
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File: WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier: XDnd6QAvWCKzO6Vdx0O7/Reg5ytGc3sgtVGAw1yQqUE=
Subject key identifier: 41:E3:62:E1:9A:B8:82:7F:E4:34:AC:F7:FA:45:4B:6F:24:93:09:E1
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer: /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial: 01976F2C39A52641640DA277DF1CF2B93B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number: 130A
Signing time: Sat 14 Jun 2025 16:00:58 +0000
Manifest this update: Sat 14 Jun 2025 16:00:58 +0000
Manifest next update: Sun 15 Jun 2025 16:00:58 +0000
Files and hashes: 1: 0G2sdhjp5lZnzYHlHNnybNAXWaA.roa (hash: uK859gUUbnU60gGhJvTBc709jYBTwYoz8yDVwe5ASzQ=)
2: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: lAL/K91mA1Xvqwv12Pm1ILJDFLMoB32U8OALy/I90y4=)
3: YgQwuXy4fXHjt8yt23lzdNRUNeE.roa (hash: JYij/MqawhcXCZJhGzOCCeBPBmK0ZpHAFOooBbBrHTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:39:a5:26:41:64:0d:a2:77:df:1c:f2:b9:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
Validity
Not Before: Jun 14 16:00:58 2025 GMT
Not After : Jun 15 16:00:58 2025 GMT
Subject: CN=41e362e19ab8827fe434acf7fa454b6f249309e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:77:8a:7a:8e:e2:97:ee:13:bf:cd:7f:6b:
8f:c6:78:77:0c:b7:92:bc:c1:ac:92:6f:32:0c:22:
cd:e9:bb:83:4c:48:d1:16:54:5c:76:81:8d:9d:68:
75:40:65:0b:ff:4d:ea:6d:a0:c4:55:c8:94:53:ab:
96:1a:0e:37:f5:92:59:41:6a:b8:64:77:e7:6a:df:
a7:2a:f3:c2:c8:40:59:7e:62:5e:a9:6f:0a:b2:1a:
56:97:70:99:e8:ee:75:f9:32:ea:79:eb:c1:22:a7:
bf:c1:c9:6c:cf:56:9b:c8:b4:f8:fa:eb:d6:26:76:
eb:21:70:58:e7:e2:7f:37:56:4e:2f:22:43:47:3f:
3f:a8:60:42:6b:1b:e9:be:36:92:ab:78:fe:ea:f3:
7f:34:47:70:f7:78:13:5c:45:d6:99:70:ea:41:ea:
a6:23:24:72:fb:f8:93:d3:0a:2c:eb:4e:63:51:63:
a3:b0:72:9f:ed:22:ba:c2:53:04:ae:d0:2b:8c:2e:
11:89:9b:ea:00:57:4c:3a:df:e7:ba:8f:6a:52:1e:
ae:08:0d:04:55:79:fc:3c:58:21:7b:3d:10:f3:33:
13:bd:27:d0:f3:fa:20:77:11:32:14:c6:df:cf:0c:
86:83:da:19:bd:76:ec:fe:66:21:24:23:9d:c4:27:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:62:E1:9A:B8:82:7F:E4:34:AC:F7:FA:45:4B:6F:24:93:09:E1
X509v3 Authority Key Identifier:
keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8a:62:18:39:7d:d2:7f:7c:01:27:ed:dc:37:7d:d5:bd:8c:
49:85:b5:85:72:63:f5:ef:3f:e3:be:c3:3b:17:22:68:34:86:
aa:e5:f2:a5:b6:58:dc:3b:8b:c5:7f:d8:0e:cd:c6:51:59:f9:
89:94:a7:74:fb:98:9e:c7:16:89:53:39:c9:c7:e6:13:a7:f0:
18:1c:0d:2a:95:79:2e:ea:ce:d0:ef:fd:1e:61:67:bb:9c:3b:
e0:a9:56:1c:7f:ce:58:9f:55:e6:d9:60:f9:5a:fa:f2:60:65:
c2:48:1f:a7:70:62:46:e5:b8:93:26:d9:7c:c1:d2:b0:8e:26:
89:7b:99:06:b0:ea:85:44:9f:f3:af:11:4d:c1:6e:9d:db:56:
92:06:48:1f:a0:01:38:9b:e7:02:96:9f:87:e9:57:21:39:97:
0e:58:81:9e:fb:68:a0:65:d1:48:d0:84:07:de:e9:c6:e4:ec:
43:2a:8f:2b:b5:27:6f:19:7e:56:bd:74:2b:30:4b:fb:f7:56:
27:73:d0:c5:1d:bf:a3:d9:04:ee:8d:e1:d7:42:5d:f7:bd:4d:
7d:8d:86:4e:38:4d:fa:11:65:6f:3a:34:4e:9b:b0:d0:a3:f2:
77:32:30:a1:d5:96:a1:12:29:b7:38:64:2b:07:b9:fa:55:ae:
08:ce:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:25 2025 by rpki-client