Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
File: wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json)
Hash identifier: AzWpFZS/TBEKZT7erSS7fPshcU8DTAzfRIH3DEbDFLM=
Subject key identifier: 65:EF:79:7E:85:11:BF:7D:7B:E5:60:BD:8B:93:24:40:1E:FB:7A:C8
Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Certificate serial: 01974742BFE3D21BA9732370E249261C736F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
Manifest number: 1069
Signing time: Fri 06 Jun 2025 22:00:46 +0000
Manifest this update: Fri 06 Jun 2025 22:00:46 +0000
Manifest next update: Sat 07 Jun 2025 22:00:46 +0000
Files and hashes: 1: Ex-cB_4h1wPjXU2C6qgnvAowG6s.roa (hash: Pfofg8M1L5a51wZ24aPVDYrdbmmkhLSc6VaiAue9C68=)
2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: 9hzUnPV8tNUaqbQMTSJrb6IxEyI3zHGruIsxYYTuluo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:bf:e3:d2:1b:a9:73:23:70:e2:49:26:1c:73:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd
Validity
Not Before: Jun 6 22:00:46 2025 GMT
Not After : Jun 7 22:00:46 2025 GMT
Subject: CN=65ef797e8511bf7d7be560bd8b9324401efb7ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:1e:c1:b2:12:f6:05:45:6f:72:d9:e6:3b:
ca:23:c5:06:6e:89:4e:ca:4e:81:7e:b2:06:09:64:
ed:86:06:0d:39:70:fb:9d:70:d1:e6:30:47:0c:ae:
83:37:1a:17:f1:31:04:b9:9d:6b:51:53:86:d8:e1:
7c:81:fc:66:b7:c5:5f:62:64:00:06:70:64:5c:ba:
ac:8f:36:66:e8:43:9e:a9:ef:27:95:d7:b3:42:0d:
c6:26:9a:c9:c4:21:38:ff:3f:ef:fa:cf:72:f3:cf:
d0:86:4f:59:34:53:7e:6a:2d:c7:36:6a:85:62:f5:
d4:aa:f9:e8:c5:fc:a0:cc:c4:2a:83:92:c4:d5:67:
ec:ef:2a:ed:01:29:27:3c:65:3e:d8:ee:cf:ca:38:
1b:3d:76:2a:1c:fe:e2:f0:ca:c3:47:c4:01:80:66:
89:30:55:fc:11:85:0e:8d:6e:9c:5d:20:7e:7b:b6:
cc:a3:53:18:71:2e:eb:58:84:08:87:4e:7b:c9:52:
88:47:58:fb:dc:9b:0c:06:55:3f:0c:97:f7:4c:09:
96:cd:b3:85:e9:5a:b9:a6:c0:8b:ad:b5:18:6b:cc:
bc:83:9b:1d:9f:74:ce:38:1f:a3:a6:2d:10:df:37:
20:e1:e4:cd:12:39:24:f4:d3:ae:37:ba:55:96:17:
f0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EF:79:7E:85:11:BF:7D:7B:E5:60:BD:8B:93:24:40:1E:FB:7A:C8
X509v3 Authority Key Identifier:
keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:76:66:39:32:a0:d0:85:92:0a:d1:65:3c:38:f9:4a:d2:52:
fe:f9:ca:da:dc:f1:b7:00:35:97:1f:6e:5d:3f:48:d8:76:f4:
cf:dd:c8:4b:1e:72:d2:2b:e1:cd:96:34:68:dc:d5:50:a5:f2:
5f:64:7c:85:7e:ae:db:db:09:53:5b:ce:7c:5e:65:56:68:92:
34:4b:23:9d:ae:e1:e6:38:9c:6e:03:cf:fa:1b:db:85:a0:98:
d0:2f:7b:35:ff:97:0a:37:8e:87:0f:67:70:80:8e:61:9a:9e:
c9:20:82:7f:4d:43:26:c1:16:93:47:1a:73:a5:f6:b6:a8:c7:
53:a3:bb:a8:71:e7:aa:ee:6a:00:33:a0:4c:1e:41:ad:0a:f9:
69:e6:89:24:63:ce:6f:de:89:43:4d:b3:2f:36:23:7b:05:aa:
29:9f:91:53:13:a1:7b:70:42:bc:34:76:65:ab:de:5a:50:70:
8f:21:31:18:ed:8e:95:eb:11:7f:3b:84:1b:23:26:b1:a6:7c:
66:1c:5e:22:1d:aa:0d:1b:91:b7:01:17:f8:f6:96:c8:83:49:
6a:00:80:04:60:bc:98:b7:05:3a:2f:41:a1:b6:fc:31:ad:9d:
87:1c:d0:b8:34:59:f7:dc:13:f8:2b:44:a8:90:cd:8e:cf:79:
ee:10:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:37 2025 by rpki-client