Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json)
Hash identifier: o//XLPo6pPber/YQgsI+ujJfsiB80lXtqilqfKnt6Yk=
Subject key identifier: 42:D2:AC:38:71:AE:E6:92:55:4D:96:93:3F:44:26:FF:89:3D:82:FA
Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56
Certificate serial: 019746D4BCF4B6B7E749CB7D42BDE5865C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
Manifest number: 0BC0
Signing time: Fri 06 Jun 2025 20:00:36 +0000
Manifest this update: Fri 06 Jun 2025 20:00:36 +0000
Manifest next update: Sat 07 Jun 2025 20:00:36 +0000
Files and hashes: 1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=)
2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=)
3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: nL7vskZG1HqkzzxjsbLzWaL4OfTyZq0WSYfe6qlIjFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:bc:f4:b6:b7:e7:49:cb:7d:42:bd:e5:86:5c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56
Validity
Not Before: Jun 6 20:00:36 2025 GMT
Not After : Jun 7 20:00:36 2025 GMT
Subject: CN=42d2ac3871aee692554d96933f4426ff893d82fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:02:ff:de:fe:3d:b6:84:2c:7b:97:5d:00:
9c:6e:b0:da:ce:59:d6:34:ae:19:50:2c:28:ee:1d:
5d:2a:5d:45:56:b0:17:19:8a:64:d0:93:c7:7b:d3:
78:f9:10:9a:ce:22:cd:c0:ae:7f:20:a0:37:38:c0:
bc:9e:92:99:a4:84:c4:90:4e:8b:bf:66:de:e6:94:
3c:03:a7:b5:db:a3:65:58:ec:b7:5d:ad:df:f6:9e:
b7:60:21:df:d6:1e:72:1b:e0:c7:2d:4e:c6:6c:24:
f0:1d:a9:19:6d:e0:15:27:88:a4:54:e3:7f:4c:6a:
57:f3:d8:fc:42:09:d7:34:2f:93:70:d4:d3:6e:eb:
1d:d7:fe:19:7c:56:17:7e:41:02:ba:a2:d2:1a:fb:
8e:9e:ad:64:8b:51:3b:c5:0e:db:69:ec:40:28:82:
8d:36:81:6a:f4:fd:85:7d:f7:22:56:5d:1f:e0:c2:
80:fa:3a:a9:12:75:9b:aa:55:4b:a0:13:2f:4d:bb:
8c:8c:59:d0:91:ab:7b:de:7f:a1:67:a4:20:28:d0:
e2:bf:26:64:03:71:32:76:a9:eb:08:0f:4a:39:bd:
ed:0e:4e:66:09:9c:45:5f:bd:2e:cb:b0:0e:f3:43:
e8:39:8a:4a:2c:54:7b:73:c7:f1:a5:43:d9:6a:6e:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D2:AC:38:71:AE:E6:92:55:4D:96:93:3F:44:26:FF:89:3D:82:FA
X509v3 Authority Key Identifier:
keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:47:1a:b6:0e:a5:ed:96:6e:9d:b4:e6:72:ea:59:de:c7:73:
b9:a5:69:ba:0d:d2:65:08:85:c9:85:70:d1:ab:50:af:cc:df:
da:82:80:be:cc:b3:ac:9c:6c:34:16:e4:cf:75:52:27:69:6a:
63:86:6f:d2:79:9e:12:67:3c:21:f1:dd:d3:35:93:3e:43:9c:
b0:c7:43:57:9d:36:de:30:31:19:86:8a:e2:e4:1f:a1:35:0e:
e4:46:67:82:ce:7d:67:87:49:6e:6f:63:e8:6d:d4:f9:13:8f:
df:06:75:40:c9:6d:d0:63:a7:1c:6c:84:b8:51:e7:88:39:1d:
1c:0f:0b:84:34:9e:67:07:0e:0f:56:7c:a2:28:92:a3:3e:ab:
7e:27:6c:8d:82:9b:9f:66:b3:75:3f:0b:df:b4:95:c7:0e:c0:
b6:42:17:59:46:2a:93:14:27:63:70:7f:8c:e8:62:17:54:f7:
9c:90:ad:09:59:5d:ac:55:81:f3:bc:3f:58:6c:68:27:97:9d:
7a:e2:08:5a:60:f9:98:0e:b4:c9:93:ab:6f:9e:47:30:66:b8:
7c:86:49:f2:d7:2a:92:45:a7:0d:62:2f:dc:b8:e4:e6:ed:da:
bf:5a:fd:28:d2:96:2e:f8:45:32:07:7a:17:43:c6:7b:bb:e4:
03:44:51:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:36 2025 by rpki-client