Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: o4xIQaCyeUK1n40OmkWKHXPFJAanBAHyyBqsPesFizw=
Subject key identifier: 56:11:43:E0:2C:81:24:C2:CD:01:B9:1A:51:BE:71:22:E3:DC:A3:83
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 019748FA8DDC332A8664968F37DC98756547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 01D7
Signing time: Sat 07 Jun 2025 06:01:09 +0000
Manifest this update: Sat 07 Jun 2025 06:01:09 +0000
Manifest next update: Sun 08 Jun 2025 06:01:09 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: npwxxlUOYFsiJTXybnX1mk299LEo75tdNvpJXciV/6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:8d:dc:33:2a:86:64:96:8f:37:dc:98:75:65:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Jun 7 06:01:09 2025 GMT
Not After : Jun 8 06:01:09 2025 GMT
Subject: CN=561143e02c8124c2cd01b91a51be7122e3dca383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3b:04:fb:0f:f1:16:cc:08:fc:3c:c0:88:1c:
7a:65:b9:86:49:6c:3e:43:ba:4f:99:c3:3e:3f:a7:
79:20:8e:13:b9:d8:52:c7:d5:f7:12:b6:d6:7d:3f:
f0:c6:41:22:a0:f6:ed:6d:35:21:4e:03:81:84:64:
33:8e:cb:c3:ff:44:37:ed:da:77:fc:90:7e:44:b6:
25:ee:cf:8a:c9:da:6e:99:c5:b3:a8:87:6e:a5:1f:
11:eb:d7:73:aa:3f:0c:60:11:57:e7:18:b1:f7:fd:
11:1e:eb:15:7f:f7:60:d3:1d:04:82:4d:63:0d:53:
bf:24:2d:f2:d9:e9:c9:59:46:ab:94:c0:66:ee:67:
5f:12:c8:71:e9:f9:e1:70:a9:ff:97:78:ad:76:c4:
f2:40:22:20:d0:2d:29:b6:4b:c9:57:74:54:9a:1d:
66:bb:82:1c:00:14:31:37:9a:bc:3f:45:2b:82:42:
f7:34:6f:2d:4d:09:fe:0a:00:49:52:f7:5f:bd:4b:
5d:94:70:4a:cb:27:18:3f:c3:f3:70:f9:87:ee:e9:
12:26:2a:1a:da:60:12:77:48:9c:46:ee:c8:74:ab:
42:c1:12:8b:9e:4f:35:7f:6a:68:49:77:52:9f:7f:
92:65:41:23:a1:6c:36:cc:13:82:8b:49:b9:28:79:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:11:43:E0:2C:81:24:C2:CD:01:B9:1A:51:BE:71:22:E3:DC:A3:83
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1f:38:e2:5f:de:48:7b:8b:f3:b2:99:b4:15:b3:ca:3e:c4:
a2:1d:b6:3b:d1:53:b8:f4:87:c2:5f:99:5a:b9:77:e3:a8:0f:
61:46:94:93:3d:51:f7:30:22:24:ff:1d:eb:c9:13:e7:6a:e0:
43:ab:d1:1a:88:0f:c2:0b:d2:83:24:ca:f0:b3:53:34:f9:1f:
93:cc:93:a3:47:b1:08:49:d5:a1:22:5f:86:04:86:1b:70:74:
e4:bc:dc:ce:c8:fd:ef:44:5f:43:40:35:51:4c:e5:a8:dc:55:
0f:8c:6a:29:bd:ad:b6:03:65:e6:23:22:fe:3b:a0:50:56:5f:
fa:37:f4:da:60:fd:8d:d4:d8:f8:de:fb:80:d7:14:df:57:b8:
03:e9:8d:dc:15:3b:f0:17:74:37:48:c1:c6:bf:4c:57:31:e6:
c5:26:58:f2:3e:b9:86:95:ff:83:dd:30:ee:47:7d:07:02:8b:
fb:f7:46:02:4b:42:eb:58:cb:f4:b7:5e:9b:2b:75:83:77:b2:
b1:02:27:e8:14:76:19:d3:1a:02:96:93:31:25:31:cb:03:70:
c1:7e:19:36:03:f8:29:38:3f:47:e4:fd:87:be:de:9c:35:2a:
c8:dc:32:a9:62:cd:84:21:e4:9e:8b:75:d1:53:de:40:f2:74:
3f:4c:75:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:44:34 2025 by rpki-client