Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File: wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier: DKRwY7F7SDPMI9zQNxWfnSSaW9yeK4KIrsn0n7y2bn0=
Subject key identifier: F6:67:45:21:0C:6B:10:71:A5:7E:04:81:44:2C:63:4D:9B:AC:73:1E
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer: /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial: 01974B56D828D7248463D1C0388FE509C447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number: 04D1
Signing time: Sat 07 Jun 2025 17:01:11 +0000
Manifest this update: Sat 07 Jun 2025 17:01:11 +0000
Manifest next update: Sun 08 Jun 2025 17:01:11 +0000
Files and hashes: 1: irXVQKZrZFERT0qlEvOEYo8eStU.roa (hash: SM6wGE9/EVXEBgUTm1zsTO58ye4c68Xl+iOGBhNr7JE=)
2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: lRSvqyRaNng83pSS1N3jVmrMBAE0PiIUDtOiYVwUF14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:d8:28:d7:24:84:63:d1:c0:38:8f:e5:09:c4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Validity
Not Before: Jun 7 17:01:11 2025 GMT
Not After : Jun 8 17:01:11 2025 GMT
Subject: CN=f66745210c6b1071a57e0481442c634d9bac731e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:12:8f:0a:31:d9:ea:fd:f6:68:2d:d8:51:08:
03:66:20:57:83:2b:7d:fb:a2:92:1b:b1:60:5c:52:
1f:03:2b:5a:1a:a4:c0:a7:5d:45:6a:c9:76:65:ea:
ae:ef:44:75:5c:53:da:eb:d6:ad:3b:7e:b4:9c:a7:
bc:54:d4:3c:9b:09:52:6e:20:30:a7:b7:bd:eb:6f:
71:9f:a1:f8:8f:fe:9c:b6:d4:28:74:19:99:8a:85:
a7:d4:fe:61:9c:0b:91:aa:99:34:99:35:7c:83:58:
1a:3d:b9:75:b9:d0:64:21:73:04:1e:30:21:10:f1:
e1:fc:26:b5:08:cd:15:45:50:56:72:7f:ad:09:7f:
b1:68:8b:e2:32:98:20:21:eb:73:e6:3d:de:bb:50:
e0:34:3f:14:3e:65:6b:3f:3b:cf:8d:e7:3a:2e:6d:
05:2c:22:b4:53:f1:c1:33:fc:f3:94:a6:ca:3e:7e:
51:9d:4c:1b:7e:dd:90:64:74:b2:2f:9c:5a:4b:bb:
ee:1f:14:60:12:99:14:db:1e:f2:79:6a:d6:b7:2a:
46:40:a0:3a:d2:79:a3:80:52:5a:3f:87:b9:44:3a:
9d:51:69:ca:f9:dd:c8:16:86:ab:c8:78:87:d2:07:
e7:ed:64:51:12:28:f1:73:56:55:fa:f6:ff:d9:67:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:45:21:0C:6B:10:71:A5:7E:04:81:44:2C:63:4D:9B:AC:73:1E
X509v3 Authority Key Identifier:
keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:31:18:11:3e:4d:25:45:7e:21:1d:36:09:a3:90:a1:33:f8:
d0:ff:d3:52:d5:46:b0:9f:59:43:d9:f3:21:2c:f0:91:51:3b:
0f:0d:37:8e:a6:8f:18:df:c9:3a:c0:1d:d4:f8:59:70:b1:1f:
e2:79:d4:a2:ec:11:18:78:67:f9:fc:07:fd:eb:d8:59:76:dd:
1a:4d:99:4b:22:1a:0f:3d:c3:5b:23:14:9a:4e:cc:45:74:f3:
d6:1d:24:d4:39:af:00:9b:ef:05:ac:04:d3:26:37:14:86:92:
60:e7:dd:4a:04:79:65:0b:d8:43:8e:23:5a:76:1d:16:d3:a8:
e6:d2:9f:d2:f0:bf:e3:b0:13:20:7f:51:3a:0b:fc:0d:19:98:
05:67:87:db:94:0c:cf:5b:3a:11:e0:18:44:54:04:f5:5f:bb:
dc:26:39:8f:74:ae:f3:ec:15:de:2e:1a:d9:9f:e6:0b:0d:f6:
5b:8c:62:e7:e8:4e:25:e3:8e:ec:59:d8:68:46:83:46:d2:17:
fb:61:3a:0c:49:9f:dc:83:7d:97:8a:7c:2b:84:4d:25:b6:71:
6e:47:28:d8:7c:f7:19:31:9b:cb:66:60:0e:25:b6:06:64:f8:
49:f9:74:77:84:12:04:fb:07:cd:90:c6:df:74:27:31:f9:46:
2a:d3:3f:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLVtgo1ySEY9HAOI/lCcRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNzA4MWE2ZjcyMWEzN2E5ZTFkNzk5MzE1YmIzZWEyNzU4
Yjg4NzcwHhcNMjUwNjA3MTcwMTExWhcNMjUwNjA4MTcwMTExWjAzMTEwLwYDVQQD
EyhmNjY3NDUyMTBjNmIxMDcxYTU3ZTA0ODE0NDJjNjM0ZDliYWM3MzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBKPCjHZ6v32aC3YUQgDZiBXgyt9
+6KSG7FgXFIfAytaGqTAp11Fasl2Zequ70R1XFPa69atO360nKe8VNQ8mwlSbiAw
p7e9629xn6H4j/6cttQodBmZioWn1P5hnAuRqpk0mTV8g1gaPbl1udBkIXMEHjAh
EPHh/Ca1CM0VRVBWcn+tCX+xaIviMpggIetz5j3eu1DgND8UPmVrPzvPjec6Lm0F
LCK0U/HBM/zzlKbKPn5RnUwbft2QZHSyL5xaS7vuHxRgEpkU2x7yeWrWtypGQKA6
0nmjgFJaP4e5RDqdUWnK+d3IFoaryHiH0gfn7WRREijxc1ZV+vb/2WeETwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZnRSEMaxBxpX4EgUQsY02brHMeMB8GA1UdIwQY
MBaAFMBwgab3IaN6nh15kxW7PqJ1i4h3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85YWZkMjMtZDI4MC00OTVjLWIyNTIt
ZjYwMDMxN2IxOTc4LzEvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85YWZkMjMtZDI4MC00OTVjLWIyNTItZjYwMDMxN2IxOTc4
LzEvd0hDQnB2Y2hvM3FlSFhtVEZicy1vbldMaUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzEYET5N
JUV+IR02CaOQoTP40P/TUtVGsJ9ZQ9nzISzwkVE7Dw03jqaPGN/JOsAd1PhZcLEf
4nnUouwRGHhn+fwH/evYWXbdGk2ZSyIaDz3DWyMUmk7MRXTz1h0k1DmvAJvvBawE
0yY3FIaSYOfdSgR5ZQvYQ44jWnYdFtOo5tKf0vC/47ATIH9ROgv8DRmYBWeH25QM
z1s6EeAYRFQE9V+73CY5j3Su8+wV3i4a2Z/mCw32W4xi5+hOJeOO7FnYaEaDRtIX
+2E6DEmf3IN9l4p8K4RNJbZxbkco2Hz3GTGby2ZgDiW2BmT4Sfl0d4QSBPsHzZDG
33QnMflGKtM/jA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:30:29 2025 by rpki-client