Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier: I7Or8Wd0SYIPpbx+/WccnpWL2IAVyxx8ySS5asRejKM=
Subject key identifier: 00:2E:12:AB:C9:5D:B3:DD:B0:80:0F:82:08:29:36:94:B0:14:C1:FA
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial: 0197477969328246322C0CE0BABEEC576BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number: 0399
Signing time: Fri 06 Jun 2025 23:00:28 +0000
Manifest this update: Fri 06 Jun 2025 23:00:28 +0000
Manifest next update: Sat 07 Jun 2025 23:00:28 +0000
Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: aqOYvcmP2JiVfQdU8mxulq+m1pj2xiItHCTihpjgxKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:69:32:82:46:32:2c:0c:e0:ba:be:ec:57:6b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Validity
Not Before: Jun 6 23:00:28 2025 GMT
Not After : Jun 7 23:00:28 2025 GMT
Subject: CN=002e12abc95db3ddb0800f8208293694b014c1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:78:3c:f2:b0:ad:53:31:f7:35:3a:25:67:
ca:7b:b8:32:c5:2c:0a:b5:1f:d6:ba:bf:5f:1d:dc:
1d:e5:c6:47:ce:26:e8:09:08:8b:8e:f2:3a:36:67:
c8:a9:31:cb:4d:be:81:c1:97:dc:fe:d4:50:98:1e:
b9:93:2e:00:70:b4:f9:6e:3c:55:16:70:88:b6:12:
bd:f1:2b:9e:2f:1a:42:29:e6:01:85:57:5c:1b:15:
95:50:82:cb:a9:20:b5:bc:b8:50:c7:f5:d5:bb:e2:
32:73:63:02:d4:59:69:ac:47:2a:fb:b3:af:db:a2:
7b:ea:2a:17:35:a9:21:49:ec:3d:de:19:c7:d4:95:
c8:d1:de:6b:3e:21:e2:36:6b:de:b2:64:f7:8b:ae:
54:0d:bd:e4:0f:80:f6:bc:d4:cc:38:d5:36:1e:82:
bc:3c:44:6f:11:4b:0a:61:f7:06:7d:14:b9:24:03:
44:10:20:f5:c5:d7:b4:53:91:10:bc:91:3d:da:39:
3f:65:07:05:8d:6f:dd:b2:dd:da:06:65:99:62:7e:
bc:8b:3f:53:9e:88:56:e9:e1:44:36:1e:30:96:b4:
26:b9:35:39:fa:5a:20:09:57:d8:4c:07:cd:cc:3d:
04:e7:88:0f:7f:f5:64:c4:1b:30:d0:04:dc:ec:aa:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:12:AB:C9:5D:B3:DD:B0:80:0F:82:08:29:36:94:B0:14:C1:FA
X509v3 Authority Key Identifier:
keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:be:8f:b6:92:b4:1e:e9:aa:06:cb:81:2f:bb:df:35:c6:8b:
d1:88:1c:96:15:9f:4c:03:a9:8b:84:73:4e:a6:0f:00:9c:40:
a1:00:a2:21:1e:8f:cc:64:b9:eb:a9:5b:ea:3f:19:86:c2:0b:
1b:bb:fb:45:53:87:19:16:57:18:e1:8a:4a:c5:2b:61:e4:1c:
6a:d0:72:de:09:d2:d2:a4:64:3d:87:c8:52:6e:ba:a1:25:02:
9e:5a:e4:81:d5:24:59:d3:63:28:66:e0:f1:9b:48:54:9c:4d:
cb:dc:b4:6a:7f:f9:a6:b3:51:5c:4c:31:a5:ec:e9:e2:60:96:
ac:0a:78:fb:c0:bb:9a:a6:c7:a8:f6:bc:d2:ee:c9:2a:ef:3b:
55:36:f5:7e:b7:5c:7a:72:68:20:50:f1:43:72:6f:55:11:ba:
12:e4:c7:2a:2c:de:8d:9f:a8:01:53:25:56:01:ec:61:86:f4:
bf:46:2a:0e:78:be:5b:84:b6:7c:18:ac:38:7c:16:9c:d7:75:
8c:c9:c1:0b:cd:2e:63:13:cf:6d:b1:b1:65:69:28:f6:6e:03:
1b:d1:96:01:9e:27:4a:5e:2a:a3:7c:da:bc:c8:37:a6:b4:a7:
1b:0c:fe:60:b3:cf:b9:fd:1f:80:2c:0d:cb:d2:4c:1b:7c:a0:
7e:ba:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:26 2025 by rpki-client