Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File: wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier: nDiGcnxowBOe35uDrL3hj0lfcheQC1tQ4BacKRSlCHw=
Subject key identifier: 83:EB:75:8F:BA:D3:EF:36:83:BD:E6:F1:6C:1A:4D:B2:15:65:D6:84
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial: 019760CB7CDE600538587C6AA06C0EFA8E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number: 0BEF
Signing time: Wed 11 Jun 2025 21:00:37 +0000
Manifest this update: Wed 11 Jun 2025 21:00:37 +0000
Manifest next update: Thu 12 Jun 2025 21:00:37 +0000
Files and hashes: 1: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (hash: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=)
2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: D/yAT8Vbue9to6XL8pl3da6m5z6cwSuxtK43kSqBJf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:cb:7c:de:60:05:38:58:7c:6a:a0:6c:0e:fa:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Validity
Not Before: Jun 11 21:00:37 2025 GMT
Not After : Jun 12 21:00:37 2025 GMT
Subject: CN=83eb758fbad3ef3683bde6f16c1a4db21565d684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:f8:5c:c2:a3:23:a5:99:05:2d:f5:cd:30:
38:a3:c0:4f:d3:29:4e:d4:4d:06:26:4e:84:4c:9e:
99:6f:c7:a3:6f:30:df:08:95:2a:e0:b4:d8:ff:d9:
e9:a7:0c:44:e6:19:41:f1:71:63:36:f1:7b:f0:f7:
86:27:70:83:8f:d5:e2:de:3a:4c:1d:e6:d3:8c:b5:
49:13:1f:23:bf:94:bb:ed:92:33:7e:f5:d7:8e:e7:
56:41:82:80:73:db:5b:d1:52:f3:b2:9d:49:d2:90:
da:99:e7:f3:4b:f8:87:34:1a:41:40:d6:ca:15:9b:
20:a3:ce:43:f0:13:59:47:08:6d:46:f4:e5:35:ee:
af:af:62:5d:cc:3e:e3:d3:0b:b1:d2:d5:0f:c1:af:
20:30:16:05:39:e2:5a:5e:fd:8f:5e:78:5b:83:af:
95:ca:c6:29:5d:d1:7b:9b:ef:e2:e5:3d:77:bc:9f:
3b:b4:34:09:49:34:94:f5:45:06:5f:0b:a0:76:4a:
a5:dc:79:48:56:40:0c:0c:a7:1e:78:e9:f2:67:f6:
79:52:2d:1e:3c:52:5f:3a:39:c8:8c:52:65:52:e6:
b3:38:0a:67:37:02:ca:d8:1b:b8:85:a6:ee:ae:f1:
ed:07:9d:41:e8:d2:9c:51:d5:f2:30:9f:85:b4:3d:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EB:75:8F:BA:D3:EF:36:83:BD:E6:F1:6C:1A:4D:B2:15:65:D6:84
X509v3 Authority Key Identifier:
keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5e:a2:ed:02:93:4e:3a:1b:bd:3e:7d:76:5f:a3:62:3a:b8:
22:73:ed:7b:5d:1c:98:79:46:bf:d8:f5:a9:b5:27:22:0a:07:
c9:a5:bb:80:f3:12:0b:81:97:46:bf:de:d8:44:55:6d:b1:3e:
8b:87:0b:ca:b6:5f:11:a6:ee:97:82:b4:e6:c7:ec:36:75:76:
f5:5b:74:09:5d:22:20:24:02:dd:a2:bf:45:d8:62:49:85:e0:
5b:2f:bb:33:27:b5:6e:f5:02:d7:35:4b:b2:59:a6:d1:97:c8:
5e:24:85:50:76:8a:ed:50:5f:3e:4b:ae:c2:24:8a:68:41:6a:
99:3e:94:40:c1:45:81:8b:46:c0:a0:a7:7b:10:97:57:1c:f8:
85:01:9c:2a:03:0e:49:ff:fa:76:8b:c3:7a:a5:c9:15:03:6d:
80:eb:33:87:d0:5f:da:d1:85:a6:b1:f2:c1:41:c5:0f:19:19:
f9:68:71:41:60:7b:5f:b3:2e:82:6b:54:2a:3a:49:da:19:09:
07:ec:23:1e:39:9f:50:7e:b9:33:c1:b1:ba:8c:a9:33:52:1d:
e3:4b:8a:79:d8:9b:5c:44:9e:48:a8:61:15:69:45:90:2d:f6:
49:65:20:ab:cb:76:63:0b:87:3d:94:c7:9d:c2:d8:07:a7:7c:
86:2f:51:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:30:29 2025 by rpki-client