Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: Dn/GOcQdNxBff1k6oLwqiJ7XOHIU1kzSak94eExY/Zw=
Subject key identifier: 14:5D:BD:1B:22:EA:25:2B:B7:95:DE:9B:9A:18:56:F6:D0:A5:3A:C2
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 019747B0C14F2D23CA10504B63D12CE6964A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 0E78
Signing time: Sat 07 Jun 2025 00:00:55 +0000
Manifest this update: Sat 07 Jun 2025 00:00:55 +0000
Manifest next update: Sun 08 Jun 2025 00:00:55 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: iRRURW42OXEoCftYfspjjWgZilEer/jH5wIHuUOosx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:c1:4f:2d:23:ca:10:50:4b:63:d1:2c:e6:96:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Jun 7 00:00:55 2025 GMT
Not After : Jun 8 00:00:55 2025 GMT
Subject: CN=145dbd1b22ea252bb795de9b9a1856f6d0a53ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c7:f4:66:49:5e:c3:74:13:c5:84:53:ee:cb:
9b:13:00:68:5d:fc:16:ef:f0:45:9a:c6:a5:65:60:
a4:15:67:42:e7:fe:9a:09:20:2f:40:ea:d1:b3:de:
f6:47:bc:9e:16:d9:a9:d6:76:7d:91:82:78:88:d0:
35:b1:19:8e:54:1b:ed:a0:0a:64:cd:27:69:7d:64:
b4:7d:59:40:86:9c:1f:55:9d:18:d7:cd:dc:eb:db:
69:c6:ff:af:dd:b3:6f:ae:e4:e7:97:e6:3f:2d:90:
4d:75:67:03:3d:23:e3:88:17:7d:f5:33:70:18:90:
cc:21:73:d8:9c:18:96:ab:2c:de:fa:c3:48:0e:62:
3d:ae:24:64:b1:8d:43:4c:62:f0:c3:b2:88:2e:4c:
94:73:d8:99:38:4c:cc:47:ea:31:47:0a:62:67:03:
37:bf:d8:0a:34:29:35:d1:8c:a7:a8:35:62:a7:a7:
76:f2:4a:7d:07:fd:62:bf:3c:50:82:81:44:2b:73:
00:53:bf:ad:2d:12:6d:d8:52:5a:a2:f1:da:d0:38:
c3:0c:68:39:f4:ff:bb:1c:02:d4:4c:a8:81:e4:32:
4e:75:2f:aa:f3:8d:e1:d0:c0:95:a9:1f:6f:bc:b0:
55:a3:5a:90:5c:da:f8:a1:dc:98:fc:f9:60:26:d9:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5D:BD:1B:22:EA:25:2B:B7:95:DE:9B:9A:18:56:F6:D0:A5:3A:C2
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:8f:1c:44:c2:e0:3b:95:51:c8:02:e4:a9:e3:ac:8e:70:
fa:10:40:c5:97:ba:c0:43:34:07:81:a9:c9:2d:39:15:b0:2c:
5b:86:c8:ce:5a:c9:ad:d2:52:1b:79:6c:d3:19:a8:00:19:43:
13:f3:a8:37:8c:e2:8d:e5:87:fa:e0:90:d7:cc:06:57:db:c2:
73:b8:e6:c1:e8:78:ab:4c:87:58:fe:d2:22:5f:e0:aa:d7:f1:
38:4d:9d:a2:ad:d9:e0:dd:c4:67:9a:5f:b5:25:19:9b:17:5b:
ca:59:8f:81:89:e0:98:a2:3a:bb:af:4e:3a:cc:93:86:dc:6a:
30:fe:98:5f:c9:33:27:3d:b4:91:f5:8d:9b:ac:43:bf:24:cc:
32:96:34:fc:00:c8:9f:bc:a4:7c:0c:df:3e:32:35:96:a5:fd:
74:b6:7c:71:18:51:03:17:8b:f6:bd:40:05:23:19:cc:f7:8c:
53:ef:92:9e:a9:f2:f6:41:d9:fa:77:9c:c0:19:0e:96:ea:6e:
94:8f:6a:92:c8:48:48:ca:c8:1b:5c:45:b6:cb:29:95:88:4e:
0a:da:55:d0:e6:9e:e1:a9:ac:5d:47:c9:e6:f7:54:5a:fa:69:
a6:af:5e:0f:81:eb:7f:f7:ab:59:19:e3:e9:39:d8:53:76:02:
4f:f3:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:08 2025 by rpki-client