Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier: a80Bgsz7mcAnkummG0b5yZt7Qcw6xtq8XylCAxbx3sE=
Subject key identifier: 8C:4D:5A:59:08:51:F5:E4:C4:01:53:8D:73:9F:96:6A:CA:4B:15:A8
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer: /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial: 019749681045180E9997AA6B4E4ECC1E5830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number: E9
Signing time: Sat 07 Jun 2025 08:00:45 +0000
Manifest this update: Sat 07 Jun 2025 08:00:45 +0000
Manifest next update: Sun 08 Jun 2025 08:00:45 +0000
Files and hashes: 1: 1-DmKYgnKcK0PXEAQVbF_OKc3-qY.roa (hash: A2ZK2n/AK9OAPtM9+Qchv9vt+I10xrYcK4O013Ux+Cs=)
2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: ZTZmO2UzLpg1/ASvZI+85c5LpOZhq1b+t6UB6R+gZVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:10:45:18:0e:99:97:aa:6b:4e:4e:cc:1e:58:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Validity
Not Before: Jun 7 08:00:45 2025 GMT
Not After : Jun 8 08:00:45 2025 GMT
Subject: CN=8c4d5a590851f5e4c401538d739f966aca4b15a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:c2:90:69:2c:6f:b6:37:08:66:39:a3:9c:
9f:f0:28:96:5b:71:67:99:df:d8:7e:f8:1c:63:69:
ce:74:b2:31:e1:44:66:be:a8:67:12:d5:78:b0:c5:
40:18:80:17:c6:c2:2e:cd:8f:d3:d4:ea:ad:1b:7a:
95:2f:41:af:3f:f1:7c:9b:a0:17:72:c5:d5:52:71:
0b:97:14:62:b0:bc:8b:f1:40:6f:4b:c2:8b:0f:7d:
ca:d3:cf:de:f0:1c:63:8e:61:11:e7:3e:bd:ee:93:
fc:2f:8d:6d:3d:de:c5:7b:23:23:f3:3c:ca:10:8b:
6b:ca:92:b7:d7:00:e9:18:d2:7d:a8:85:5f:43:79:
65:b2:57:0b:3d:2f:37:85:24:99:ab:8e:f3:65:e3:
b1:2b:a2:ac:94:af:ca:13:30:80:c7:19:3f:54:b0:
8f:ae:9c:07:79:6c:e5:b4:fc:a4:ef:5e:35:2f:c9:
27:d5:ae:6f:1a:79:3e:31:9e:af:f1:cf:ba:e8:5f:
b9:16:ac:09:da:19:50:63:f7:4f:ca:a0:71:d1:1f:
48:b4:f3:f6:37:79:fe:40:09:b8:d1:b2:65:e1:91:
17:f6:97:90:a1:5c:bd:b8:80:f8:dd:d4:52:d9:be:
78:b0:f2:16:d2:66:41:26:3e:86:18:da:4d:fc:43:
9c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4D:5A:59:08:51:F5:E4:C4:01:53:8D:73:9F:96:6A:CA:4B:15:A8
X509v3 Authority Key Identifier:
keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:bb:90:81:58:82:39:a1:86:9b:52:33:7c:32:15:8e:77:
c6:13:8e:a1:90:10:26:71:be:a6:15:d0:06:83:dc:10:32:54:
55:1b:c4:b5:6f:da:b1:a4:66:16:84:51:25:4c:4d:19:9f:af:
9a:f8:d0:67:ba:cb:20:9b:14:af:75:35:b0:e6:a1:86:bc:ae:
5b:eb:9e:e1:1e:63:59:26:bd:78:e7:22:bf:f0:d2:d2:9e:5e:
82:58:48:5d:84:6b:8a:60:02:dd:24:53:86:16:9f:9b:3a:2f:
7f:df:b4:30:4b:1a:1d:d2:41:16:fc:f4:af:6b:53:f4:48:7b:
8d:bb:3f:3a:f5:a5:3b:83:54:8d:12:59:97:70:28:76:f5:15:
b7:d2:9f:d4:ee:9f:4d:e8:c1:cd:d4:eb:74:18:d9:6e:a9:29:
2d:99:58:17:6e:99:57:49:93:ad:50:71:d6:4b:8a:83:91:1c:
a5:bc:1b:71:09:69:b4:a1:1f:b3:53:bb:4a:ff:ff:25:cc:7f:
f2:ea:0a:47:d4:3d:e0:3a:20:c7:ec:93:78:70:a8:01:ab:bc:
66:dd:88:18:d6:bf:d9:29:a2:00:90:f6:42:b1:a2:c9:54:d5:
4e:ed:2e:8e:37:2d:68:db:ea:ce:97:5b:4c:d8:62:46:4b:01:
bb:f2:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:15 2025 by rpki-client