Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
File: wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft (raw, json)
Hash identifier: VtHXbETv4bDFH3VBNNI11SkIuCZRFch4uCds012+J20=
Subject key identifier: 8E:89:E6:BD:41:D6:CA:25:7D:3E:20:50:31:58:4E:28:D7:C9:BD:DD
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial: 0197488CC4DC8E384CABA6FA138865B19D25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
Manifest number: 0D40
Signing time: Sat 07 Jun 2025 04:01:14 +0000
Manifest this update: Sat 07 Jun 2025 04:01:14 +0000
Manifest next update: Sun 08 Jun 2025 04:01:14 +0000
Files and hashes: 1: a6SHvUwdULLlosMj0Qyu3etIaJs.roa (hash: AXN629p0Y1qYqZU9D/jxSCYhJRckcBgGmOm3TSGD8tc=)
2: lg4c_Y9KaB7IeYQtG_NlVFs8Ttc.roa (hash: s0TIgc9o3WnXNq+/Rw0e9Vihi4zyFHKiJVF/TZNGrnw=)
3: wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl (hash: QlBqHIxCToBOHinsTv3yLG7x1YE7NtVll1IzsUINBV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c4:dc:8e:38:4c:ab:a6:fa:13:88:65:b1:9d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Validity
Not Before: Jun 7 04:01:14 2025 GMT
Not After : Jun 8 04:01:14 2025 GMT
Subject: CN=8e89e6bd41d6ca257d3e205031584e28d7c9bddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:1f:45:90:32:4d:46:b4:c1:b7:35:86:5b:
d9:ff:e6:ef:11:ac:58:42:58:b1:73:a8:67:48:82:
16:67:04:72:9b:d7:3d:60:4a:48:85:cd:f5:47:bb:
c5:39:be:9f:2b:92:e9:e5:88:a6:16:b8:de:b1:8c:
79:77:fc:d9:4f:09:32:e1:9e:25:44:ec:09:c7:cc:
04:d7:bb:54:a0:44:68:b3:7c:00:ec:8c:21:6a:72:
0c:33:95:f8:bf:03:d2:8c:43:97:fa:23:86:21:2d:
96:a2:66:ce:dc:18:04:6e:2e:3a:ca:4f:de:25:81:
35:01:95:3a:ad:9d:e4:a3:ae:f0:80:03:05:e0:64:
0f:b4:f4:70:e4:cd:e2:59:70:1c:c3:61:ed:09:b3:
cd:71:74:6d:03:d7:0b:a4:31:2d:55:50:2c:5d:53:
b8:b2:8f:41:e3:be:14:9a:bb:b0:31:ef:59:5b:47:
1e:8e:b3:a3:01:40:cc:72:e9:0c:3f:74:9d:be:1a:
48:f4:aa:85:c2:a4:31:27:5f:b7:40:c1:4b:9c:14:
30:2b:cf:4c:d7:d4:5c:f8:c4:d2:eb:c1:e7:21:4f:
3c:71:90:d8:64:a4:76:ab:42:f3:0d:32:c8:67:ba:
d1:d5:a1:cc:af:93:1a:7b:3b:9b:11:48:5e:a1:bd:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:E6:BD:41:D6:CA:25:7D:3E:20:50:31:58:4E:28:D7:C9:BD:DD
X509v3 Authority Key Identifier:
keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:26:a2:94:9f:22:bc:21:f9:c9:36:c3:14:af:07:b4:32:5b:
e5:1d:7e:8f:a0:dc:65:46:dc:b2:31:82:15:9e:c7:b2:f1:36:
78:82:b5:e2:28:e7:0e:73:28:8b:c1:b8:36:66:c4:ec:ac:af:
6c:ed:98:4e:e4:9e:ee:5d:6f:0d:41:22:29:36:24:cd:59:db:
74:f8:aa:b1:af:d9:42:bb:6c:8f:5b:28:de:84:e2:c9:d0:d6:
5c:a8:8d:93:58:47:32:76:7f:41:97:3f:8a:c5:82:83:f9:b0:
b1:00:95:ae:4a:5a:29:83:cf:c8:38:56:2f:5c:6e:32:21:61:
24:86:2d:74:37:94:ef:0b:89:1f:6a:0a:06:e1:39:b7:46:1c:
f2:5b:44:bf:66:6c:6a:3a:20:54:72:bf:80:82:9a:73:ed:c9:
1f:2a:ef:07:33:b8:69:57:ab:3c:7b:b9:6d:aa:d8:b9:fd:0a:
f7:ba:6f:ed:15:7f:3c:38:e2:c1:48:11:bf:d8:d3:84:91:39:
ed:63:cd:5b:21:77:e3:af:88:42:2b:52:f1:c0:8f:9f:0e:c5:
d2:61:e8:1a:6a:3c:f2:2b:8c:f0:88:82:b4:5b:77:7d:ab:fb:
3b:d1:53:c3:47:87:31:a9:b3:61:07:08:f6:1c:8d:df:82:92:
dd:f9:17:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:50 2025 by rpki-client