Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json)
Hash identifier: hzhaMd3SZYjoL79fiO2bptHH2W+9oPCIkoZJs9O0QYQ=
Subject key identifier: 50:AB:0C:CC:47:59:28:AC:B5:3C:70:D5:10:68:EE:C3:83:99:99:E0
Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Certificate serial: 019747E720F169D0BDD6FC4B4CFE9F36ABE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
Manifest number: 1595
Signing time: Sat 07 Jun 2025 01:00:18 +0000
Manifest this update: Sat 07 Jun 2025 01:00:18 +0000
Manifest next update: Sun 08 Jun 2025 01:00:18 +0000
Files and hashes: 1: HARnUvjlt2Ihiye5L31M1Ihsszo.roa (hash: R6szIcdOkXpk4Tvb4l6mExr2G3bKCj15fJUl212PxlA=)
2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: D//kjFPs0+j9i3f3YDV954OdewZZTOLepiBILAuq9yM=)
3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:20:f1:69:d0:bd:d6:fc:4b:4c:fe:9f:36:ab:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2
Validity
Not Before: Jun 7 01:00:18 2025 GMT
Not After : Jun 8 01:00:18 2025 GMT
Subject: CN=50ab0ccc475928acb53c70d51068eec3839999e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:16:b9:86:8c:cc:56:70:bc:93:8e:55:6d:bb:
f3:d3:b2:16:1e:dc:c1:ad:03:7e:13:6a:46:67:46:
8e:ac:02:88:43:51:88:73:0c:9e:02:cf:3a:23:af:
0c:b8:bc:b6:f4:9d:28:2c:be:3c:35:d9:e1:99:91:
f8:52:4a:9c:70:79:ae:60:71:ba:76:d2:fc:30:ef:
f5:9f:8a:9f:79:9f:e1:8e:ec:e0:79:51:c0:ba:0b:
b0:df:0d:2b:f5:2a:39:24:77:04:30:56:7b:ae:a1:
70:94:4b:28:06:dd:5f:1c:eb:87:c1:38:13:07:b9:
17:43:c5:46:e8:4c:82:4e:25:11:b7:39:ad:73:be:
e2:0f:e1:af:53:29:40:ca:bb:6b:b7:3f:4a:58:22:
10:dc:15:ff:bf:56:cd:a6:be:9b:93:c3:b1:7e:0b:
5b:df:9f:d4:7f:ed:99:93:d6:30:67:e4:de:5d:f0:
36:1d:d5:32:b2:e8:02:a3:e2:db:d9:17:9c:91:98:
08:e3:cd:59:0b:b8:23:6b:7a:db:61:0e:5e:de:d0:
aa:35:ca:c0:18:00:18:0c:3a:25:56:80:51:e7:05:
bb:84:a4:d6:46:1a:91:e9:b1:1a:cf:e1:28:56:ba:
b9:ff:49:1e:4a:26:11:62:3c:e4:9e:11:6a:d5:75:
32:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AB:0C:CC:47:59:28:AC:B5:3C:70:D5:10:68:EE:C3:83:99:99:E0
X509v3 Authority Key Identifier:
keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d4:03:ae:40:f7:77:2e:f2:8e:4b:8e:ba:f4:0f:f1:72:b5:
d9:ec:fe:c8:bb:df:37:87:63:ea:6c:17:06:9d:4f:d3:50:b9:
49:d2:2f:e0:7d:fa:15:44:7b:75:bb:a7:5d:0e:52:cb:a9:3d:
09:f1:7a:3e:3d:07:ad:07:b0:88:82:1f:db:17:fc:1d:36:44:
20:f9:47:ef:f5:37:48:ed:8d:eb:9e:e5:28:52:28:af:97:f6:
a5:83:e7:73:e1:7d:c5:92:73:4e:7c:ea:a3:89:57:1b:1d:cf:
f7:63:38:22:0b:51:b8:4f:ea:63:af:f4:8c:be:bb:27:2a:69:
c7:c6:38:5f:7a:af:3e:4c:e9:27:79:08:b5:16:b1:b4:e2:f5:
7f:27:2e:b6:2f:1d:db:63:0c:6e:4a:cf:c3:9e:6f:4c:83:57:
1a:66:06:80:c9:66:47:f0:0a:e3:7b:72:e1:5c:a8:81:67:b6:
04:93:6c:2b:7a:43:a2:34:27:d1:35:49:8d:c5:75:ed:a4:40:
35:6f:a6:d1:60:3d:18:8c:6d:a6:89:a3:01:34:34:cb:6b:b8:
3c:5d:4a:9e:18:0e:d9:5a:29:42:04:22:f1:0d:bd:42:f3:38:
c2:a5:e3:1b:79:f0:b5:e6:76:bf:73:fe:dc:67:62:c8:ba:01:
3a:b4:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:38 2025 by rpki-client