Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
File: wT40HB4U01p0ls54KOMFX4Y5Nc8.mft (raw, json)
Hash identifier: txfLMpTPc+uIQEIKUjcCpl9b/swX38vFWaP0yOeMLms=
Subject key identifier: F2:3F:2B:28:95:D1:8F:75:A2:85:59:3B:6A:83:DD:63:DE:7F:20:F1
Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
Certificate issuer: /CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Certificate serial: 019747799D5348D8E3254C75F862D91E71F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 23:00:41 +0000
Manifest this update: Fri 06 Jun 2025 23:00:41 +0000
Manifest next update: Sat 07 Jun 2025 23:00:41 +0000
Files and hashes: 1: f1wBKCsXK0uC2nsel0GIe5b0KZk.roa (hash: G9RLd4HtWguPLDAL1JjtSWQmaqJ7AZGAeDkABfQH220=)
2: wT40HB4U01p0ls54KOMFX4Y5Nc8.crl (hash: xvxUe2JQ5wrwXBSVrX29mkWz6dFpOJuQNuSwjh9cw5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:9d:53:48:d8:e3:25:4c:75:f8:62:d9:1e:71:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf
Validity
Not Before: Jun 6 23:00:41 2025 GMT
Not After : Jun 7 23:00:41 2025 GMT
Subject: CN=f23f2b2895d18f75a285593b6a83dd63de7f20f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:4d:b7:1d:55:5f:2c:aa:27:77:e0:f8:c7:
f3:db:37:f5:16:c3:91:7f:eb:eb:0c:cf:76:b2:ae:
f1:f7:1b:06:da:cc:5e:44:06:e6:01:bf:bf:30:cf:
19:c1:af:d4:71:ac:da:00:48:ee:1a:e6:df:b9:a4:
74:8f:d4:23:60:46:7e:25:e1:45:59:0f:19:19:e1:
ee:c4:09:42:a6:a7:b6:58:0e:18:23:c0:a8:79:52:
ad:1c:71:ff:bd:45:68:3b:c0:e7:08:68:49:df:1a:
e6:80:0a:b4:08:ed:fc:88:5a:fe:e6:3f:a9:7b:61:
d3:44:6a:ff:8a:5b:30:bd:5b:45:25:c8:da:b0:89:
a3:b8:5d:18:7d:d0:c1:4b:69:08:fb:5f:00:e8:f3:
83:1b:e4:b9:92:13:20:a8:c4:ba:4b:49:b7:66:76:
9c:e3:db:17:21:cf:72:67:e6:3e:86:5b:47:d4:dd:
4a:10:dc:06:3e:71:57:7f:f6:11:7a:55:20:76:73:
15:b2:7f:0d:a3:48:ba:32:0f:83:76:d4:4a:c2:c9:
16:1b:4d:26:41:a2:23:58:13:0b:f2:32:91:e8:e3:
df:67:73:45:4b:1d:34:51:c1:ab:9e:c6:1d:b0:1f:
3c:1c:21:43:70:ad:d7:4e:8b:d0:f9:bd:af:73:9d:
6c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:2B:28:95:D1:8F:75:A2:85:59:3B:6A:83:DD:63:DE:7F:20:F1
X509v3 Authority Key Identifier:
keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:26:1c:b8:95:7b:1d:43:57:ae:aa:25:0f:f9:80:55:00:17:
ac:36:f4:b9:43:c3:9f:81:6e:f5:c8:12:54:d3:43:3c:55:3f:
89:94:b5:80:2f:5f:ae:0c:d3:36:48:78:ef:0f:5d:1f:27:0e:
22:6b:76:96:21:38:7d:3b:15:25:d2:0f:c9:83:37:de:bb:81:
24:6c:90:6b:1a:e5:73:92:af:83:be:08:09:18:ac:67:bc:85:
c4:c6:c8:ac:70:04:39:31:ee:0b:18:6c:f0:3d:37:b9:c6:f3:
af:e2:9e:21:f7:4d:e4:74:62:58:3d:55:b3:5f:6f:d1:ae:23:
74:bb:d3:cd:4f:9c:5f:53:e8:b3:ba:d0:ba:59:ef:95:da:7a:
86:52:66:0a:b9:ed:e0:e3:23:c8:45:7c:6c:56:7f:4b:25:90:
2f:ac:84:89:56:89:9e:24:c7:3f:e4:72:80:33:72:38:9a:df:
5a:c1:35:9f:72:74:8b:74:12:a3:e5:7a:8f:81:2d:fe:8b:8f:
d5:b8:02:86:40:57:5a:d9:e0:9f:14:ae:e2:70:8c:59:35:1a:
d7:a4:79:a8:07:e9:11:72:d5:9c:cd:a0:b3:08:c6:5e:fe:ae:
81:e6:5a:94:8a:a4:74:e2:08:7f:93:cf:51:da:91:32:d1:63:
1c:04:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:24 2025 by rpki-client