Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: 3lOr5P6SLe0ojzBHT46E0GxbgUdivlb3wDNitxGsHeM=
Subject key identifier: A3:C7:3B:1D:C4:82:A5:38:E3:3A:1A:68:65:74:06:DA:60:6D:90:63
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 019748C33E67E6885D259E90078383CCEC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0B80
Signing time: Sat 07 Jun 2025 05:00:44 +0000
Manifest this update: Sat 07 Jun 2025 05:00:44 +0000
Manifest next update: Sun 08 Jun 2025 05:00:44 +0000
Files and hashes: 1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=)
2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: DsLlnWs/e0qt1QfKm++/5Ou2pkfxLpHf2631D62iWFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:3e:67:e6:88:5d:25:9e:90:07:83:83:cc:ec:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Jun 7 05:00:44 2025 GMT
Not After : Jun 8 05:00:44 2025 GMT
Subject: CN=a3c73b1dc482a538e33a1a68657406da606d9063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:55:97:e2:d8:33:13:50:8c:f1:ef:57:eb:
79:34:d8:e0:df:09:e1:91:22:15:a7:a1:0f:f0:25:
1b:0f:9d:8c:46:c0:91:24:7b:c5:93:99:15:bf:7a:
8e:02:b9:8d:17:bd:57:b5:c6:0b:b6:34:e5:bd:7f:
c6:9e:2d:c7:de:8f:19:da:8a:af:dd:25:97:1a:94:
e0:da:f0:80:28:b2:31:12:73:88:ed:13:1b:fd:01:
8a:91:7a:3a:b3:6d:3f:cd:29:ac:23:fb:dc:02:3c:
05:33:eb:2a:6f:3b:e1:0d:df:ff:ab:51:f5:51:d2:
f5:35:ba:5b:73:f6:0f:c3:d5:14:d9:d8:8a:b1:2a:
c0:8f:2d:48:dc:c7:75:3b:3c:e7:61:1f:54:7b:59:
e3:2a:8f:65:d4:f5:c2:1a:f7:1c:c9:f6:82:15:8f:
a8:db:75:80:77:fe:ba:84:9c:54:d0:a0:ee:6a:67:
fb:cb:af:b0:bb:f6:7e:f8:06:29:75:b7:bb:8c:e6:
66:86:58:4f:ca:ef:77:83:be:00:f5:b4:25:14:09:
38:d5:c6:5c:ca:b5:0e:d3:fb:6d:ec:e5:3d:89:53:
94:56:64:82:63:68:29:0c:66:81:df:b7:fc:b1:f6:
a6:a1:c9:2d:7e:c9:48:9a:a9:fc:12:3d:87:53:71:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:3B:1D:C4:82:A5:38:E3:3A:1A:68:65:74:06:DA:60:6D:90:63
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ee:95:f3:84:9e:22:d7:01:44:38:a6:b4:3e:f7:67:b1:02:
0e:1d:90:ad:e1:58:fc:ac:2b:c3:f7:fe:1b:8d:78:85:49:bb:
bc:a8:88:44:8c:4e:c9:55:4b:0f:f3:40:16:fc:48:13:53:7f:
97:cf:d3:16:22:c3:3b:43:ff:78:1d:1b:6c:87:49:a7:ea:94:
29:57:cf:85:7f:20:75:72:23:0f:80:29:b1:0b:e2:c7:68:3e:
04:29:41:e9:59:b5:db:a5:f0:84:81:ba:a6:a3:3f:a1:b5:81:
aa:59:b9:ec:88:94:a0:18:ca:f3:f3:92:2a:71:10:89:18:f9:
d6:c0:87:1e:f1:cd:68:ba:68:a2:10:78:34:68:8a:05:93:74:
6c:2c:63:44:52:66:48:ae:f4:68:15:60:6c:04:d6:a3:61:02:
d0:8c:67:41:3d:a6:e0:26:f8:17:13:30:87:a7:ff:1f:90:ea:
63:76:6d:e8:2a:5a:c6:83:e0:86:e8:57:04:a5:7d:07:cb:30:
93:25:11:67:1c:81:89:04:79:71:eb:58:05:e2:be:39:11:9f:
5c:3a:f2:79:66:94:c1:30:d9:ca:71:64:4b:b1:9f:d0:5c:a6:
7b:d9:75:b8:50:0b:12:2e:48:64:a4:23:2a:7b:4b:06:90:7b:
79:df:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:40:33 2025 by rpki-client