Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier: dJJuT5sG4tTROATcLY+MdjGtgRRPe26aNwc970Kp7aU=
Subject key identifier: 34:46:D5:09:6A:FA:96:1B:37:BE:EB:F7:49:7C:B5:F0:ED:4A:A2:40
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial: 019753B4D2D1C69D81689AB6DC6AE0314F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number: 0368
Signing time: Mon 09 Jun 2025 08:00:48 +0000
Manifest this update: Mon 09 Jun 2025 08:00:48 +0000
Manifest next update: Tue 10 Jun 2025 08:00:48 +0000
Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=)
2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: U6C1njIeaLqu1uDcNDiGA6/cXxnQwrr5yyk90RgiIr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:d2:d1:c6:9d:81:68:9a:b6:dc:6a:e0:31:4f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Validity
Not Before: Jun 9 08:00:48 2025 GMT
Not After : Jun 10 08:00:48 2025 GMT
Subject: CN=3446d5096afa961b37beebf7497cb5f0ed4aa240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:25:0c:b6:63:19:71:b4:e3:e5:24:42:ac:
7d:a8:64:83:e9:cd:81:81:a9:05:3b:26:26:2f:58:
27:05:be:7b:ff:45:29:f3:78:64:8a:1d:2d:5c:2b:
52:a7:cb:51:be:78:fd:d1:94:83:0b:52:f2:c9:01:
78:21:bf:c8:9b:ad:d9:45:71:16:cf:cf:88:24:85:
fd:60:75:c3:40:85:29:52:9a:41:7a:ea:41:cb:bf:
20:46:e8:79:77:10:d0:e5:19:7e:53:b8:cd:13:84:
51:cf:c8:e0:63:f5:f5:0b:e7:c9:75:bd:94:f2:e7:
92:62:29:62:cb:f0:c1:f9:fa:25:b0:20:83:64:2c:
cd:02:7c:ad:d7:52:13:fa:80:68:9e:8a:47:fb:95:
c7:f8:df:8b:8a:a8:13:00:d6:fd:29:a3:23:33:b7:
f2:6c:04:f9:00:eb:e5:a9:f9:7d:f1:0b:71:e9:6e:
89:25:f5:d0:23:f2:7d:b9:03:a9:60:78:17:c7:22:
a3:e5:44:c0:96:9c:6b:5a:95:e9:d2:10:38:b3:53:
a4:ab:63:0b:f2:8e:59:d4:d0:78:dc:a0:06:c5:6d:
f4:e0:12:36:00:77:7b:77:ed:af:64:86:9d:25:58:
c7:9e:c7:50:6f:49:58:32:fb:71:07:fc:f9:13:8c:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:46:D5:09:6A:FA:96:1B:37:BE:EB:F7:49:7C:B5:F0:ED:4A:A2:40
X509v3 Authority Key Identifier:
keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a3:55:fa:61:f6:1b:3c:f2:59:92:44:05:16:13:63:c0:c0:
dc:6f:75:22:64:8d:6a:8a:5e:53:88:7c:33:43:0f:f7:66:b5:
3f:7e:78:41:44:f1:05:a6:69:fd:f1:bf:3f:a7:1c:4e:dd:c2:
c8:0d:10:69:f1:b6:ba:e3:b0:88:d7:0c:fb:f7:af:63:ae:ce:
99:21:fc:ac:c8:f4:1c:1e:bd:7a:b2:11:76:d3:61:f0:c1:95:
b1:1b:fb:32:a6:dc:d2:cc:f2:b3:ec:4a:74:c4:73:f5:ac:c2:
81:70:19:e6:96:06:48:88:d9:4a:7c:80:2e:0f:6a:e5:03:4e:
44:8f:3b:b1:c0:e4:a5:7c:36:c0:2d:41:a8:5a:2e:ea:f0:2d:
7c:be:e7:ba:d2:e3:6d:0c:86:a4:76:be:3e:16:17:a6:00:d8:
17:3d:b2:49:cb:b1:93:0f:2c:3f:53:87:1a:51:d9:9b:a4:70:
7a:cd:df:71:91:49:43:7d:2a:8c:ce:8b:53:3a:dd:78:a2:29:
b9:6d:6f:ae:cf:17:cf:46:8f:d6:0a:e9:c4:24:33:c0:48:fd:
ea:44:f5:39:f8:1b:c9:85:d2:51:f6:be:ce:92:f1:3b:74:f5:
ad:a3:4e:2e:88:cb:03:6f:ce:b1:03:7b:6c:0b:26:9a:c6:c0:
fb:c7:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:08:44 2025 by rpki-client