Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: y1w2U6a5eiEZo0Z15f+08lOxKxXsa8JvDC+guqeV1+c=
Subject key identifier: A4:1A:6D:ED:8F:A1:4A:FD:F4:B9:87:92:87:AB:E2:A6:0C:C1:44:94
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 0198590F9BDEEA2B37F053DB2B5CEC48782A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 1423
Signing time: Wed 30 Jul 2025 02:00:51 +0000
Manifest this update: Wed 30 Jul 2025 02:00:51 +0000
Manifest next update: Thu 31 Jul 2025 02:00:51 +0000
Files and hashes: 1: 1FW1XbyYUs66xbKImXHkiZU-xAA.roa (hash: DA26l55wpmFxpEPwr1TEVKDAhIdZwBFIGz/j/ljF/kM=)
2: rQGBYURhHxIS2gUjxgxhWlf8G-M.roa (hash: d90EC3mny7b2jkfAqHp6/1/Pw4XbnGm5shftI7zAdH4=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: 35a5m3UTlBG9dsPQ2jcW7UbF/lB2chx6jLkRcIpRt18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:0f:9b:de:ea:2b:37:f0:53:db:2b:5c:ec:48:78:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Jul 30 02:00:51 2025 GMT
Not After : Jul 31 02:00:51 2025 GMT
Subject: CN=a41a6ded8fa14afdf4b9879287abe2a60cc14494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:b7:0b:a1:2c:5f:62:a5:35:2e:96:6d:6c:
69:ae:f5:b1:9e:3d:15:8e:99:b1:f7:f0:ec:58:d4:
35:30:26:82:f4:bf:8e:a9:e3:d8:39:d4:5a:cf:09:
29:a5:09:0a:15:4a:6d:a9:ad:1a:8a:2e:39:9e:26:
c7:b3:1f:3b:a6:4f:0b:d4:26:33:40:dd:42:79:e6:
d9:eb:2a:c0:f2:1e:9b:b7:b2:c1:df:67:ad:72:a0:
55:02:25:a1:bc:40:5e:8c:79:b1:de:b6:ea:25:35:
3e:a7:19:c9:8b:22:2b:5a:a6:61:97:f0:9f:39:75:
87:75:fd:c6:41:b8:23:1c:73:a4:e0:2f:33:5b:f1:
17:93:06:16:42:53:58:2a:db:23:4e:b6:56:47:8d:
a2:31:c5:5e:57:13:d3:c0:54:4a:28:2f:1c:8f:9f:
c3:6c:c4:fa:0d:2a:13:ff:81:49:d2:a2:0f:4e:b9:
78:c2:99:cc:80:18:4f:72:59:44:83:6b:23:2f:2f:
2d:26:98:2d:5c:73:64:df:91:f2:26:53:87:5c:da:
bf:8b:f0:e2:9d:af:61:e2:f1:3e:cd:d9:4b:11:c1:
a5:29:b4:7e:b0:9e:a6:c2:46:73:1d:d8:77:da:ed:
43:e5:d1:4f:b8:47:b3:66:28:3d:1c:72:d1:da:b9:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1A:6D:ED:8F:A1:4A:FD:F4:B9:87:92:87:AB:E2:A6:0C:C1:44:94
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:79:1c:d0:8d:5a:7c:7e:e3:d2:7d:7d:c2:08:fa:12:ac:aa:
11:3e:be:48:54:86:ac:03:2f:b7:f8:33:ea:cf:29:90:62:c5:
fd:47:83:26:b2:8b:c4:62:5f:7f:39:eb:d2:bc:d2:93:f8:9a:
26:88:11:f9:5b:99:90:f4:36:a7:bd:a4:1a:d5:e6:79:df:33:
78:5f:67:b7:1b:7f:04:52:34:28:50:64:3d:bd:85:f2:6d:d8:
1f:2b:13:46:3c:1b:6a:ef:0f:36:a2:8e:88:63:7a:ac:4e:fb:
54:f2:67:d7:00:c4:1f:d4:53:4a:8e:7c:1e:3c:15:7e:1e:06:
d7:66:23:3f:c6:8a:d3:e8:7b:0e:99:8d:20:ec:04:41:16:54:
d6:d8:4f:1c:01:e7:d5:25:64:73:cb:b9:63:37:90:3e:83:3c:
a0:2e:b6:2e:5b:40:0d:ca:ef:b6:2a:49:9a:cd:63:59:52:b1:
c9:ad:40:46:b4:5f:b0:4f:b0:a3:09:56:1b:e6:8e:c4:31:c3:
e7:77:ce:12:10:8f:e3:30:8e:0c:09:b0:e8:ee:70:e0:2e:b5:
64:94:37:8f:41:03:a1:14:2d:d7:d4:1c:4a:e3:98:09:b2:1a:
35:2a:75:2e:e1:db:f6:47:13:7e:6f:b6:70:67:ec:11:ae:19:
10:99:74:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:43:51 2025 by rpki-client