Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json)
Hash identifier: TwZXcr+lkIWG1DT6rLiggvQH/HcAV9+yU3iqxIfRg5Q=
Subject key identifier: 72:4C:A2:AF:AC:F8:6E:A5:1F:6E:84:1F:FC:D0:ED:B1:FD:DD:C8:56
Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Certificate serial: 01976584CAAE1D021F42F557F1D8B79049A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
Manifest number: 03CC
Signing time: Thu 12 Jun 2025 19:01:30 +0000
Manifest this update: Thu 12 Jun 2025 19:01:30 +0000
Manifest next update: Fri 13 Jun 2025 19:01:30 +0000
Files and hashes: 1: 7XfhLun6Ve5uRxXwPsgdrE6D-fI.roa (hash: b8AATSifx7/LvpsKfDCuwWcrOC9fgkYZg2ZM6+VpEfM=)
2: iuHoct3zHKPAQY0zJWbgQODPfEo.roa (hash: Un9DAj/KSTfz3PzRpucfMK4GqYVgsTE2tiPdLJ964Po=)
3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: JvnWBYh5bvTNjyzMmDsS32d3Cx5AMVO3FhS4nMDFlHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 15:17:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:84:ca:ae:1d:02:1f:42:f5:57:f1:d8:b7:90:49:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652
Validity
Not Before: Jun 12 19:01:30 2025 GMT
Not After : Jun 13 19:01:30 2025 GMT
Subject: CN=724ca2afacf86ea51f6e841ffcd0edb1fdddc856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:22:e7:fe:14:18:10:a3:a4:33:12:db:8f:
07:58:be:92:50:23:6a:79:7f:06:e4:0e:ae:22:06:
34:f1:a4:7d:82:55:e4:53:e9:0e:5a:3a:16:69:b4:
22:94:5b:d5:77:bc:67:ef:ca:e3:6f:86:85:33:25:
00:b4:ec:b6:e9:e9:14:26:c9:a1:4f:26:0c:18:e9:
e2:44:89:72:5a:83:73:26:37:e0:fa:76:f0:74:47:
60:d7:a6:3a:93:6c:6d:23:25:d2:59:4b:38:46:b8:
a1:ba:a0:3f:20:dd:ed:e4:10:9e:03:46:9e:5e:35:
44:21:8e:30:6f:93:87:b4:53:87:98:dd:40:a5:4d:
bd:fb:df:d1:3c:8c:f3:84:7c:6a:55:46:c5:9f:62:
a6:28:d0:23:eb:eb:4b:72:61:03:fa:ba:99:7c:06:
fb:3a:91:f7:f8:0f:b4:06:26:63:81:f1:05:37:fc:
69:89:27:a7:b5:98:74:51:8b:c8:33:fe:a9:01:11:
65:ef:50:3a:d3:38:53:54:b9:07:fa:86:fd:2a:f3:
3f:8b:97:9b:6a:a2:d7:a9:cd:9a:b6:4e:09:e4:38:
3d:3e:84:f1:f6:29:2c:eb:08:db:16:14:d9:ed:10:
75:ea:66:a7:ec:a1:52:f3:fe:ae:79:d5:d8:26:0b:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:A2:AF:AC:F8:6E:A5:1F:6E:84:1F:FC:D0:ED:B1:FD:DD:C8:56
X509v3 Authority Key Identifier:
keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:52:ab:69:e7:06:d3:91:88:8d:03:9b:6a:59:98:2f:4c:53:
d0:4d:56:e8:4f:12:eb:f5:fd:b8:12:61:15:20:0d:7d:4e:81:
a6:da:b4:87:6e:ea:f1:4c:30:ab:bb:08:54:b3:f6:15:c4:c9:
39:72:46:f9:06:ed:64:b3:c7:17:f2:fb:ba:d0:20:a6:32:33:
0b:6f:f5:e7:ce:53:ed:90:df:d1:35:a5:b4:07:0a:bf:d2:11:
c5:c2:ad:8e:e9:54:29:68:90:8e:77:fa:6e:f8:5f:78:b7:de:
60:30:e6:80:6b:ff:05:28:8c:4a:a4:a7:1b:16:77:ea:83:c2:
38:5e:16:3a:bd:58:67:f2:a5:3d:3a:da:4e:1b:0f:5b:cf:c5:
78:e9:85:e5:12:87:1b:e4:74:69:df:61:26:38:1f:71:32:8b:
40:ea:18:2a:06:ec:2f:45:13:86:16:26:c0:00:c7:24:c7:af:
30:e6:f4:4d:1f:c1:5b:92:c3:62:43:bc:77:fb:0e:69:05:ee:
69:70:38:6d:2a:ed:3f:be:ae:f7:fb:33:80:14:97:f9:11:90:
5c:1c:87:3b:f5:23:63:63:25:11:ee:a9:b3:30:29:24:72:d1:
7f:ec:56:cb:ca:e4:b9:9e:de:fb:26:49:98:72:35:20:41:48:
90:a8:98:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 00:55:32 2025 by rpki-client