Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: 1kmoIeXkadjULpAV6JcId5dNGvPWAC4wFoLCAp7HfNE=
Subject key identifier: 7D:93:D9:FE:80:FD:44:FD:9D:00:31:80:4A:95:5E:38:A8:51:86:3B
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 01975233E8B8FA0B5E076D8D267BDBDA530D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0C56
Signing time: Mon 09 Jun 2025 01:00:22 +0000
Manifest this update: Mon 09 Jun 2025 01:00:22 +0000
Manifest next update: Tue 10 Jun 2025 01:00:22 +0000
Files and hashes: 1: DkCgqG244-xdfGSiZiRL_6jjMU4.roa (hash: LYv1Ix1K/vm79oDEZ0SXpTqFtZHiYhhxeZ+EeZAbK6I=)
2: eaEk-4j5PrJQWB1ynGSuwR96qYE.roa (hash: cKnW7tUA+y/LjIR8x0MQBeinXC+rpLOrHc/MhvgB6Fk=)
3: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: /cOxTusnBmZgwQSnxV/y3OwskJB8JiTKF3q603H/DFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:33:e8:b8:fa:0b:5e:07:6d:8d:26:7b:db:da:53:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Jun 9 01:00:22 2025 GMT
Not After : Jun 10 01:00:22 2025 GMT
Subject: CN=7d93d9fe80fd44fd9d0031804a955e38a851863b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:df:dd:33:ca:cc:9e:94:af:85:1c:80:3a:
1f:06:ee:b1:64:88:b3:da:f3:c0:da:12:52:d7:1a:
4f:67:9f:bd:c2:09:68:ff:5b:a3:00:f1:68:5f:f3:
18:26:8d:a3:77:97:d3:01:d0:b5:33:61:7f:bc:93:
3f:ee:da:cc:f2:18:ba:18:d1:a6:37:1d:74:f9:59:
16:4d:f4:72:d4:f6:d7:f2:44:0d:75:93:a7:d4:bf:
57:34:9b:6a:9e:1a:1c:98:f7:cb:b6:88:32:81:97:
97:d0:4f:de:e0:49:ab:2a:fa:d4:fe:7f:6b:98:38:
87:2f:2f:17:7c:87:3f:bd:cd:6d:e3:a1:21:0d:16:
5a:58:3e:31:41:5b:da:6f:7a:33:5a:af:13:a7:ec:
12:cc:51:23:50:60:9b:fa:c3:8f:db:c7:11:bd:df:
00:de:20:d7:a9:29:2d:c2:5b:7b:4b:2c:50:48:a3:
57:be:e8:44:ba:d4:9f:94:20:45:0a:2d:96:b6:70:
55:f9:59:73:a0:68:f5:fc:6d:27:51:fe:bc:24:03:
b5:ec:ae:73:06:f0:d5:84:d0:0d:a3:4b:74:ab:48:
19:1b:e9:cd:aa:68:4a:a1:0b:81:18:6b:f0:27:bf:
9f:de:9b:a2:f4:7a:0e:ac:08:76:61:3d:87:6b:e7:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:93:D9:FE:80:FD:44:FD:9D:00:31:80:4A:95:5E:38:A8:51:86:3B
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ee:7f:4d:d9:10:17:26:54:57:f9:fc:28:6c:16:1f:e3:dc:
e2:01:17:ac:49:eb:e0:dd:88:a3:a6:6c:0a:c5:4b:93:14:3a:
dc:09:e8:da:fe:bb:0f:af:7c:85:0a:4c:23:51:f9:3e:1f:01:
57:94:9d:cd:33:bf:72:f6:ec:73:d8:38:97:83:d4:a4:20:1e:
40:1c:16:1c:02:ce:ea:62:84:1a:d5:39:12:b0:e1:a6:43:42:
62:f3:07:a5:1c:56:70:2a:69:8a:24:5f:44:93:18:61:b5:1a:
ec:9f:7b:e5:66:3f:d0:bd:5a:c3:77:89:44:5a:f2:6f:e5:58:
7e:d9:c5:e4:57:f3:a9:4b:a1:27:86:4c:54:fd:f9:d4:83:45:
57:fc:a1:bb:45:da:a1:63:4d:81:52:68:3e:4d:7f:2d:56:72:
a4:3b:17:6e:0a:6e:f6:8b:f2:a0:79:c0:4b:ca:e2:22:ef:22:
dd:56:ef:81:ac:93:49:14:d5:ca:17:0d:75:b5:ec:f1:c0:fa:
a7:f9:67:fd:bb:ab:20:5d:c5:cb:4a:fc:94:40:c8:86:4f:e0:
ad:93:ab:39:3c:72:2b:3c:2c:7c:13:30:0a:99:39:30:62:be:
30:f6:e5:db:bf:e9:d3:c2:f5:d0:a4:e0:06:07:9c:1a:20:b2:
b7:6a:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:46:13 2025 by rpki-client