Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File: wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier: afNws4SBV1LHehLZ4E8ZRscsS+7xSKl1b6OoRqY8yEM=
Subject key identifier: 1D:EA:DF:30:11:A1:75:F0:70:F6:E0:60:19:A8:15:56:57:7D:A3:E4
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer: /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial: 019748FA10467B11887FC45BB4D2BC85E287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number: 060A
Signing time: Sat 07 Jun 2025 06:00:37 +0000
Manifest this update: Sat 07 Jun 2025 06:00:37 +0000
Manifest next update: Sun 08 Jun 2025 06:00:37 +0000
Files and hashes: 1: H8Cq2hKbd_raQeCt0efxgfoaB4I.roa (hash: RUeP+naWIGNfUeaNzoap2yVUas20CdFw2eVfjen4R5E=)
2: XfKLRFVMoC15KLcrzjJhZWM3w8Q.roa (hash: 25hZw2F6xwasOHU65AIF0S+NpXK61ycgU51PVxUloRM=)
3: jWpsvTVNS1Ff638kpa7ScxTuuk4.roa (hash: 63THTjmppr49Yj/Ay+jWsinwc396xB57u7trQc+8Nhg=)
4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: XIk/Iuwaw1FUWhE14zDdDh90b0lkIszxSly3+ygZIik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:10:46:7b:11:88:7f:c4:5b:b4:d2:bc:85:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Validity
Not Before: Jun 7 06:00:37 2025 GMT
Not After : Jun 8 06:00:37 2025 GMT
Subject: CN=1deadf3011a175f070f6e06019a81556577da3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:83:b9:99:fc:82:ec:22:39:d5:8c:46:4d:
75:4c:a7:7a:a7:e2:fa:2b:62:5a:2f:5f:7c:e2:5b:
80:53:69:97:dc:82:3a:8e:cc:b8:da:c2:d4:78:cb:
7d:27:80:9a:c1:c3:38:ca:c1:5d:e4:5e:53:32:4e:
95:89:85:0a:99:cd:65:c1:55:f6:eb:41:f4:a7:16:
ac:0c:3d:7c:98:e8:e3:a7:b2:10:2b:0d:1c:00:52:
fc:15:ad:29:6a:53:d4:65:5a:f5:67:93:e3:eb:df:
7d:df:f3:4d:da:a4:1f:98:dc:b9:f7:27:d9:e8:84:
28:1c:54:28:d3:8b:a7:34:b2:bf:e7:21:77:e5:8f:
c7:5d:87:1c:0e:ab:09:13:33:ff:57:fc:26:2b:48:
67:0a:30:88:00:59:8a:b2:74:8f:a6:71:ab:77:0e:
57:5e:bf:69:c1:75:67:56:02:4d:01:c4:ff:95:f7:
b6:ff:0a:52:f9:c0:52:e7:f0:a1:e6:f0:5a:22:13:
ba:88:7a:01:5c:64:5c:6c:76:b6:cb:58:b8:07:b8:
43:46:7c:b8:09:ff:b3:51:15:d3:f1:76:4a:a3:ca:
31:cd:cf:87:a4:88:d7:55:10:fa:e9:2d:2e:26:7c:
d0:17:64:61:97:09:be:70:ba:d6:11:6c:2a:33:f1:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EA:DF:30:11:A1:75:F0:70:F6:E0:60:19:A8:15:56:57:7D:A3:E4
X509v3 Authority Key Identifier:
keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b9:db:b5:10:58:d4:0d:2b:70:58:26:99:a1:2e:ae:dc:db:
7c:63:c8:e1:02:5d:63:88:bb:24:88:ba:ed:88:62:69:ce:15:
44:26:39:82:e1:df:9b:e7:84:a2:62:97:ea:2e:5f:1c:d8:65:
85:f5:6c:e1:c2:73:6d:e5:21:3d:2a:37:63:56:a9:95:08:a6:
49:fc:48:74:c4:49:85:17:32:61:5d:22:e1:1a:28:5f:04:ff:
d2:10:19:02:e8:8b:06:be:d4:00:e9:8a:de:c0:df:22:2d:0f:
dc:a9:b8:f2:80:85:dd:45:e0:70:e8:4e:6e:e5:fd:26:53:82:
21:84:36:3c:4f:51:d3:60:fb:59:62:a3:b5:4e:02:23:fe:41:
57:c0:31:71:b5:6c:a9:4d:e1:fb:34:59:41:c0:30:10:7f:d5:
0b:b0:11:59:3e:c3:f0:14:43:64:e3:7b:6f:41:81:2a:3a:23:
c7:16:08:28:a3:a7:d5:50:3a:d9:c9:2d:e8:b0:e1:ff:5a:5c:
fd:fb:ee:a0:7f:af:dc:2d:f6:2f:f0:e7:68:ec:5f:f2:26:1c:
bc:f1:a6:99:c5:de:0d:ed:60:87:fe:ef:48:89:ea:9a:6e:72:
ce:69:91:e4:bd:09:d4:0d:01:6d:95:49:c1:27:f6:69:e0:17:
75:03:fa:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+hBGexGIf8RbtNK8heKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2
NGVjMjAwHhcNMjUwNjA3MDYwMDM3WhcNMjUwNjA4MDYwMDM3WjAzMTEwLwYDVQQD
EygxZGVhZGYzMDExYTE3NWYwNzBmNmUwNjAxOWE4MTU1NjU3N2RhM2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6uDuZn8guwiOdWMRk11TKd6p+L6
K2JaL1984luAU2mX3II6jsy42sLUeMt9J4CawcM4ysFd5F5TMk6ViYUKmc1lwVX2
60H0pxasDD18mOjjp7IQKw0cAFL8Fa0palPUZVr1Z5Pj69993/NN2qQfmNy59yfZ
6IQoHFQo04unNLK/5yF35Y/HXYccDqsJEzP/V/wmK0hnCjCIAFmKsnSPpnGrdw5X
Xr9pwXVnVgJNAcT/lfe2/wpS+cBS5/Ch5vBaIhO6iHoBXGRcbHa2y1i4B7hDRny4
Cf+zURXT8XZKo8oxzc+HpIjXVRD66S0uJnzQF2Rhlwm+cLrWEWwqM/F8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3q3zARoXXwcPbgYBmoFVZXfaPkMB8GA1UdIwQY
MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt
ZjJhMmE1ZDUwNDVlLzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl
LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7nbtRBY
1A0rcFgmmaEurtzbfGPI4QJdY4i7JIi67Yhiac4VRCY5guHfm+eEomKX6i5fHNhl
hfVs4cJzbeUhPSo3Y1aplQimSfxIdMRJhRcyYV0i4RooXwT/0hAZAuiLBr7UAOmK
3sDfIi0P3Km48oCF3UXgcOhObuX9JlOCIYQ2PE9R02D7WWKjtU4CI/5BV8AxcbVs
qU3h+zRZQcAwEH/VC7ARWT7D8BRDZON7b0GBKjojxxYIKKOn1VA62ckt6LDh/1pc
/fvuoH+v3C32L/DnaOxf8iYcvPGmmcXeDe1gh/7vSInqmm5yzmmR5L0J1A0BbZVJ
wSf2aeAXdQP6Kg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:23:00 2025 by rpki-client