Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
File: wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft (raw, json)
Hash identifier: /wRUMmhcmdgCtfHJgYouiXhjomy/tLCK4h5kszELu2k=
Subject key identifier: 4D:BB:35:FC:FF:95:F8:4C:D7:2E:E9:F5:81:EE:7A:57:6E:26:58:65
Authority key identifier: C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
Certificate issuer: /CN=c1db67b85104e4db598fea15678699c92473bda0
Certificate serial: 0197838EB45032A0C5F9CD7A15C87C1DD122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
Manifest number: 0C71
Signing time: Wed 18 Jun 2025 15:00:56 +0000
Manifest this update: Wed 18 Jun 2025 15:00:56 +0000
Manifest next update: Thu 19 Jun 2025 15:00:56 +0000
Files and hashes: 1: PJ3v6hx1GuVvKbnyJ-k0p1XrVzI.roa (hash: vSG0XnrDzzP8WtxkP9Iqj2yAInaVzagq/kUPYgF33Iw=)
2: cycF2JveybPX6grJ41wnOXvTGTE.roa (hash: aip8c8zGmCpS8zi0B5jF1UO7lc36UgLVySSkHDz+xxU=)
3: wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl (hash: I7SWOkugpFj3GRW1hAwaaxtqI5JqE1ANV1guBb0Xkog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:b4:50:32:a0:c5:f9:cd:7a:15:c8:7c:1d:d1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1db67b85104e4db598fea15678699c92473bda0
Validity
Not Before: Jun 18 15:00:56 2025 GMT
Not After : Jun 19 15:00:56 2025 GMT
Subject: CN=4dbb35fcff95f84cd72ee9f581ee7a576e265865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:f1:8b:e0:1e:53:f3:de:eb:1f:26:c6:b5:
30:6b:3d:32:7e:b5:8f:6e:b4:c2:cf:a8:9d:4e:ed:
b4:9b:35:48:f0:45:80:2f:4b:d4:c7:1f:ad:20:28:
60:52:9f:81:3f:46:ff:6b:94:89:f4:6d:93:73:cd:
cf:f7:41:35:9f:5e:fd:ae:0f:2e:f3:12:18:fc:19:
11:08:8e:1a:6c:f1:96:b5:0d:7d:8f:da:53:f1:f6:
7f:5e:33:f2:ad:1b:38:8e:51:cd:95:2b:3a:7d:fc:
52:55:59:f0:67:eb:8b:8b:69:f0:ae:e8:74:5e:cb:
73:6c:ca:28:06:17:04:a6:a2:ad:56:cf:65:7f:9b:
16:98:d8:a9:48:df:37:2c:a5:61:d4:c9:2b:51:58:
35:27:7a:57:7e:46:84:ac:c4:27:e6:df:d4:c4:21:
dc:b1:59:c9:d9:ee:a0:60:80:68:35:96:10:0d:53:
b5:af:29:fc:9d:78:ab:c6:92:45:72:aa:04:6d:69:
24:d3:8c:41:20:67:64:51:51:6d:0b:c6:50:70:c9:
05:86:2a:1e:c3:d5:a6:e7:fc:5c:91:1f:c2:bc:72:
90:24:3f:ca:dd:4e:53:9a:2c:c4:bd:59:37:c8:5e:
62:be:79:36:b7:99:b4:21:6e:49:49:a6:70:53:8f:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:35:FC:FF:95:F8:4C:D7:2E:E9:F5:81:EE:7A:57:6E:26:58:65
X509v3 Authority Key Identifier:
keyid:C1:DB:67:B8:51:04:E4:DB:59:8F:EA:15:67:86:99:C9:24:73:BD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdtnuFEE5NtZj-oVZ4aZySRzvaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6a6535-6f42-4f2d-9eb9-7d4c8f37f5fd/1/wdtnuFEE5NtZj-oVZ4aZySRzvaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:19:c4:4c:a9:93:82:32:be:28:86:b3:79:57:0a:e8:54:19:
e8:b3:1e:f0:e2:9d:03:0f:5f:80:d3:b5:d5:98:2e:fb:56:38:
64:2f:53:e4:82:e1:39:95:94:e4:5d:e8:03:1b:9f:96:11:ac:
ad:a1:34:2d:ed:2b:e5:63:f6:44:17:72:cb:8a:b2:bc:2a:fc:
0c:2e:a5:de:e4:16:9f:82:77:20:22:51:22:b0:d9:45:74:90:
30:c3:9f:14:0d:70:47:73:7c:4b:6e:2d:99:36:91:02:1c:b1:
70:d5:b2:4d:5b:d3:34:78:53:40:fc:da:cc:31:00:a2:e3:fa:
62:b4:8e:e8:29:35:01:24:75:07:8e:b7:83:01:6d:3f:98:a8:
87:53:ac:26:5a:0d:2b:da:a9:c8:87:df:f1:e3:b6:5f:39:d7:
a2:20:b3:66:fe:38:cb:21:86:e7:a6:7b:29:ed:c2:68:b7:47:
b8:42:cb:52:2f:70:a0:9f:79:32:d8:6e:23:28:8a:a6:60:bd:
88:ac:0c:ca:98:04:1c:90:20:bc:0d:a9:25:75:d8:36:0e:a5:
a0:84:ba:9a:4e:09:19:58:da:3c:6c:a0:f1:77:cc:5c:c9:74:
44:79:08:94:2e:05:41:38:e4:e6:10:78:cc:c8:97:86:35:08:
49:64:80:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:23:48 2025 by rpki-client