Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier: QOnkju5RZP2mnodE2lgd8PqkW2havLY0YkMV2hP/mW8=
Subject key identifier: CF:52:73:AA:EB:C7:09:8F:5E:3D:1E:96:41:DF:2F:83:4D:05:43:E0
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial: 01974AB14E78D95AAAF09FD0B5F1BB5A3113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 14:00:23 +0000
Manifest this update: Sat 07 Jun 2025 14:00:23 +0000
Manifest next update: Sun 08 Jun 2025 14:00:23 +0000
Files and hashes: 1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=)
2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: Nd7Tcp0wXleinG7Ag1G4KVRokMwLamWDkKwbUkMDwV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:4e:78:d9:5a:aa:f0:9f:d0:b5:f1:bb:5a:31:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Validity
Not Before: Jun 7 14:00:23 2025 GMT
Not After : Jun 8 14:00:23 2025 GMT
Subject: CN=cf5273aaebc7098f5e3d1e9641df2f834d0543e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:e4:c8:b1:51:c7:5f:47:13:ee:41:86:ab:
b2:c4:04:31:d6:0b:99:74:b0:5f:29:02:f4:b3:2d:
39:0d:c8:73:d1:48:58:33:1b:e8:9b:79:b6:21:b8:
7d:d9:bf:1c:4e:e0:bd:06:ad:b8:ce:14:82:05:f2:
22:21:59:4e:13:0d:e9:1a:69:89:51:d9:d9:70:5e:
d4:6b:81:d9:4c:99:97:62:8a:c2:77:fa:e3:1d:c1:
78:16:83:23:ca:3f:81:45:be:1e:ae:40:2c:1e:a9:
15:02:f1:4d:28:46:f8:4e:42:4e:f8:39:3e:0c:f0:
82:84:3c:6f:e9:a6:4f:c2:a1:e3:69:e5:f2:d8:bf:
b0:1e:0b:d2:31:fe:5d:20:7f:74:e6:76:7a:00:1f:
f3:96:ef:c7:0f:2b:e1:57:67:06:d4:2f:0b:47:80:
7e:0a:b7:0e:7d:91:67:08:4f:c9:68:6d:10:1d:06:
99:05:9b:77:71:9b:db:9b:b6:df:5a:11:cb:79:37:
e1:34:e6:27:74:4f:4c:b2:51:e1:6f:76:85:61:30:
bf:1b:0b:19:fe:b1:a9:0b:e5:8a:2a:7c:68:a2:c2:
74:df:d7:ef:fe:a8:d0:a7:3c:7c:8d:c4:80:93:f9:
c3:13:f9:69:d7:70:dc:c9:87:67:9c:15:f6:b2:07:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:52:73:AA:EB:C7:09:8F:5E:3D:1E:96:41:DF:2F:83:4D:05:43:E0
X509v3 Authority Key Identifier:
keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:4a:c2:20:95:36:a3:42:bc:e2:51:ed:8f:3b:11:b2:af:ab:
87:55:36:c4:57:e2:90:4d:d7:40:7c:de:ba:e8:a8:be:3d:fa:
78:9f:d8:3d:c9:2c:da:09:bc:6f:36:1c:d8:f6:5b:60:8c:23:
2b:0c:59:8d:3a:6c:c5:6a:80:29:a9:08:d8:fb:4c:ec:64:8d:
f8:81:f3:19:99:1b:da:41:78:8e:c3:46:07:95:d1:7f:64:81:
8f:dc:12:b7:38:2d:46:30:db:a5:9a:99:d6:2d:2c:06:00:f8:
2b:c1:06:dc:00:7f:02:89:69:19:5f:17:06:c7:a1:ee:92:0e:
b2:3a:7a:6f:f1:85:db:cb:01:c4:38:e0:7e:0f:6f:97:0a:5e:
ba:43:55:e0:e1:dd:1e:6c:4a:76:72:40:d2:17:4a:08:16:d7:
27:ae:6e:8d:c2:22:eb:0d:34:4a:dd:be:a8:84:d3:9e:c3:3c:
a8:f1:d2:b3:df:58:d0:7b:85:12:0f:34:5e:43:6f:55:3e:76:
cb:da:c0:7b:dc:19:ed:3c:b7:44:5a:c8:c3:bf:f0:52:ad:31:
c2:e9:4f:b2:14:2c:4a:4f:5d:b9:8e:95:8f:37:07:ee:15:32:
dc:40:2a:9f:2f:1f:af:44:f2:93:2f:cb:e9:79:29:72:23:db:
30:6e:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:59:08 2025 by rpki-client