Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
File: WgrUZVrtB8R0FuepRWBHlOuol6w.mft (raw, json)
Hash identifier: BDMZ8NcGlAkxW20Sc4Zk7GkuQiilNkRoRo+iWjIvfC8=
Subject key identifier: 9E:05:2A:EF:23:22:E9:18:36:42:71:8E:C6:0F:6C:45:45:DF:8A:B0
Authority key identifier: 5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
Certificate issuer: /CN=5a0ad4655aed07c47416e7a945604794eba897ac
Certificate serial: 01976FD0C7FFA95D4CFDC7A45FF24BE67896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
Manifest number: 10D5
Signing time: Sat 14 Jun 2025 19:00:42 +0000
Manifest this update: Sat 14 Jun 2025 19:00:42 +0000
Manifest next update: Sun 15 Jun 2025 19:00:42 +0000
Files and hashes: 1: NvAPv-l4cBrLTji2iXv6GfI0gZg.roa (hash: BBOKh5jKHRu7y0Xpwzm9dX9BwYJwDLK16Nc2ib6JODU=)
2: WgrUZVrtB8R0FuepRWBHlOuol6w.crl (hash: kU1Vk1cbdLWtiFwijmBwDK0dIoynNCOakOu/3sGenRM=)
3: aKrvV8xBl8sCHisqRYKu_FgNh7A.roa (hash: VWMQXxpmmku9lvmyl+DypVcQSIrG+GnuaLnSwfYRfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:c7:ff:a9:5d:4c:fd:c7:a4:5f:f2:4b:e6:78:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a0ad4655aed07c47416e7a945604794eba897ac
Validity
Not Before: Jun 14 19:00:42 2025 GMT
Not After : Jun 15 19:00:42 2025 GMT
Subject: CN=9e052aef2322e9183642718ec60f6c4545df8ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:27:63:bb:be:dc:cf:1c:63:41:1a:8a:f0:
6e:d2:1d:99:b5:93:40:4e:90:a7:78:19:21:85:8c:
10:b7:1b:35:2c:7d:fa:90:c4:18:7b:59:4c:36:02:
1b:24:8e:60:70:89:06:ef:8b:46:26:d4:e8:de:20:
f4:32:a9:c6:dd:5f:f9:51:a8:9a:82:66:e4:4d:fa:
c8:2c:4b:3d:94:4a:fa:21:6e:62:b3:1c:9b:96:6a:
b5:4c:b8:bd:b8:9a:fa:c7:e3:dd:da:e2:34:f5:38:
2a:92:c6:55:f0:22:3a:1f:83:58:92:4e:8a:1b:fc:
66:6d:3d:d6:59:35:2f:c8:c6:57:4f:3e:06:66:02:
39:b9:65:5c:d2:87:ad:cb:d1:99:87:1a:df:d3:3a:
38:a1:f8:04:50:b6:76:5b:07:3a:84:39:7c:19:c2:
d8:83:73:0a:76:94:d4:63:9a:9e:c1:df:bf:bd:13:
61:a3:ee:e2:1a:50:fe:0a:65:8d:47:79:85:92:79:
9b:3f:03:4e:73:f2:d5:02:bb:a4:58:50:a2:32:c1:
4c:2f:cc:39:f4:99:af:0b:38:7b:31:5e:49:2d:0f:
b9:d6:6f:21:82:5e:48:37:87:5d:3e:21:79:d8:fd:
b2:90:67:7a:ab:62:8f:46:f0:d6:93:d4:98:b7:46:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:05:2A:EF:23:22:E9:18:36:42:71:8E:C6:0F:6C:45:45:DF:8A:B0
X509v3 Authority Key Identifier:
keyid:5A:0A:D4:65:5A:ED:07:C4:74:16:E7:A9:45:60:47:94:EB:A8:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgrUZVrtB8R0FuepRWBHlOuol6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/41b72a-0fc0-4a0f-acbf-efc31e08e7cd/1/WgrUZVrtB8R0FuepRWBHlOuol6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:c8:44:e2:f6:5c:01:29:e9:e6:5d:11:e5:cf:d3:79:25:
25:1d:d2:08:f9:30:b8:d5:e6:70:e6:b2:82:53:b3:5e:6c:67:
99:06:cc:9c:8b:4c:ce:6a:73:f1:c5:e4:ec:41:1f:cf:14:7f:
5f:b6:88:33:49:30:11:91:11:5a:3f:3d:23:23:4a:68:e3:8e:
88:d7:2f:8d:11:c7:d8:bf:82:cd:f9:ef:2f:8c:81:45:fd:60:
01:78:19:44:ee:7c:88:fa:7a:f1:79:43:a1:ba:b7:a1:5f:c1:
89:0d:ce:d6:67:76:4a:ac:e5:a7:fb:7d:37:a7:fe:ee:88:51:
0b:90:39:54:30:96:ac:32:dc:61:10:e8:e6:f0:a9:9c:60:20:
bc:91:62:68:6d:07:d0:a5:e1:96:9c:7e:d4:44:54:eb:15:6b:
51:47:fb:4e:55:c9:fe:d3:a1:50:a1:2b:1c:69:8e:53:d0:aa:
50:3f:81:65:69:27:a1:37:e8:97:4d:13:a0:4d:47:a7:aa:33:
63:74:58:36:57:d0:f2:e4:74:f1:ec:a3:b9:b0:cb:dd:6f:4e:
b5:ee:6b:a1:82:ec:c3:4c:72:1e:30:43:53:ae:37:7d:39:65:
cb:49:43:76:5c:9b:06:4a:69:53:7d:0c:a9:be:e0:ff:2f:f0:
40:14:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:59:13 2025 by rpki-client