29 +0000
Manifest next update: Sun 08 Jun 2025 11:00:29 +0000
Files and hashes: 1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=)
2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: 35XTUN2DYuYNlKBerBh5zcV5QeFpP2p23tOKH2tC2DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:99:5d:67:92:51:de:ab:fd:fd:95:d0:00:10:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Validity
Not Before: Jun 7 11:00:29 2025 GMT
Not After : Jun 8 11:00:29 2025 GMT
Subject: CN=5baf450c50569d0eea8252027ec707ecf6b8ccce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bb:d4:fb:07:c5:04:c1:fd:44:6f:bf:93:0b:
bf:21:25:da:3a:25:79:31:29:b6:b2:6c:f5:1e:c7:
bb:87:c8:7f:60:d0:0f:74:67:33:bf:67:39:a6:0a:
2a:59:2e:34:c1:e1:a6:69:78:b3:3a:44:73:fd:61:
55:2c:d4:0c:6d:89:5b:de:b3:a7:d8:5e:4b:32:54:
b9:80:54:b2:23:a9:29:6c:1b:cc:74:8e:6f:ae:1d:
2a:6b:d6:8d:d7:a5:ed:ac:49:90:3f:d5:9a:a3:3c:
c7:34:54:67:e6:0d:39:53:70:0f:cf:21:60:d4:06:
66:82:df:08:81:7e:8f:0e:21:81:30:9b:06:8a:aa:
97:45:81:9f:53:b3:c6:0f:f3:02:af:62:70:40:2f:
75:0c:8c:a1:4a:d7:be:11:80:96:25:26:8f:67:56:
ee:c5:8f:06:09:23:dd:c4:fd:32:b6:38:54:b7:76:
3c:4c:9c:9c:19:5b:8a:5c:bb:55:07:b6:4d:16:2c:
fc:36:55:ec:87:a8:9f:f6:f5:46:9c:37:78:dd:33:
07:4a:d0:02:3b:85:60:dd:6b:30:13:f6:c0:f8:6f:
a9:61:31:c7:9f:ef:25:41:a1:17:c6:fa:8a:0e:fd:
ef:9d:21:98:f9:70:1c:93:0c:2d:f1:66:91:51:c2:
ba:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AF:45:0C:50:56:9D:0E:EA:82:52:02:7E:C7:07:EC:F6:B8:CC:CE
X509v3 Authority Key Identifier:
keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a8:9e:e1:4a:d4:52:03:c8:d4:80:03:3e:3f:77:58:bb:26:
5f:b5:22:71:e8:6b:f5:40:80:98:51:7a:d1:1e:dc:f6:3f:3c:
8c:b2:45:07:f1:f5:1a:1f:bd:2b:b2:2a:2c:cd:a7:2f:5e:38:
ba:79:37:ac:42:d0:0f:f3:d8:9b:24:69:99:0c:db:81:f1:3e:
63:96:04:42:e5:6d:1a:a5:da:e2:08:4c:57:65:6b:fa:6a:c4:
84:c3:ca:b0:24:50:78:39:26:e1:09:41:90:52:8c:6f:af:84:
db:50:c2:2c:34:20:ba:09:e1:7e:66:04:78:e8:69:9b:fe:33:
b2:04:06:4a:17:c8:c4:45:d5:a4:4b:57:c5:f9:2e:06:e5:7e:
94:03:d7:93:71:76:9e:15:82:98:c6:54:ee:9e:86:fe:2c:83:
b4:e9:3f:07:51:b9:ed:b7:95:03:a3:cc:0a:8b:7e:00:24:c2:
b5:e1:20:64:90:dc:df:06:bc:46:86:0b:60:1c:a6:d0:23:86:
7d:9f:b5:63:59:f3:1d:72:02:4f:53:8e:23:07:66:43:4f:21:
18:52:d6:d8:b7:c6:83:70:6e:04:8d:ca:c1:6f:14:93:98:7c:
79:8d:72:79:d7:41:13:4d:2b:e3:57:a3:52:32:6e:c2:91:71:
f0:d3:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:07 2025 by rpki-client