Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json)
Hash identifier: H/Wq0E+W1hg6VyEGtKU2eB+No5/n2KNHNjH6ZwekVN0=
Subject key identifier: F5:9D:2A:DA:7F:3D:EF:35:4B:29:C6:30:1D:2C:00:1E:11:A5:03:F9
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 019751588E112F991BCAECC0A2E1944DA383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
Manifest number: 052F
Signing time: Sun 08 Jun 2025 21:00:47 +0000
Manifest this update: Sun 08 Jun 2025 21:00:47 +0000
Manifest next update: Mon 09 Jun 2025 21:00:47 +0000
Files and hashes: 1: Ye0egtqoH6uMAlA-InFGtPoYhOI.roa (hash: zCIyCUBIV+P7SfqRZSH5RkFwyM3/tcMjHBwHN8QTJs8=)
2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: yPJ/s+uIJbL4sV5T2NTZ9ud2j9EzoGEK2e7r4UoX89M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:8e:11:2f:99:1b:ca:ec:c0:a2:e1:94:4d:a3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Jun 8 21:00:47 2025 GMT
Not After : Jun 9 21:00:47 2025 GMT
Subject: CN=f59d2ada7f3def354b29c6301d2c001e11a503f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:59:50:2d:38:25:6a:80:bc:32:f1:ae:0d:
ad:93:78:9c:2a:9f:61:59:a0:6e:15:18:4c:18:bb:
90:1c:bb:a9:25:16:95:7e:dc:cc:d5:c9:2b:b9:db:
07:64:39:9b:23:8e:8a:20:bf:c2:37:26:35:f1:6f:
3e:90:bc:43:af:bb:c1:63:a9:2b:d4:86:04:8c:ba:
df:26:55:a4:69:ab:7f:7a:ca:d1:e5:f8:55:85:2f:
e7:39:2c:49:55:fd:f2:03:c6:4a:8f:b5:98:d9:2a:
93:3d:d4:d7:29:40:8a:2a:60:fe:bc:4e:f0:7d:a5:
8c:8d:a2:1d:b2:cf:0e:53:56:39:56:6b:f0:48:e2:
7e:13:06:df:f6:2f:6d:5b:19:12:9e:7d:a8:86:22:
ad:b3:aa:3c:e8:b9:e5:3e:e3:f2:f8:7b:0e:9d:55:
f1:8a:7a:5a:7b:e5:fb:27:b4:6b:49:86:16:3b:9a:
a8:68:35:5a:cb:fc:94:8c:e1:7a:4e:63:cc:da:7c:
87:c4:97:ae:bd:fc:f6:e7:a3:48:2a:3f:2d:5b:e2:
9b:43:92:a4:2e:a0:5d:e5:43:34:a5:89:62:b5:e0:
63:1d:e6:69:89:91:6b:86:9b:06:56:67:2f:a4:aa:
90:f4:43:0a:73:e5:d2:10:70:ba:bf:42:45:0a:1f:
8f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9D:2A:DA:7F:3D:EF:35:4B:29:C6:30:1D:2C:00:1E:11:A5:03:F9
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:06:74:7d:ea:1a:a4:df:ac:0b:48:c3:5c:df:d0:0d:75:c6:
ab:53:28:71:45:13:14:19:14:91:3f:53:ba:87:d1:1c:bd:6e:
2c:57:35:b0:b2:f5:1f:f0:88:a0:09:46:02:40:d0:30:4c:df:
0d:eb:7e:d9:ba:13:d1:7e:42:93:06:ab:6e:b6:80:f3:d1:5c:
d0:00:34:20:41:b2:3c:21:fd:23:fb:d6:80:c3:fb:42:b6:38:
2d:1d:bd:bd:48:68:e5:49:2b:fb:90:d1:cd:05:79:9d:3b:cb:
bc:df:dd:3c:c7:30:00:51:f6:0b:88:94:a3:d9:46:e4:5b:db:
6b:f8:9a:d7:01:d9:1d:89:af:9f:ad:f4:b2:99:22:f7:db:74:
75:f5:be:41:f5:a9:73:2c:dc:0f:2e:6f:5e:a9:d9:19:f7:4b:
e6:dd:b2:ae:02:aa:f1:57:1f:10:c3:52:58:96:d0:77:55:72:
9a:e0:30:d7:95:e4:1c:b9:7d:13:b8:c5:5a:d3:ae:15:c4:94:
fe:c0:42:22:21:5b:b7:4d:61:66:b3:1e:d0:39:7d:6a:46:61:
e1:ea:de:a2:40:11:69:fc:c8:08:aa:33:23:93:35:42:ce:86:
e3:a7:62:62:67:e7:59:3e:e2:ba:22:23:db:9d:99:e3:89:51:
a0:d0:06:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:29 2025 by rpki-client