Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: sZaMN0Tcv5yXHBKQYCa4gQQLu3YlQCXvTg9PrMH8nAA=
Subject key identifier: 5D:AC:A0:19:34:4B:37:9A:5F:36:FA:EF:9C:6D:D3:23:37:6D:79:DA
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 01974EC58D19EFCD80BBB3EEA0D5299C69DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0B7F
Signing time: Sun 08 Jun 2025 09:00:58 +0000
Manifest this update: Sun 08 Jun 2025 09:00:58 +0000
Manifest next update: Mon 09 Jun 2025 09:00:58 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: ebkOaSEcclIJ39ky0iOp8ul9ewSMplOrbwhqSY55ARU=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:8d:19:ef:cd:80:bb:b3:ee:a0:d5:29:9c:69:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Jun 8 09:00:58 2025 GMT
Not After : Jun 9 09:00:58 2025 GMT
Subject: CN=5daca019344b379a5f36faef9c6dd323376d79da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:4a:0a:7b:21:98:a8:c8:71:3a:24:51:ce:
5a:4d:9b:4c:bc:c4:1d:c2:bf:81:63:aa:3e:be:3a:
1e:69:a9:de:92:68:a1:a2:4c:95:88:af:04:61:af:
f8:44:2d:f1:4a:1d:51:9c:3b:a6:d3:98:6b:a1:2b:
b1:66:11:a6:b7:84:a1:37:b8:1a:42:d9:96:56:f7:
96:14:69:7c:17:7d:f2:4e:ac:4c:52:e0:a3:dc:34:
ec:b0:22:1c:18:a9:41:87:17:ed:47:4c:5c:c1:b3:
15:ff:62:b3:1a:ed:7b:11:72:f0:3b:29:1a:ad:cc:
99:ba:a5:3d:3e:4b:cb:39:ea:fb:40:03:aa:60:0f:
f5:72:14:c9:91:63:a7:94:74:bb:d8:14:d5:7b:f8:
ee:4e:43:a8:3b:3d:ee:72:a3:ee:6e:e2:3c:5c:cb:
c9:ad:9f:5e:53:b5:56:32:cd:91:9e:01:1f:a5:06:
ef:af:a1:c2:40:cf:2b:69:78:b7:f5:8c:d2:e9:84:
e1:13:89:ed:5f:41:55:a4:65:2f:ca:c3:c8:6f:af:
14:86:27:4a:36:82:c1:47:43:ae:4a:49:17:e0:a6:
72:4b:dc:d9:e0:d4:a1:57:e6:06:78:3d:36:ac:9f:
c5:5b:5b:16:7c:9d:24:78:cd:2a:29:f9:54:04:b2:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AC:A0:19:34:4B:37:9A:5F:36:FA:EF:9C:6D:D3:23:37:6D:79:DA
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2e:8e:c6:e3:74:11:bc:b7:0a:9a:26:36:ad:ef:12:c6:0e:
89:05:45:3a:dc:17:26:12:49:ec:34:83:6d:ae:e7:6b:05:b1:
7a:3b:87:d5:f3:4e:b0:44:3b:ff:3e:f0:21:f1:4f:57:a3:f8:
2a:aa:49:4e:e0:99:c8:60:1d:3f:f2:8f:8f:f7:42:13:99:51:
c0:29:a8:7a:f1:7b:82:7a:6b:e8:5a:ba:bd:ce:f4:6f:76:b5:
97:ee:0a:63:43:fe:73:5f:86:ba:12:94:fe:d7:2c:b6:2e:ac:
5a:3e:5e:36:07:46:12:6e:a0:70:6d:1e:51:39:8e:6a:4c:94:
2c:e7:a7:e5:00:1d:9b:b9:53:e2:67:df:8d:11:2f:5b:5e:cb:
99:6a:90:6c:84:f5:cb:ef:d1:82:ba:7a:8d:38:c0:07:53:18:
4c:f3:67:7d:d6:9b:3d:05:6b:17:65:e3:6c:d4:81:cd:5d:5c:
e4:8e:97:d2:ff:ad:a7:48:80:33:d1:e6:5d:6d:42:85:8c:8f:
3d:7b:63:13:87:ab:96:97:34:90:ce:4d:c0:3f:02:6b:63:3a:
53:f9:dd:c2:6f:15:5e:3d:86:58:58:8d:d0:b7:03:cc:b4:52:
aa:a4:00:3b:cd:4a:6e:74:18:e1:20:5a:28:fd:52:86:23:d9:
59:b8:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:09:55 2025 by rpki-client