Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: gmVS6n5IKqClCV7jWcMVnfDsd21OX1CTyfNGDMvwzUw=
Subject key identifier: DC:E6:51:DD:CD:46:99:E8:35:06:A4:D6:0E:1D:79:7B:B2:FF:AA:60
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 019750EACEDD07D4BDFCC1403164BD9C7714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 10C5
Signing time: Sun 08 Jun 2025 19:00:54 +0000
Manifest this update: Sun 08 Jun 2025 19:00:54 +0000
Manifest next update: Mon 09 Jun 2025 19:00:54 +0000
Files and hashes: 1: NvAPv-l4cBrLTji2iXv6GfI0gZg.roa (hash: BBOKh5jKHRu7y0Xpwzm9dX9BwYJwDLK16Nc2ib6JODU=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: 5oOPS37JH1X99PVuBaVRI153wLZvti7I5GajOiamFww=)
3: aKrvV8xBl8sCHisqRYKu_FgNh7A.roa (hash: VWMQXxpmmku9lvmyl+DypVcQSIrG+GnuaLnSwfYRfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:ce:dd:07:d4:bd:fc:c1:40:31:64:bd:9c:77:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Jun 8 19:00:54 2025 GMT
Not After : Jun 9 19:00:54 2025 GMT
Subject: CN=dce651ddcd4699e83506a4d60e1d797bb2ffaa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3e:1f:78:6d:63:cb:62:46:d5:08:87:36:7e:
26:d6:47:07:0c:d6:4a:ae:d1:ab:2f:e1:03:24:e9:
5c:46:a7:2b:75:49:e3:3e:17:8e:c7:ec:29:db:bd:
6d:0d:fb:85:77:d4:67:25:27:01:77:85:77:64:97:
06:76:9b:f0:fc:11:f2:39:af:68:5d:af:7e:a1:51:
07:c8:91:a8:ff:f4:d0:b7:a2:8a:b7:fd:07:b5:62:
49:52:28:fc:4d:58:94:20:a0:ae:6c:48:eb:db:d1:
cd:83:c6:2f:99:30:57:48:aa:fa:76:26:55:11:ed:
61:49:d5:9d:4f:a9:a3:67:26:9c:92:da:a2:ee:8d:
60:9a:80:bb:43:d6:df:71:cb:6a:cf:c3:b3:64:a4:
d7:12:d5:f4:ee:c9:33:4e:ad:97:49:c3:07:fe:dc:
49:39:75:95:01:13:2a:2d:3b:58:6e:6d:d7:5e:45:
bc:dd:50:c3:e7:b6:e2:d1:8c:0f:d4:19:4e:9a:ae:
82:ad:95:82:96:f4:cf:b9:09:22:c8:62:f4:1d:27:
71:44:5b:41:a8:21:2a:52:2b:0e:5a:de:64:c1:7c:
ce:d3:7f:bd:1e:7d:57:6e:ea:ed:db:50:0c:13:e3:
6f:bc:db:fc:4b:df:11:7e:81:de:1b:d5:39:0d:a5:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E6:51:DD:CD:46:99:E8:35:06:A4:D6:0E:1D:79:7B:B2:FF:AA:60
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f6:e8:ca:2e:9f:6e:ed:f4:2f:78:e3:c0:66:5f:1a:3d:f6:
76:06:b2:11:6f:7f:59:07:da:99:1d:bb:27:da:23:a6:33:24:
91:2b:43:9b:a6:7c:15:1d:a8:ad:da:c7:c2:9b:cf:0e:b0:e8:
88:31:38:7f:f0:a7:93:7a:22:4e:ab:d3:02:6f:0a:8d:57:57:
64:cc:4a:3d:13:c0:d9:0e:fe:ae:77:0e:22:c9:55:44:cc:d0:
f7:9f:64:13:84:af:6e:31:76:95:f8:72:bc:4e:43:d7:12:49:
77:6f:2b:4a:1c:40:b5:1f:08:f7:62:db:80:3f:5f:27:7c:18:
54:39:47:b3:f8:63:b1:f2:42:00:5a:6c:b2:1d:8f:b6:72:1a:
8b:d0:60:87:5b:80:e7:c8:18:b5:94:9a:76:e6:e7:98:59:01:
70:0a:48:c8:6e:15:96:cf:e2:a1:0f:21:89:9c:25:66:a6:ca:
63:4f:be:54:5f:df:9e:b9:ae:88:42:39:17:27:9e:03:95:89:
59:10:82:02:4e:97:18:11:d8:5d:58:56:a8:da:b3:f4:3d:7c:
3c:15:95:c8:dd:ad:0d:5e:62:2a:a8:67:f7:5b:7c:06:48:7d:
5e:f5:81:7d:fe:cf:60:7f:88:97:5c:ea:2b:53:36:2b:94:39:
34:5f:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:14:38 2025 by rpki-client