Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File: Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier: a18bELyg6wS4HHw6FZFN5Q65sryA075Gri4Il+2qIpM=
Subject key identifier: 34:C8:C3:60:BD:E5:A8:04:23:36:52:AD:D4:CD:DC:F7:72:D6:0A:35
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer: /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial: 019752A208B94006E1DDE75777BA8412A123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number: 09C2
Signing time: Mon 09 Jun 2025 03:00:40 +0000
Manifest this update: Mon 09 Jun 2025 03:00:40 +0000
Manifest next update: Tue 10 Jun 2025 03:00:40 +0000
Files and hashes: 1: QnsXwvgDL1vpnE_nHW7cZ8l-yys.roa (hash: VNqFUdRBsRfrCU4DQ7mXN2LJBOfMOJgZg+HVbNE534A=)
2: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: Gc2AUYy22995pIir52Olbqgy56TUjPHzqNzESDU6NBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:08:b9:40:06:e1:dd:e7:57:77:ba:84:12:a1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Validity
Not Before: Jun 9 03:00:40 2025 GMT
Not After : Jun 10 03:00:40 2025 GMT
Subject: CN=34c8c360bde5a804233652add4cddcf772d60a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:0c:fd:a6:03:b0:91:c1:87:5e:35:36:8d:
46:47:54:07:d9:4d:f0:24:ff:06:67:e9:7b:5b:ce:
69:8b:ac:95:2a:1f:f5:13:9b:e7:06:26:04:9f:38:
85:39:7b:c1:fb:54:7b:46:ba:fe:9f:5a:65:3a:ef:
89:78:cb:81:53:bb:e9:90:cd:b9:89:20:d6:d2:d9:
58:71:cd:ed:45:66:98:90:75:31:33:8d:e4:bf:40:
94:88:38:fc:ab:88:28:eb:63:ac:60:46:48:f6:f6:
eb:43:d4:2d:67:36:bb:22:29:16:0f:59:b3:46:c8:
13:e8:0e:9b:8f:6a:d0:f8:c0:11:cd:f6:db:af:3e:
d4:e8:d5:ed:4c:dc:0f:b9:68:4f:41:c2:08:8c:e5:
0e:dc:80:e0:b9:46:19:75:15:6d:0d:e7:60:65:f2:
1a:82:d4:cf:53:80:6e:38:71:db:c1:49:94:35:c5:
66:78:ff:29:32:28:c0:56:20:27:7c:8c:9f:63:68:
a3:3c:5a:ff:f5:02:c7:be:5f:9e:ea:35:6e:0b:35:
e3:8b:d8:4f:50:f3:32:d5:f2:c5:b7:be:47:30:66:
0b:da:c4:d8:ee:33:d3:9d:77:39:52:74:ad:b6:bb:
63:7b:0c:6a:61:fc:49:fd:5c:dd:10:db:70:2b:db:
91:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C8:C3:60:BD:E5:A8:04:23:36:52:AD:D4:CD:DC:F7:72:D6:0A:35
X509v3 Authority Key Identifier:
keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e4:5b:ed:13:11:ec:34:e0:2e:99:1e:f5:d8:fc:cf:05:8b:
b2:8e:83:cb:d9:73:27:45:cb:7d:32:e7:30:4d:58:0e:0f:1c:
0e:c0:85:a9:be:ad:6c:ca:b4:d0:0c:89:67:e8:f2:13:f0:f5:
e2:57:e1:3d:f9:45:b0:fd:69:05:92:b0:a0:48:f0:e6:74:fe:
fc:c0:33:d7:13:37:4b:78:6e:0d:61:83:81:81:0f:ab:e6:ec:
f4:fa:a9:3b:ec:8d:0c:db:8e:d3:ed:b1:08:50:52:e9:82:44:
36:55:f8:65:aa:50:90:78:fb:ed:17:b3:94:b0:a1:95:38:19:
eb:53:da:da:a8:40:39:78:a2:31:73:ae:44:e6:e2:60:28:4c:
55:0e:b9:f1:7a:91:62:07:85:13:b6:58:c2:81:fb:dd:94:5e:
af:96:01:fe:a8:79:86:e7:99:13:97:5d:82:91:d2:f0:bb:9f:
cf:11:96:57:58:f8:11:78:5d:a6:e2:4f:59:64:93:d3:68:df:
00:9c:7f:40:d0:dd:bf:d8:0f:c0:06:fe:4d:35:96:04:df:90:
4f:1d:d1:90:50:55:2e:65:23:9e:dd:ac:f8:9b:53:81:7d:53:
3f:2b:82:63:bf:04:5e:24:32:05:ca:70:5e:58:7f:06:94:9b:
b0:e8:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:22:44 2025 by rpki-client