Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
File: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft (raw, json)
Hash identifier: VzITl/JJz1Ueq/Nl6QujKPOmxjC4Jfkod88oC8hFkcI=
Subject key identifier: D6:4F:F0:D8:E2:6A:E3:D9:7F:66:B4:00:07:D7:D1:6D:A2:5B:D8:B5
Authority key identifier: C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
Certificate issuer: /CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Certificate serial: 0197C94B82641AF5E2D25F29FC7AD1FC9405
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
Manifest number: 13CB
Signing time: Wed 02 Jul 2025 04:00:58 +0000
Manifest this update: Wed 02 Jul 2025 04:00:58 +0000
Manifest next update: Thu 03 Jul 2025 04:00:58 +0000
Files and hashes: 1: 3vk_cNMUWC-JUrbyIXBN2gny1YM.roa (hash: 5UI1dk/WNT1Jzxh8ssSrm2cZ8VMJvaL80lHMAJV1sdM=)
2: hm311e8NJq4CeLUwG2WwDwuRkEo.roa (hash: q59x20MyNrLs1Zhrc2YWC53c5eh99JxfPMp5OIsclNU=)
3: wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl (hash: NHEsochQ+yon4GqdQqsl715Wq1AU7Yf27vlxe5u+GnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:82:64:1a:f5:e2:d2:5f:29:fc:7a:d1:fc:94:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d710d8ac31b1f6daf7046c45374ae8e405f18e
Validity
Not Before: Jul 2 04:00:58 2025 GMT
Not After : Jul 3 04:00:58 2025 GMT
Subject: CN=d64ff0d8e26ae3d97f66b40007d7d16da25bd8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cc:0c:83:8b:d2:20:67:0a:84:41:99:64:0c:
7e:76:42:70:f5:fb:10:c3:80:1a:a5:c8:bc:ca:1a:
fc:35:e9:87:0d:41:b9:23:7d:b9:e3:59:4d:ad:e8:
bb:95:d5:60:ba:c5:aa:d4:4e:9b:56:b4:3f:1f:f7:
00:18:7c:6d:56:90:c6:56:1e:5e:c7:3a:81:5b:86:
9f:bf:a6:cf:89:f2:3d:69:05:07:62:1b:5d:38:22:
22:03:6c:ad:22:1a:be:98:3d:70:e3:dc:8b:90:b3:
b3:36:f5:c4:9e:3b:8b:5d:cd:05:83:75:41:1f:1e:
bb:9f:76:18:a5:a4:73:39:f5:cf:94:6d:87:eb:9f:
67:3c:35:a6:fd:66:72:a6:e7:77:2a:4c:d2:c2:ea:
7c:f7:d3:98:87:4e:c2:84:dd:38:6f:b6:5c:47:5c:
0b:8a:63:fe:bb:80:d5:81:18:52:0a:b1:c8:31:21:
a3:a9:b4:09:91:ff:cc:69:01:98:6b:5d:d0:78:71:
d6:8a:d5:a7:ce:31:4b:20:5f:85:05:10:8b:e0:27:
a8:a3:db:7d:f0:0b:6e:fb:c4:ec:3d:db:2d:de:6a:
dd:c0:31:84:f0:9e:3c:0c:14:e5:9a:ab:53:17:d2:
f1:11:7b:14:50:86:3a:d9:4d:48:ff:88:6c:29:bb:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:F0:D8:E2:6A:E3:D9:7F:66:B4:00:07:D7:D1:6D:A2:5B:D8:B5
X509v3 Authority Key Identifier:
keyid:C1:D7:10:D8:AC:31:B1:F6:DA:F7:04:6C:45:37:4A:E8:E4:05:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3303-7879-4b69-8848-115f15b20de7/1/wdcQ2Kwxsfba9wRsRTdK6OQF8Y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:87:98:b4:52:86:85:03:30:ac:a0:cc:d5:a1:ba:af:99:29:
87:a8:2c:4c:61:fe:aa:95:71:ca:ca:4c:8e:82:d9:f3:1b:24:
60:c4:50:d2:4c:a5:3c:4f:70:6c:db:8e:9e:91:0c:f2:22:f5:
a4:44:6f:fe:38:dd:bc:8a:65:89:ce:14:c0:96:0e:21:bb:48:
dc:f4:95:41:e7:f0:4e:5b:bb:d5:d1:a2:23:d2:7c:56:39:61:
71:0e:73:5a:39:5c:9b:89:3d:9a:fc:1b:d5:e2:7c:08:69:f2:
bd:6d:25:58:1f:30:df:0c:24:a5:93:3b:b9:c6:06:6d:66:6e:
c7:25:dd:45:23:2e:4a:65:06:17:76:66:3b:d2:05:4a:fb:d5:
ea:1a:2d:d1:71:3f:0b:89:70:ea:a1:3d:33:ad:d5:05:61:8e:
36:88:00:4c:51:1e:9e:11:b6:24:96:49:16:7a:fe:29:84:88:
f7:06:66:da:12:ff:0e:ee:ef:e3:a1:6b:aa:c6:21:79:6b:d6:
5c:46:8f:85:24:f0:55:c4:89:38:3c:09:23:8a:e5:99:8f:ec:
0f:a7:47:5d:53:7a:a3:0d:0d:1b:89:d6:06:8a:2f:d2:1e:37:
08:5a:db:fc:8d:36:a3:e2:dc:aa:fa:a5:90:cf:6b:80:ae:ba:
44:4b:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:08:40 2025 by rpki-client