Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
File: wR0IGGQzkDBptda7ZS-YQo9TyAg.mft (raw, json)
Hash identifier: CGfN5eAPB/M9wMMQP1+iAm3WHGSdwjZImpWQoPo2eR8=
Subject key identifier: CE:17:1D:03:67:E1:AB:3C:E3:D5:74:CF:1E:D7:BD:C5:8D:7B:99:0F
Authority key identifier: C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
Certificate issuer: /CN=c11d08186433903069b5d6bb652f98428f53c808
Certificate serial: 019749316E03ECD60F6B460C749299725DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
Manifest number: 015D
Signing time: Sat 07 Jun 2025 07:01:05 +0000
Manifest this update: Sat 07 Jun 2025 07:01:05 +0000
Manifest next update: Sun 08 Jun 2025 07:01:05 +0000
Files and hashes: 1: GlQUBzcNJmw0558H72JeNJOtGUQ.roa (hash: OAZrKZei1mukwSf7KdhyGGJ75nXzfwov+lRUskVC4AA=)
2: GzLNeemJ5NyzmlXIMSE-P5qpPK0.roa (hash: gMekrQRvaaYdzpl1VdoBplLf+AZyuoskovW0AOifAys=)
3: wR0IGGQzkDBptda7ZS-YQo9TyAg.crl (hash: /n+y5LN67psvJbp9p88qXfOsDJ7MJzC5xlfvRx67iEk=)
4: xok2gimWwzURof_w9dO-DRDDn3Y.roa (hash: onwOc+d+Y67hjnLHKYPr/lttMavIYzZkOgnV1cJxF50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:6e:03:ec:d6:0f:6b:46:0c:74:92:99:72:5d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11d08186433903069b5d6bb652f98428f53c808
Validity
Not Before: Jun 7 07:01:05 2025 GMT
Not After : Jun 8 07:01:05 2025 GMT
Subject: CN=ce171d0367e1ab3ce3d574cf1ed7bdc58d7b990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b7:7e:14:c3:de:33:71:db:11:0d:90:b1:fc:
fc:d4:c0:36:d9:5b:98:c5:98:e0:c6:ce:da:c2:bb:
38:8f:1c:2a:24:1e:4f:f9:c4:c0:4a:c0:40:90:52:
46:b8:04:9a:73:4e:de:5d:a5:80:39:e3:f1:45:53:
19:d6:86:a8:a0:ce:25:0f:b4:bd:49:b0:e1:91:25:
d3:f3:b3:8c:92:24:3d:2b:dd:09:0f:33:f4:17:88:
51:42:6e:fa:08:19:85:54:85:26:88:e3:11:58:af:
f9:df:ce:0b:14:eb:88:b1:9c:0e:32:93:c2:38:52:
9f:3c:bf:79:16:50:f6:48:72:bd:c7:ee:d4:1b:72:
d5:3f:3b:bb:b4:6c:4c:cd:78:d5:16:9c:55:06:20:
50:13:84:09:99:d2:0c:5a:b1:09:2c:46:c2:7b:42:
74:f4:0c:7d:3c:a4:fe:a5:d0:a3:f2:5a:69:09:7c:
11:5e:80:3d:cc:2f:ec:c2:be:35:00:49:9d:24:ac:
18:19:39:10:49:aa:4e:e6:39:c9:5f:bc:10:e3:5f:
53:70:14:62:1a:8e:18:3a:0d:37:84:17:59:da:e0:
7f:9f:5d:88:ee:2e:18:5a:4f:f1:e2:d1:a4:91:d2:
da:33:4c:83:a1:c8:03:40:50:1d:c3:4d:e1:a3:f5:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:17:1D:03:67:E1:AB:3C:E3:D5:74:CF:1E:D7:BD:C5:8D:7B:99:0F
X509v3 Authority Key Identifier:
keyid:C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2b:bd:b7:bd:70:02:20:53:3b:d6:bd:43:64:a5:54:82:6f:
90:98:94:ff:a9:d0:e1:52:a1:0f:3e:ff:16:fa:c5:b8:17:2c:
bf:9f:2f:49:d1:07:db:7b:91:25:8f:53:55:ec:6d:48:f6:e0:
77:0a:56:6d:84:ac:83:72:e1:25:9f:44:64:d3:24:4d:b2:58:
b8:1c:ff:a3:5d:20:73:d0:f5:9e:8f:fa:6a:ea:80:97:91:93:
a4:d8:1f:4d:96:e8:29:f3:ef:f7:f8:cd:99:f6:1f:60:56:86:
ea:07:20:81:25:96:93:5d:15:6c:cb:6a:a3:0f:dc:dd:5a:0e:
18:c6:ca:ea:da:02:9e:02:0e:8d:53:af:c9:2a:d7:69:e3:04:
b3:a7:a5:7f:9d:52:3f:5e:d1:dc:f9:b6:33:d8:64:4e:61:0c:
3c:7d:6f:48:c4:08:35:96:1c:67:d6:d1:5e:93:08:c1:4f:f7:
d7:af:1b:41:d6:73:e1:5f:e1:82:f2:17:54:7f:fb:d7:83:b5:
04:6f:dd:d1:4f:fa:ed:f3:e5:af:08:53:1b:67:c7:f5:fa:5e:
e1:df:07:9c:c1:d7:cf:f9:86:e3:cc:3b:8b:18:3c:65:a9:28:
01:68:e4:60:19:cb:bd:08:da:74:4f:b8:98:0c:ac:83:fc:db:
5c:84:92:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:48:44 2025 by rpki-client