Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
File: W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json)
Hash identifier: hVDcMVeU6Ztn0n/YiU1aSkatRJOvC1QR97Z4ILfKKTk=
Subject key identifier: 07:73:0B:FF:71:10:EA:18:B6:AF:98:74:2E:14:FA:AF:B6:EC:D6:97
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Certificate issuer: /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial: 01974E5765DAF023937FD154A882BF38D824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 07:00:39 +0000
Manifest this update: Sun 08 Jun 2025 07:00:39 +0000
Manifest next update: Mon 09 Jun 2025 07:00:39 +0000
Files and hashes: 1: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: BK6n5zQ2IGI0vrn0LHTT5jZ+B/JATz3245+sDiT+Eeo=)
2: gtNjwWIklt9RQOUEEkHBnNPLSqM.roa (hash: vH0Ya4SYvhAbrE7j6LOzzc7/NQSUnPHlrM/bMm0UTx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:65:da:f0:23:93:7f:d1:54:a8:82:bf:38:d8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
Validity
Not Before: Jun 8 07:00:39 2025 GMT
Not After : Jun 9 07:00:39 2025 GMT
Subject: CN=07730bff7110ea18b6af98742e14faafb6ecd697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:85:b5:53:fc:0f:4e:56:bb:78:dd:bc:9b:d2:
af:ae:c5:54:c4:e4:83:2d:41:5c:90:b4:a2:7f:09:
f2:5f:bb:c3:df:6c:89:3d:a3:f4:38:4e:35:67:de:
6b:91:9d:c7:df:92:8b:ad:a1:3e:7e:64:11:48:25:
55:c4:11:a4:8f:06:87:38:e0:8b:ab:32:29:4b:78:
2d:06:e0:9c:d0:c0:6a:25:f7:ce:04:8a:7a:d3:92:
47:11:37:27:9e:ff:c9:e1:a6:bd:30:a4:fa:41:62:
2d:51:4f:d6:e7:35:ce:f8:a8:15:09:2b:cb:8c:ca:
d1:45:84:af:1c:78:cc:ad:1e:c6:3e:67:15:3d:9d:
08:c6:0a:cd:27:21:df:08:b8:da:86:cf:3d:93:b6:
b2:3e:cf:0f:05:69:b9:ea:ad:ab:b7:c8:3b:e6:bb:
58:a1:ca:be:5a:74:ab:a7:82:d5:fc:49:6b:cc:e1:
c4:52:78:16:6f:a3:8b:06:30:a6:e9:15:29:f2:c1:
b0:79:36:8c:26:9e:c0:25:17:84:ae:38:c0:bf:f9:
62:52:62:aa:00:48:bf:88:3b:6b:65:db:55:dc:cc:
88:ba:20:8c:8f:a1:fe:94:6b:2b:98:9d:06:45:92:
75:b3:13:e6:92:98:d0:e5:a0:c2:e3:03:ba:06:46:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:73:0B:FF:71:10:EA:18:B6:AF:98:74:2E:14:FA:AF:B6:EC:D6:97
X509v3 Authority Key Identifier:
keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:c9:c0:5c:03:65:57:3e:c7:1d:f8:76:3d:e7:6a:9d:71:e0:
01:47:d3:92:09:1f:94:bd:b2:f7:3b:5f:17:4d:ad:bd:67:0a:
68:de:a9:5c:78:8f:a8:c7:99:49:fe:84:03:3a:6f:30:c8:1c:
1f:b9:e0:67:ef:ac:09:84:1e:45:5a:10:1e:ab:a6:49:b4:d9:
70:3c:f5:d8:47:8d:86:bd:15:3b:3d:0d:ea:66:d3:aa:84:3f:
e3:81:ed:2d:9a:e5:2f:82:43:48:06:90:a4:0f:b3:7d:c8:79:
ab:10:1a:6f:d9:65:cb:9b:2d:0c:6e:66:4b:25:a1:3a:44:e5:
ed:0b:02:65:f0:d4:70:23:2c:aa:74:34:7e:2f:24:b7:e8:19:
60:fb:fa:be:fe:83:62:bc:31:8f:44:0d:1d:cd:71:ba:3e:e9:
3f:59:97:b2:2f:93:32:c7:5e:3c:ad:7f:6b:a3:49:2f:d0:02:
ad:26:b8:54:60:cd:98:16:ad:26:78:e2:05:bf:3f:f5:cd:ab:
48:b3:ce:9c:60:71:50:60:86:c2:df:71:ee:78:6e:d2:9d:13:
58:c0:55:e5:2a:ca:a7:75:2f:c7:25:62:a7:21:48:ac:0e:7f:
e0:7c:d2:82:07:5d:9c:1d:e1:c3:0d:28:92:6e:ca:99:7b:2f:
2d:c7:63:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:09:01 2025 by rpki-client