Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
File: waGQUEttntnBgJaEBCWxHXsi3_Q.mft (raw, json)
Hash identifier: ZPtnMY9aV83w8jHHeUSV+jTB3YBaf8gDTklUNMXtdZE=
Subject key identifier: 13:89:48:80:76:CC:39:73:E9:F3:0F:68:7F:C1:57:DC:9D:F8:F7:82
Authority key identifier: C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
Certificate issuer: /CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Certificate serial: 01974C32130F741110940643772DDBD168F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 21:00:39 +0000
Manifest this update: Sat 07 Jun 2025 21:00:39 +0000
Manifest next update: Sun 08 Jun 2025 21:00:39 +0000
Files and hashes: 1: A9fopaXO-fVQpKdJ8LHIGXii_SU.roa (hash: 8zkX8M3Fk6VQlJpwJIcZtNmfIBhTghba03PireQiTxw=)
2: waGQUEttntnBgJaEBCWxHXsi3_Q.crl (hash: SjRTteKTrsmH8nx0PN6G2zOHLFrWeyf2+NoD/f/sBZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:13:0f:74:11:10:94:06:43:77:2d:db:d1:68:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a190504b6d9ed9c18096840425b11d7b22dff4
Validity
Not Before: Jun 7 21:00:39 2025 GMT
Not After : Jun 8 21:00:39 2025 GMT
Subject: CN=1389488076cc3973e9f30f687fc157dc9df8f782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:39:3f:ad:40:8c:bc:4c:0a:32:88:b8:d4:
a7:9e:e0:5c:7f:93:f6:ba:6b:5e:d9:1a:2b:4c:d9:
0b:4f:cf:59:b4:d1:8a:76:13:8e:c2:64:47:ba:b8:
47:4b:37:5a:ca:ea:b0:87:21:27:96:cd:7c:9d:78:
c2:8e:e3:38:c1:6c:fc:bb:71:e1:12:cf:2c:9a:ec:
d2:70:4c:e3:76:f5:b3:7c:99:21:8c:d2:3e:a0:f9:
16:bc:0b:35:2f:d9:b6:dd:df:d9:6b:a3:65:fa:7c:
d2:63:c8:e9:f5:e5:e8:25:c6:91:5e:f2:fd:21:74:
83:49:67:22:87:0d:c0:f6:23:45:db:58:a8:0c:f9:
f2:07:5d:15:79:a9:86:7f:7e:96:88:98:c3:b0:68:
71:cd:dc:69:01:67:4b:c4:73:77:0c:88:a9:03:26:
65:12:74:04:31:fe:c1:cd:1e:40:1a:96:bd:c0:8e:
3c:34:e6:9c:a5:85:9f:d4:e8:02:b3:9a:a5:b9:2a:
39:d5:df:19:55:1d:b4:ce:3a:88:b0:3c:0e:0a:ff:
21:ba:7f:07:86:67:ae:fa:6b:8b:7c:8a:65:b1:ae:
d5:49:26:77:9e:be:c3:ed:00:86:00:e3:19:e6:d6:
2b:90:35:e8:13:46:ed:a5:e8:fb:b8:9b:83:b5:89:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:89:48:80:76:CC:39:73:E9:F3:0F:68:7F:C1:57:DC:9D:F8:F7:82
X509v3 Authority Key Identifier:
keyid:C1:A1:90:50:4B:6D:9E:D9:C1:80:96:84:04:25:B1:1D:7B:22:DF:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waGQUEttntnBgJaEBCWxHXsi3_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/387f21-101b-487e-8a0f-0b838a599662/1/waGQUEttntnBgJaEBCWxHXsi3_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1d:be:7c:4c:c6:44:00:5b:b6:63:3d:fa:9d:cb:dc:f1:f9:
03:2b:3d:23:f9:07:4c:80:9f:76:c5:24:f6:d1:5e:dd:81:c4:
6c:10:e0:20:d7:dd:14:dc:20:35:ed:37:e3:1e:10:4e:90:ae:
87:e4:71:fb:55:d1:c4:2a:b9:92:80:7a:1f:30:e5:72:6e:4e:
a4:40:20:5d:82:81:66:97:be:26:77:09:fd:e2:76:50:4c:ea:
22:1b:27:ff:f7:e0:ff:b6:3b:79:f1:76:24:5e:17:a0:0f:cd:
50:f2:1c:1b:e9:6e:d2:c7:f1:5d:99:23:5e:ca:28:5a:68:95:
b1:63:76:3c:c1:18:ed:0b:2d:fa:e6:5d:29:f2:7f:f3:7d:80:
6e:73:bc:8b:eb:fc:e3:1d:5a:3d:aa:c9:ee:59:94:3f:47:ac:
b5:d4:31:35:a8:0c:e6:12:a8:c4:fb:96:54:82:05:73:80:1e:
01:79:cc:65:48:1a:59:a6:52:b4:06:6a:56:2e:de:76:71:ff:
22:84:9d:36:49:e2:56:4e:72:65:d8:fb:7e:dd:7e:fc:57:33:
23:a2:0c:f7:db:30:00:ee:fd:b6:69:79:9d:3b:fc:1a:72:fc:
a1:c6:e1:f6:05:32:10:50:a9:d2:5f:46:17:c1:0c:1c:b9:95:
a3:e6:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:57 2025 by rpki-client