Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: 0DZsb1gs9osOCbcEm/k0ZuYrgzsBtiHKakQm+VfUAos=
Subject key identifier: F8:66:4F:AD:D6:BA:1B:FC:C2:C7:0F:E5:D1:24:8A:7A:95:27:99:4F
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 01975611B1211D08CBD77643FEB0B735CBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 03C4
Signing time: Mon 09 Jun 2025 19:01:29 +0000
Manifest this update: Mon 09 Jun 2025 19:01:29 +0000
Manifest next update: Tue 10 Jun 2025 19:01:29 +0000
Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: gVnw5HKsujKow4fDAnxmJdzx19Fixi0pw/bvrKWx6JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:b1:21:1d:08:cb:d7:76:43:fe:b0:b7:35:cb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Jun 9 19:01:29 2025 GMT
Not After : Jun 10 19:01:29 2025 GMT
Subject: CN=f8664fadd6ba1bfcc2c70fe5d1248a7a9527994f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:70:8c:ae:71:0c:35:0f:28:61:c0:30:73:a3:
bb:f5:7f:57:73:ce:c3:67:a0:b8:e2:6d:73:c6:69:
73:b2:fb:a5:51:22:bc:1b:99:0c:7e:1d:64:94:fd:
9e:e5:2f:88:cf:c2:c3:27:c0:99:26:f1:60:a4:d2:
19:95:54:f1:95:84:5b:84:0f:cf:39:30:38:b5:81:
3b:db:a0:94:61:22:21:50:f0:96:14:23:ef:78:ba:
3d:17:6d:eb:53:ef:b7:e8:98:8a:18:e6:b0:eb:af:
e5:b7:bf:7a:a8:b2:fd:86:ec:33:13:80:1a:0a:f2:
d1:9f:26:6a:9b:6d:9c:3f:dd:a4:ce:af:dd:dd:5a:
ec:32:6f:f6:89:5b:6b:6c:4d:fb:a5:08:36:52:11:
9d:0d:a7:58:2a:ea:18:f5:4f:7d:9e:22:0a:44:3f:
4d:67:4d:a8:82:3a:28:b6:1a:cb:89:43:a5:d7:13:
fc:20:6f:2c:ce:25:8e:b4:e2:56:1b:dd:f4:c2:48:
62:01:8c:1f:a0:48:1e:1a:59:a5:ae:5f:02:fa:42:
2d:1d:c0:36:62:e7:9a:07:e4:f6:07:87:dc:06:10:
8e:ff:30:58:2e:68:e3:09:9a:13:c1:e5:ed:01:2c:
35:77:65:87:2e:26:1b:a8:78:7d:3e:98:cd:b4:ea:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:66:4F:AD:D6:BA:1B:FC:C2:C7:0F:E5:D1:24:8A:7A:95:27:99:4F
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:8e:a5:f2:33:05:6a:74:3a:ef:27:5b:73:74:5b:70:38:
8f:9e:32:e8:fd:cc:f3:65:2b:a5:81:0d:b4:6c:83:02:96:16:
d7:5e:13:5d:72:ec:b3:09:c2:63:46:eb:96:91:9a:b9:30:20:
30:fd:ca:11:30:a6:70:e1:8b:fd:84:61:af:c2:22:39:dd:ca:
a0:18:10:e0:af:40:c0:61:c8:60:81:16:7d:80:be:98:1e:a9:
68:67:19:78:eb:05:5e:79:39:00:41:aa:b4:19:12:96:c6:78:
99:8f:df:d5:19:4a:61:6d:e0:ba:f4:6e:8e:c1:66:07:6e:16:
83:f6:8d:ad:4a:7b:c2:92:9f:68:80:9b:c5:34:f6:ed:ed:46:
85:bf:cf:aa:5e:f0:62:57:ec:6f:0f:d4:b9:21:f3:4f:b2:74:
e1:26:f9:da:15:38:58:1c:11:f1:28:ea:4a:85:09:72:a0:52:
e4:a2:ce:44:6b:8b:d5:5c:30:d4:dc:ec:70:69:f1:da:74:e4:
43:b9:13:e8:1a:8a:fb:18:87:ef:83:ef:5d:7a:46:6c:ad:00:
de:49:46:cb:42:39:87:b1:90:f6:ab:72:48:a1:73:7d:0d:c7:
ab:6a:a1:46:f7:c9:25:5e:cf:77:4e:60:dc:11:a8:f7:63:88:
81:44:ef:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:34:44 2025 by rpki-client