Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier: I71kfS8qRGZjrWggkzvysMxAkCLSauxMtyq5DEnhLfM=
Subject key identifier: 42:C8:7A:9E:44:00:7C:F7:CA:85:FE:5A:21:87:F9:19:75:67:2A:F7
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 01974931055E3E5E0770D5129D30EEE79255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number: 0EB8
Signing time: Sat 07 Jun 2025 07:00:38 +0000
Manifest this update: Sat 07 Jun 2025 07:00:38 +0000
Manifest next update: Sun 08 Jun 2025 07:00:38 +0000
Files and hashes: 1: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=)
2: llJ6liNS1pumqjPV_Jv49wbPcyA.roa (hash: 8yXr4/k0VmsJ3fSG9IZQB1mAPItrWTFszMy9LsJzJdk=)
3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=)
4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: qxRe2v7+TcRbPrB7tEP4YSmFNCzdXBKNwyeSmBvQmZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:05:5e:3e:5e:07:70:d5:12:9d:30:ee:e7:92:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Jun 7 07:00:38 2025 GMT
Not After : Jun 8 07:00:38 2025 GMT
Subject: CN=42c87a9e44007cf7ca85fe5a2187f91975672af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:9d:b1:11:0b:65:90:dd:87:ad:08:da:75:
fe:61:46:57:5a:17:bc:3f:9b:26:62:5c:cf:60:4a:
3c:a5:eb:8b:65:34:44:ba:ae:76:3a:fb:bc:69:a1:
3f:b7:fa:ef:7c:fd:92:c0:aa:e6:43:b3:35:43:84:
00:e3:21:a6:88:2e:07:ef:fd:8d:79:d3:ff:3e:2e:
6a:90:5f:50:32:d1:37:93:8d:10:99:16:1e:da:64:
9b:a9:b7:28:28:c2:31:96:cc:77:d3:ec:a1:08:83:
a5:85:75:25:97:ce:04:f7:c0:7b:18:e7:d2:ce:e3:
c5:3c:b6:a5:40:d4:4a:25:22:98:74:8c:79:e8:2e:
82:86:7c:67:c1:aa:10:18:e8:22:cc:ba:35:0b:61:
19:22:48:b7:5d:db:be:43:70:6e:68:bf:76:04:0b:
38:3d:b2:13:bf:a8:c2:39:05:fb:ee:b9:4a:24:11:
80:38:a4:bd:42:48:21:6a:2f:70:02:8a:59:41:e3:
28:18:95:35:dd:0f:ad:81:b7:5a:45:ad:6c:0b:b9:
c8:cd:5d:c8:00:6b:47:f1:d1:9c:e3:5d:ae:08:40:
b7:3a:99:42:07:ea:57:b5:ad:0e:33:16:a4:d8:0c:
83:04:a2:f8:2a:29:ed:b8:37:e0:77:3f:5f:16:ed:
cb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:7A:9E:44:00:7C:F7:CA:85:FE:5A:21:87:F9:19:75:67:2A:F7
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:83:fc:c2:78:0b:74:0c:bd:89:a6:fb:63:ae:7e:78:6b:07:
f0:cc:2c:17:90:6a:67:fc:51:cc:8f:59:a8:fe:1e:ca:a1:8f:
cf:97:22:10:ef:05:00:76:e3:14:62:9c:c9:63:7f:bb:dd:d4:
ac:83:a0:f8:7c:59:a5:87:f3:e8:34:d5:4c:7e:1b:a4:f5:1d:
05:b8:c7:22:05:99:8f:e7:c2:37:6a:5c:e0:21:23:ce:30:c9:
36:b1:47:b1:c7:1b:fa:ca:70:49:36:50:0e:97:03:e6:cc:1f:
43:d2:e4:fd:a6:c2:8f:09:48:77:95:72:32:da:7e:e7:8a:08:
25:3a:19:db:90:0c:33:e4:c7:99:58:9a:54:b8:3a:80:02:79:
5d:c4:ea:90:e1:d8:4e:11:c4:db:65:26:6f:d6:19:04:d2:49:
05:cd:1f:cb:6c:3b:84:86:ce:b9:24:e6:1b:56:07:36:8e:18:
71:58:73:7e:e9:56:8b:0a:31:38:c6:d9:d8:a3:71:72:b1:d6:
b7:9f:8d:b3:60:9c:a8:82:41:d0:66:bf:c0:ba:4e:b0:49:e2:
10:d7:59:f6:21:83:a9:7b:6d:37:68:7e:65:82:f6:54:7c:dd:
c6:5d:d3:c6:d0:56:2c:1d:3c:0f:b8:c3:c2:68:c1:da:ba:06:
bf:e6:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:13:09 2025 by rpki-client