Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File: WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier: cxADHECsEo/FfMcmSucFZosJojo9r3gje73pQPRRnec=
Subject key identifier: 83:5F:35:61:C2:8C:90:2E:57:B4:6D:F2:51:65:8D:2C:AA:C8:DE:34
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer: /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial: 01974AE8C80D55430ABF670137810039F578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number: B8
Signing time: Sat 07 Jun 2025 15:00:58 +0000
Manifest this update: Sat 07 Jun 2025 15:00:58 +0000
Manifest next update: Sun 08 Jun 2025 15:00:58 +0000
Files and hashes: 1: TgNurcV4axU3uqSkw39wE7TkQvk.roa (hash: B80X6acZEx7hnHCt/dDJOZhPF/97mIDxIpJ3EyHK/4c=)
2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: 6S+a/Q1sB4kP2PF7IMzLbFUTxk12EqK1kI55s1GelZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:c8:0d:55:43:0a:bf:67:01:37:81:00:39:f5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
Validity
Not Before: Jun 7 15:00:58 2025 GMT
Not After : Jun 8 15:00:58 2025 GMT
Subject: CN=835f3561c28c902e57b46df251658d2caac8de34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:7d:64:39:d2:8f:0d:33:4c:17:5f:60:e1:
a0:9a:3f:1e:83:74:73:14:73:7a:e4:1c:4d:3d:db:
aa:cd:a1:ff:db:1e:01:f3:d8:16:5a:06:91:d6:7f:
a0:3f:32:1f:9a:a8:3b:be:d8:ee:12:44:e0:e8:24:
45:15:2e:36:01:5f:39:04:43:26:de:c5:9f:52:5e:
49:0c:a3:7a:93:b5:e6:6f:07:f9:45:27:74:29:d0:
50:33:14:ec:75:b6:b3:8b:51:95:ce:23:12:03:d4:
92:e6:52:94:74:d7:83:7f:39:1e:96:72:0b:78:1a:
46:55:5a:06:61:d9:d0:ca:2a:49:cd:38:1a:7c:89:
0b:f0:08:32:d9:1e:45:05:6a:d3:9a:53:8b:da:b5:
69:d5:c9:dc:a5:05:f4:f6:f2:eb:03:d8:f3:cc:c5:
f1:64:9e:7a:91:99:dd:33:8a:41:57:bc:76:1e:e6:
c9:5d:7b:7f:3f:ba:70:f9:a8:d0:f1:66:1d:e1:e1:
60:9d:2f:2d:dc:80:e4:0f:7f:43:53:22:16:64:0c:
41:e6:0e:81:e5:98:c7:0c:7f:9e:7a:86:6a:88:87:
4d:f1:fb:2b:e6:07:92:9a:77:22:8d:8b:7b:7e:7c:
e8:83:11:99:e0:60:1b:0a:c1:c0:14:82:91:8b:00:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5F:35:61:C2:8C:90:2E:57:B4:6D:F2:51:65:8D:2C:AA:C8:DE:34
X509v3 Authority Key Identifier:
keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a3:40:10:c0:e1:97:ed:78:2d:ac:33:33:fd:fa:ef:85:5a:
18:64:f1:33:66:a0:17:f3:60:51:49:78:ab:72:39:6a:38:7b:
0e:7e:4e:ad:3b:98:08:60:75:b3:36:51:78:8d:da:59:8b:86:
99:f2:4f:b8:d5:d6:22:b6:cc:2c:60:be:30:98:64:72:bb:12:
9f:2c:2b:ea:b4:69:4c:40:22:89:15:4b:c8:51:81:47:7e:9d:
4c:5f:8f:00:a4:61:87:63:3f:89:b8:65:0b:8e:88:5b:d9:e1:
4b:17:e4:ec:43:64:35:c1:31:93:c4:58:ee:f6:99:8a:14:8d:
25:a3:c2:6f:c9:ae:6c:ee:28:71:b5:8e:1e:4d:6c:16:99:52:
fe:a1:b1:ee:6a:79:eb:2e:d5:e0:92:b0:09:fc:26:91:82:4b:
a7:d1:cf:03:e3:ca:6a:99:b0:81:d9:aa:f5:0b:89:22:92:a7:
1c:42:23:08:ca:5e:3b:8e:54:37:b2:73:4c:7c:6c:d5:b8:cb:
9a:d0:b6:90:fa:eb:9e:75:5f:12:cc:18:df:4a:9b:5f:0f:38:
00:ff:67:df:38:19:8e:f0:9d:51:74:82:20:a6:34:ed:b7:68:
f4:2b:65:6f:13:6d:c1:28:af:da:a9:e2:80:72:dd:95:d9:f5:
f7:0c:6b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:16 2025 by rpki-client