Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier: +BMvfSISZdlNs1KUaJi34vTFT8vJ3EFPArqSunACm6U=
Subject key identifier: 8C:71:F3:DC:B3:D4:07:5E:EF:B2:42:5E:7B:A7:C9:F0:B7:3F:E0:59
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial: 019747794892014A90881C40E05DA9A1544D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number: 0A2A
Signing time: Fri 06 Jun 2025 23:00:20 +0000
Manifest this update: Fri 06 Jun 2025 23:00:20 +0000
Manifest next update: Sat 07 Jun 2025 23:00:20 +0000
Files and hashes: 1: lQvman0TcS9UAXTyd3ZXIdLOBqI.roa (hash: P14NthyAGiyfoJgBsi6HRoRfnfWtEu8GOwgj8n8I3ag=)
2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: Qc8UklVWBEZwBpNOELpNdBKs70T72vtfMd3H6CM4wLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:48:92:01:4a:90:88:1c:40:e0:5d:a9:a1:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Validity
Not Before: Jun 6 23:00:20 2025 GMT
Not After : Jun 7 23:00:20 2025 GMT
Subject: CN=8c71f3dcb3d4075eefb2425e7ba7c9f0b73fe059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:9d:a8:70:2c:28:83:db:ce:97:f8:b2:13:
02:3f:b9:ed:1d:d1:50:2b:68:94:f8:33:77:00:22:
51:1a:68:da:64:5c:11:70:46:dc:80:ce:1a:00:49:
95:ed:80:65:90:44:05:c2:e0:43:36:02:e4:50:90:
8d:b2:c9:cc:36:cf:7e:ab:d7:2b:44:5a:16:fe:59:
3a:b5:72:7b:3e:56:10:a0:f5:bc:3b:8c:5c:05:bc:
c6:e2:6a:a5:87:96:1d:f2:f5:45:6a:35:37:cf:f8:
10:ec:97:65:e4:66:43:3c:1e:67:e6:2a:51:c6:70:
db:71:cc:c2:92:86:90:ca:43:55:a8:1f:1e:9c:30:
27:bd:2f:c6:aa:fe:59:c4:14:bf:c5:bf:38:eb:b8:
f1:d3:db:02:0e:5f:40:3b:39:97:0e:94:8e:dc:44:
22:f7:7c:7c:b9:f3:b9:b9:45:a4:54:ff:ab:f4:3a:
bf:9a:49:b1:e6:0c:75:96:e5:55:97:3d:df:25:39:
4d:97:67:71:d4:aa:a7:a7:92:2c:0f:fe:51:8e:84:
6d:c2:44:ed:5e:61:63:bf:b0:53:bd:9f:2b:0e:52:
f0:c4:c4:8c:fd:10:cf:1a:06:e1:3c:d2:0a:a2:6a:
28:8e:27:b7:ba:b7:68:3b:5b:bb:0b:7f:7d:60:ef:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:F3:DC:B3:D4:07:5E:EF:B2:42:5E:7B:A7:C9:F0:B7:3F:E0:59
X509v3 Authority Key Identifier:
keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:e1:54:15:2b:f7:79:e5:97:ea:30:d4:4c:4d:75:1d:e6:
d1:94:e9:c1:ca:cb:64:91:fc:e5:0c:2c:31:80:73:f6:0e:32:
d3:db:0a:e0:dc:46:0b:e9:ce:1a:5a:a4:7e:e0:e3:19:37:df:
41:df:bd:36:8e:6a:98:e2:09:84:ee:b4:88:3d:8d:a0:ad:b5:
94:a4:e5:20:56:ff:0b:b1:70:8b:b7:48:c3:85:a5:06:c1:fb:
53:9c:a5:37:86:b1:35:41:44:0d:cf:be:d7:72:16:b1:ce:0c:
49:9d:c7:66:15:17:7b:ba:f9:9b:0a:6f:cf:27:a0:fc:53:01:
2d:2f:10:0b:7e:0d:45:86:03:17:1d:53:cc:86:2a:87:99:5b:
0b:89:74:57:b7:3e:e7:9f:3b:b4:55:b4:e9:09:45:1c:0f:03:
56:fe:dd:f5:25:f9:18:5d:8e:9f:c7:7f:d9:8a:ec:fe:b3:53:
35:e7:50:ff:eb:86:7a:e9:da:bc:b2:d3:1a:ae:fd:81:fb:2b:
6a:7c:c5:0d:3b:f2:f6:8a:d8:ed:2b:9e:8d:0c:2e:f6:84:51:
77:12:c5:2c:c6:a0:22:f8:f5:20:b7:56:47:dd:e0:5d:4f:bf:
40:77:77:4c:49:9c:4e:06:53:1d:6b:10:cc:fb:9e:01:07:4b:
89:23:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:25:33 2025 by rpki-client