Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
File: wXO75fcjeEWsqNMmO41R7zePwSA.mft (raw, json)
Hash identifier: AfPWWWzNaeE9MQuzoTJKunUeboAvaIkoE3iJVLxhk54=
Subject key identifier: 95:77:2B:7E:1A:80:0A:9C:46:CD:AC:D6:30:CC:29:1C:96:D3:F6:64
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 0197488CD08712308D7F6606A582DFB31335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
Manifest number: 026F
Signing time: Sat 07 Jun 2025 04:01:17 +0000
Manifest this update: Sat 07 Jun 2025 04:01:17 +0000
Manifest next update: Sun 08 Jun 2025 04:01:17 +0000
Files and hashes: 1: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (hash: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=)
2: wXO75fcjeEWsqNMmO41R7zePwSA.crl (hash: ancaqohjjzkp8bdngIJZMXVJWL2+lqnLSGmlBqL5tq0=)
3: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (hash: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:d0:87:12:30:8d:7f:66:06:a5:82:df:b3:13:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Jun 7 04:01:17 2025 GMT
Not After : Jun 8 04:01:17 2025 GMT
Subject: CN=95772b7e1a800a9c46cdacd630cc291c96d3f664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:14:1d:31:2f:5a:fc:32:ff:79:82:3e:08:
7f:7a:3b:2e:70:58:dc:43:34:30:39:a4:28:13:0f:
5b:81:c2:ae:da:f2:71:17:ed:cc:5d:01:87:b2:91:
f1:1a:f2:8d:ca:79:1a:63:81:41:95:62:84:04:40:
9f:99:92:26:9b:2c:b8:70:98:de:cb:15:51:63:37:
91:fd:2b:59:a6:0e:40:d0:84:30:7b:36:b3:70:98:
2c:f3:05:fa:5a:ec:6a:65:3a:01:81:17:6b:c0:f2:
2c:83:05:08:ff:fe:24:82:7c:1a:44:6e:ba:6c:26:
2a:a0:2e:f2:37:ca:b8:19:6f:cb:61:c3:44:a1:13:
d9:c1:69:84:bb:05:d5:1a:3e:79:47:0a:aa:17:e4:
7d:ab:24:0d:b1:86:5d:9c:ee:f9:9b:18:e7:22:b9:
e1:b0:7b:be:bb:2b:9b:ca:19:62:1c:81:fd:d3:b7:
12:8e:ac:93:89:04:97:2a:2c:3b:f8:ed:d8:7e:96:
0f:49:42:2f:8b:fe:bd:a7:93:45:c6:46:54:a9:82:
40:fa:76:01:44:d1:2a:54:a8:ce:a2:d6:cc:e5:ab:
92:eb:a9:8d:00:8d:df:82:eb:d4:44:68:cd:b3:56:
1d:ae:27:b4:cf:09:63:bf:92:25:38:ce:a5:01:72:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:77:2B:7E:1A:80:0A:9C:46:CD:AC:D6:30:CC:29:1C:96:D3:F6:64
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8c:53:42:d5:01:72:8a:ab:3c:ac:e1:0b:15:5c:f1:24:b3:
f6:94:1e:95:c0:b2:ee:e0:a7:3a:27:7f:97:ad:85:0e:11:16:
53:4a:22:28:96:28:7b:f1:85:02:0d:09:ca:5d:41:ad:3f:f8:
c5:24:aa:58:98:7d:62:d1:ba:49:1f:2f:c8:01:13:ee:19:23:
5a:15:2f:ad:40:29:3c:62:70:d9:3a:a1:75:39:70:64:c9:c9:
ce:97:b7:ed:b6:48:1c:41:94:d3:2f:28:1c:ed:1e:d6:dd:5f:
c8:cd:3e:f8:de:40:64:f6:e7:90:34:ba:12:47:f9:14:0a:4e:
d9:5f:5c:a4:bc:08:85:07:8e:de:ab:5f:04:a2:85:05:35:9f:
97:ed:b3:f3:f2:8c:cf:75:82:c0:0f:e9:e4:b6:a9:a9:33:3e:
62:cf:b2:6e:a0:29:76:91:ea:26:98:b9:80:4b:04:e0:64:63:
d0:f2:f4:41:0b:9e:f1:07:fc:e2:7b:3a:65:5c:70:b8:19:5b:
1d:6d:93:73:50:60:c3:4f:aa:97:f3:6a:87:f5:3e:6c:fb:0f:
c0:8a:6b:72:a4:4c:df:ed:5f:38:8d:20:da:21:df:d5:7e:7c:
6f:ee:69:b3:77:1b:ff:8a:e0:5a:44:5b:ce:49:34:6d:b6:ca:
65:f8:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:56:43 2025 by rpki-client