Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier: k/q7S+Hxl4/FZkLk1LnpGD0wYZMZPPRpbiO6ul3Ipv8=
Subject key identifier: DF:3A:C6:5E:84:DB:CE:6C:6A:2C:06:1A:48:5C:7B:38:29:96:C8:9C
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial: 01974D7BFC3B9B69C99E7466AFE586340ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number: 09F7
Signing time: Sun 08 Jun 2025 03:01:00 +0000
Manifest this update: Sun 08 Jun 2025 03:01:00 +0000
Manifest next update: Mon 09 Jun 2025 03:01:00 +0000
Files and hashes: 1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=)
2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: NiIPfFcc6iLzxANX4bwejZC1zlpqqpHSGXXE5TZ2TcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:fc:3b:9b:69:c9:9e:74:66:af:e5:86:34:0a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Validity
Not Before: Jun 8 03:01:00 2025 GMT
Not After : Jun 9 03:01:00 2025 GMT
Subject: CN=df3ac65e84dbce6c6a2c061a485c7b382996c89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:d9:14:29:ae:40:59:e7:f9:03:c3:fa:ce:
81:e0:f5:56:26:25:5b:5b:6f:b8:5b:94:69:5b:ca:
be:5d:d9:9d:fe:2b:ee:55:33:2b:1d:60:79:6b:a6:
c4:f0:0a:3c:56:38:63:77:65:af:8f:e8:80:90:79:
32:2d:1f:a7:2b:72:53:a6:f1:f3:d5:53:23:70:96:
80:15:d1:0f:de:2d:c2:69:7c:34:9a:bb:b8:5c:39:
68:97:49:3b:ba:0d:53:cf:15:50:63:3a:54:05:02:
08:7a:61:24:21:bd:72:bc:16:10:b4:22:54:37:1b:
cb:52:4c:c7:98:71:9c:ce:cd:ca:72:dc:3f:58:83:
86:f4:94:ba:69:b0:9c:55:2b:1f:06:26:41:51:08:
96:82:d0:ea:18:90:11:67:fa:d6:c8:a4:39:f8:56:
fb:e6:41:50:89:b2:bb:fe:ab:fa:3e:80:59:7c:da:
d9:43:ab:e1:a7:a9:ad:b8:19:d8:bc:5b:e9:a8:22:
e1:0f:9b:96:7a:a1:db:d3:9e:48:33:cf:70:71:ca:
ac:f3:13:6b:4f:5f:58:2b:f6:59:d2:d3:ad:70:81:
4b:50:98:b8:88:17:89:f6:c3:61:ea:80:cb:77:6f:
e6:83:5c:18:fc:4a:2f:9c:9e:e2:42:4f:56:15:36:
78:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3A:C6:5E:84:DB:CE:6C:6A:2C:06:1A:48:5C:7B:38:29:96:C8:9C
X509v3 Authority Key Identifier:
keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:34:3d:9a:f8:58:46:0c:d8:a5:3d:1a:c5:fa:76:41:8d:48:
a7:d4:da:ed:7a:25:5d:39:2f:16:23:1a:d1:6c:f9:db:4f:62:
92:91:53:09:9c:51:58:df:14:f5:1a:3e:55:42:b4:7f:44:9a:
1b:15:30:72:d1:ff:dd:56:5a:b1:f3:ff:24:98:b1:7b:dc:cb:
33:e9:2e:82:63:bb:16:c9:e8:ee:e6:f5:25:f0:3f:3f:7f:32:
58:9d:7d:92:5d:0d:3c:24:66:8c:c4:2d:10:db:e7:51:e9:fd:
fa:75:78:09:cd:00:49:9e:98:2b:0a:c0:fe:2b:97:bb:c6:7a:
25:bd:13:8e:0e:91:3e:68:4b:0e:68:42:dd:c7:8d:26:98:65:
41:3e:16:fe:38:5d:57:3a:6d:54:79:ba:39:0a:2e:4e:20:77:
90:a9:a8:13:9f:e0:81:9d:4e:a3:65:ae:65:c5:75:68:31:b0:
ce:40:ea:fa:ef:87:03:6f:2e:dd:8d:81:e0:f2:67:bf:be:13:
e7:15:f8:ee:39:dd:1d:25:04:ee:66:2b:8f:0b:8d:f4:1d:6a:
bd:f1:41:3c:9b:05:ce:f7:7e:ad:2b:af:1c:a9:b6:c2:77:66:
0c:9b:b9:5e:70:c4:fe:11:e5:64:89:a8:95:e4:75:e0:7d:ac:
04:d7:a6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:44:37 2025 by rpki-client