Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
File: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft (raw, json)
Hash identifier: QkzpPVetBj7TtE+ixMYbd1fxZwIEg7+I7XygH7a+aKU=
Subject key identifier: D9:FF:1C:5D:30:33:72:93:87:75:05:D9:45:33:CD:02:06:76:83:7D
Authority key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74
Certificate issuer: /CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
Certificate serial: 019748FA161B0962CFE8C112379DA5E7A226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 06:00:38 +0000
Manifest this update: Sat 07 Jun 2025 06:00:38 +0000
Manifest next update: Sun 08 Jun 2025 06:00:38 +0000
Files and hashes: 1: KkzZdtSbSgev6F4EciFP374t71M.roa (hash: RKNA7btFBFTKM+7ILEeu2plNQgmHlkDMuCESaQkp038=)
2: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl (hash: Ce7q9HgxhWzT0dvo/efl0weD+JeM+LVA1FaFzFOKNsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:16:1b:09:62:cf:e8:c1:12:37:9d:a5:e7:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
Validity
Not Before: Jun 7 06:00:38 2025 GMT
Not After : Jun 8 06:00:38 2025 GMT
Subject: CN=d9ff1c5d30337293877505d94533cd020676837d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:71:6e:05:d5:e0:56:9e:21:9a:d3:c1:97:
fd:40:ff:9c:90:73:b1:d2:70:9e:1d:35:75:b2:ca:
4e:30:ad:8d:9b:6d:85:5b:45:a1:d3:c8:53:18:96:
dc:30:6a:90:33:fc:6a:56:02:30:ca:9f:b2:2f:aa:
15:fa:9a:da:ab:b5:d7:3e:08:a0:00:bb:be:51:39:
ee:cb:25:03:8d:48:b2:23:1a:8e:d2:26:46:49:c8:
ff:c3:9d:ad:1e:f9:0d:8b:e2:5f:95:28:b8:e1:b9:
90:97:41:da:ab:bc:f3:3b:fe:34:74:76:14:d7:da:
64:b9:d8:b8:df:b2:f5:0e:61:ff:07:a6:a6:80:dc:
3e:e6:8f:f5:14:d1:8e:98:01:80:d4:df:01:2b:10:
72:47:dc:7a:4f:05:b1:e7:01:a4:df:7d:87:9a:1c:
ff:c3:69:a1:c0:3d:23:a3:c8:cb:11:69:d7:63:fd:
1d:bb:8c:5c:13:ca:17:ac:91:ff:4c:4c:50:a8:51:
31:65:d2:4d:67:95:ad:ec:67:a9:35:c6:25:81:31:
5c:49:be:0b:8b:14:bb:e4:4d:d4:a1:c0:ba:8c:2f:
46:cf:f3:26:93:4d:39:f0:38:2e:12:13:12:a4:35:
fb:59:29:02:d5:bd:90:f0:74:e2:31:fc:8c:5b:91:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:1C:5D:30:33:72:93:87:75:05:D9:45:33:CD:02:06:76:83:7D
X509v3 Authority Key Identifier:
keyid:5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b2:bc:5b:48:3b:b3:29:e9:4e:65:90:0a:ea:87:ec:a5:f2:
db:b8:5d:b3:3c:9c:92:4b:d7:f1:38:f5:41:94:24:1a:1a:a5:
27:ca:2b:11:38:46:e5:bb:e4:11:a0:26:b6:15:06:9b:16:90:
6d:16:03:56:c0:4f:f9:41:69:3b:49:65:9e:39:84:29:45:27:
07:cd:30:f1:f7:a7:41:da:b3:14:74:ea:ba:7c:2c:47:3b:e4:
b9:d6:7f:18:84:74:af:e0:0d:fe:cb:6e:45:e8:4a:ef:78:38:
1a:6a:50:0f:e7:56:79:15:be:2e:2b:87:f7:53:d2:b1:a0:bd:
f1:81:85:04:9d:e0:ba:34:19:e4:5d:a3:c9:2e:c0:56:ad:2c:
8c:f8:f1:dd:71:03:61:40:8c:86:da:60:4b:ef:d6:03:99:15:
7a:f0:a5:bd:79:b6:6a:a9:5e:09:5c:fa:ee:88:e6:a1:4b:e1:
a5:05:57:45:d4:6e:eb:cb:1d:ca:67:d5:d3:75:3f:ce:f5:0c:
a9:e7:03:5c:36:16:b7:c1:50:94:f0:6c:c7:59:f1:86:55:0e:
54:29:b4:00:03:51:1e:20:01:17:22:39:7b:a8:a1:27:2e:c5:
63:9c:3a:74:ff:d4:f8:d8:2c:10:10:a6:6f:04:c9:2c:11:af:
f0:d9:32:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:08:00 2025 by rpki-client