Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: fs8eDmHOSPGxcWGlbhm1RB6nf/dLPerNp9Glyorhiug=
Subject key identifier: FD:06:CC:21:C8:1C:F2:A4:F2:AF:59:A2:4F:4E:30:F6:0F:5D:3C:DA
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 019852318BE645025AADD3E81F2615FEF88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 05B4
Signing time: Mon 28 Jul 2025 18:00:35 +0000
Manifest this update: Mon 28 Jul 2025 18:00:35 +0000
Manifest next update: Tue 29 Jul 2025 18:00:35 +0000
Files and hashes: 1: Ye0egtqoH6uMAlA-InFGtPoYhOI.roa (hash: zCIyCUBIV+P7SfqRZSH5RkFwyM3/tcMjHBwHN8QTJs8=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: 2ZGXrtoaSCIrDrvdPFhM0OH17JfPkDtAqJUwiWwbnUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 14:37:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:8b:e6:45:02:5a:ad:d3:e8:1f:26:15:fe:f8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Jul 28 18:00:35 2025 GMT
Not After : Jul 29 18:00:35 2025 GMT
Subject: CN=fd06cc21c81cf2a4f2af59a24f4e30f60f5d3cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:31:62:06:ae:97:b8:3d:2b:d2:da:96:27:
ce:81:ef:85:c7:e0:84:18:8f:bc:98:5e:5c:b9:f3:
f1:86:ab:0c:bc:99:b1:d6:8d:1e:36:b4:a7:11:0c:
fc:5e:30:c7:7b:28:a7:92:d0:1d:02:11:e9:65:3d:
9c:1a:59:cf:65:12:58:16:54:64:05:7b:34:b1:cf:
a2:0c:fe:ff:41:50:f9:92:ea:80:fc:08:8f:d0:a2:
74:54:ab:63:7b:f0:69:96:f0:77:79:dd:ca:9f:6e:
94:df:aa:ba:de:59:31:13:a7:0f:34:e1:cc:54:95:
a9:2b:b4:74:b9:a2:4e:9e:74:28:8d:e1:fe:6a:7c:
f4:73:ed:26:f2:06:91:14:46:a0:51:30:20:94:4c:
10:12:a0:00:d8:ac:ba:43:f2:4c:a3:3e:db:d3:11:
eb:a5:c8:f5:df:7e:f7:73:b4:e8:97:cb:84:cc:ee:
c5:31:e2:7f:b5:6a:a0:c0:da:57:5f:22:71:64:56:
d1:3d:57:aa:5f:1e:b6:90:a9:ae:f3:90:95:da:44:
87:f0:07:b4:56:ed:5f:06:58:21:0e:6a:59:45:42:
ea:bf:75:ce:51:5d:a2:f2:1f:83:e2:ba:4b:cd:b9:
a6:5e:02:0f:81:1e:10:80:93:de:24:c5:39:23:01:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:06:CC:21:C8:1C:F2:A4:F2:AF:59:A2:4F:4E:30:F6:0F:5D:3C:DA
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:1d:e3:62:c3:b2:3b:b2:1c:4c:2c:cb:61:b6:eb:15:db:
b1:85:ae:83:37:62:1f:ee:4b:46:4a:91:e9:34:9f:36:28:d6:
81:d0:10:0b:16:da:d0:fc:72:16:55:fe:28:4a:39:9f:81:86:
8f:13:28:55:6f:17:0c:f2:32:10:db:ef:86:4e:80:24:90:c1:
21:01:33:92:50:4c:62:5f:b0:a3:1a:3a:08:8f:48:67:d2:87:
1a:46:77:a2:14:44:58:6f:aa:1d:b7:3d:9e:50:d3:a5:3a:24:
a8:64:28:aa:78:d6:fd:3d:21:4b:47:13:15:bb:fd:03:56:3f:
74:a6:8b:cc:64:e0:97:ec:75:c3:62:fa:61:cb:63:24:71:90:
9d:98:0b:64:fe:61:ed:4f:c9:b1:37:31:c7:7b:97:3a:ca:d0:
ed:bd:14:a0:76:cc:83:37:f1:63:fc:06:0b:00:2d:08:14:05:
16:59:d0:70:e7:24:bc:45:4d:35:41:0c:4a:c6:fe:71:d7:3b:
8f:38:34:cb:54:f2:b5:8b:0a:82:48:5b:8f:c8:ee:1d:0f:5d:
43:21:37:93:98:de:f1:e4:ec:da:0b:e2:44:1a:73:9f:72:89:
df:67:43:75:db:19:03:46:89:c5:64:e1:2c:70:6b:f9:51:79:
ea:45:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 22:23:24 2025 by rpki-client