Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json)
Hash identifier: aJrFNMvGuOxEwqt1Qu0p8S7151h4TjD8K5fkdjeM3Jc=
Subject key identifier: 40:38:7E:58:1C:21:6B:44:5E:FE:E3:BF:70:26:D9:D0:4F:82:AE:E2
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 0197CA5E2C7B1BB06A615573325E97F6F361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
Manifest number: 38
Signing time: Wed 02 Jul 2025 09:00:58 +0000
Manifest this update: Wed 02 Jul 2025 09:00:58 +0000
Manifest next update: Thu 03 Jul 2025 09:00:58 +0000
Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=)
2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=)
3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: Rog7aRd+y1ZBgk0yNxeSgk1U2FfUvMUGdu+IY4DYCm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:2c:7b:1b:b0:6a:61:55:73:32:5e:97:f6:f3:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Jul 2 09:00:58 2025 GMT
Not After : Jul 3 09:00:58 2025 GMT
Subject: CN=40387e581c216b445efee3bf7026d9d04f82aee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:a3:3b:16:eb:ed:12:c0:03:6a:46:c0:e4:
49:bd:0d:ba:e1:ae:bf:ed:82:a0:85:4c:57:5d:0c:
73:1b:aa:73:0d:b9:75:ee:75:8a:3a:b3:1d:33:88:
c2:d6:f9:31:ac:eb:4e:2f:b5:3f:7c:82:c6:49:84:
29:22:df:a8:a5:86:a8:11:f7:7c:9b:94:46:a8:92:
31:1d:e9:2e:14:f9:0f:4f:df:1b:c1:e8:c7:ae:55:
5c:c5:7a:2e:04:c9:a7:d5:9c:22:15:c4:94:ca:ef:
c9:96:9c:0d:6b:02:a7:23:6e:57:69:ac:72:6c:b2:
00:82:de:13:32:cb:d1:27:d9:9c:d2:26:f3:19:c8:
47:a1:88:3a:88:e3:e1:1a:7c:56:1c:54:d5:3b:70:
00:7d:44:56:36:e1:fa:41:da:a2:4a:4c:f4:2d:18:
f6:54:60:21:9a:c6:0d:b5:13:46:9f:b3:24:db:e1:
cc:f9:50:bc:95:07:eb:d1:38:c2:ab:cf:0b:17:8b:
d9:9a:dd:bb:49:cd:8c:a2:bd:50:ac:6c:47:e4:9f:
6f:65:0a:f0:68:94:31:10:57:87:30:83:5a:31:b8:
02:74:fb:c6:ce:30:b6:a1:0c:8f:02:3b:9f:4e:17:
34:51:c5:96:b7:50:16:fb:6e:17:f3:36:6c:20:a8:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:7E:58:1C:21:6B:44:5E:FE:E3:BF:70:26:D9:D0:4F:82:AE:E2
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:8b:fb:c7:62:77:d3:d9:4d:f8:55:09:12:ad:75:1f:89:f8:
9c:18:4b:d6:97:23:26:de:1b:ac:91:0d:09:f8:3c:f2:4f:e7:
d5:fa:d9:22:36:1e:b1:a7:22:0d:ff:3b:45:70:98:6c:ee:8f:
c3:e8:b5:59:bd:02:64:7b:2e:81:55:aa:29:e1:41:b2:6e:c8:
3b:41:76:9d:28:45:90:95:4d:32:47:53:8a:2b:eb:14:76:7e:
cb:4a:c5:01:5d:07:f9:67:0b:0d:6c:6f:d2:b7:57:bc:00:26:
b0:5f:03:5d:cb:50:33:aa:5c:6f:88:b4:45:37:59:72:7b:f0:
af:e5:0a:6f:79:55:bc:5d:c3:cc:7a:4d:a6:b9:9a:51:b0:c4:
30:04:c8:af:3d:82:9c:c2:f9:76:b1:f1:ce:ca:33:a0:a1:ae:
dc:49:ac:4e:2c:54:23:7e:7b:46:d9:22:20:93:cb:5c:03:03:
52:2d:cc:0f:66:63:7c:c6:30:a8:b4:47:56:1e:22:f5:d2:df:
0a:41:9e:d2:57:4a:23:cc:2a:1b:03:6e:cd:ea:0b:62:74:bb:
d1:54:a1:e2:59:f8:5d:8a:31:05:17:d2:f6:46:dd:69:fa:85:
12:ff:76:d2:f2:a4:15:f7:72:98:7b:43:0f:e7:b5:40:c8:5d:
80:67:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:41:45 2025 by rpki-client