Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.mft (raw, json)
Hash identifier: kWrGSNyvWJ5+C4pCWiLZQpDBQqcRHm56csophAsFXWM=
Subject key identifier: 50:6F:AC:74:36:4F:47:E9:44:F8:1D:EE:31:F7:58:C0:28:1D:4D:54
Authority key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Certificate issuer: /CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Certificate serial: 019780FB974B67A03E1C5A3448B1EE48A3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
Manifest number: 12
Signing time: Wed 18 Jun 2025 03:01:01 +0000
Manifest this update: Wed 18 Jun 2025 03:01:01 +0000
Manifest next update: Thu 19 Jun 2025 03:01:01 +0000
Files and hashes: 1: DhYlOELQmejsuqE0q-lFm-NVMP0.roa (hash: mf0P0l64vNrzlnAnRIlTkqO53r1pyoZwPlURmjISdFU=)
2: S0h9COCL9yDPAz3dul4Z5VK_88Q.roa (hash: xAF8HzsYzOEotQ+1gvdFYGccAU/IelrIejunqeu7D98=)
3: wPQvc_8rzEiFsSAL0C7n4p9gjis.crl (hash: Fsz59/vMW7dcm5p04tS9XnD50PlrlT5Ad6/JFU33tJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:fb:97:4b:67:a0:3e:1c:5a:34:48:b1:ee:48:a3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Validity
Not Before: Jun 18 03:01:01 2025 GMT
Not After : Jun 19 03:01:01 2025 GMT
Subject: CN=506fac74364f47e944f81dee31f758c0281d4d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:89:e7:13:a5:7e:e4:fb:29:63:d7:3b:e0:
94:7a:cd:2e:2b:33:49:8c:d8:17:f7:b1:55:4f:35:
94:ac:8e:d8:0f:24:67:88:85:87:e0:ae:0c:d9:61:
1c:1e:7f:68:8b:f2:76:7b:1e:ea:7a:53:61:0c:b6:
5b:e1:36:43:04:c4:86:08:17:42:3c:c5:36:73:62:
f3:04:92:27:67:4e:11:7b:84:7b:99:aa:0c:62:35:
26:dc:dc:7f:ea:1a:37:8b:af:5a:46:bd:68:e2:26:
57:64:c5:90:3b:35:f5:29:2f:d6:3e:30:1f:82:90:
4e:c3:a5:c5:82:31:e3:5b:00:f1:1b:c6:f4:fd:ec:
45:ed:32:9a:8c:bf:45:75:1a:68:02:db:9b:a7:af:
bb:0d:13:f2:ea:ba:88:28:66:c1:f3:84:76:25:1b:
23:90:4f:45:a6:63:3d:ee:64:4a:99:00:83:6a:07:
c7:89:93:10:c7:e8:3a:a2:3d:00:c0:5a:55:d6:da:
51:f8:11:cf:85:36:d8:10:a4:cf:d4:dd:2b:e0:02:
3f:3a:a2:f0:46:22:86:11:e8:81:dc:ac:bf:fe:09:
09:99:94:ab:d5:f0:75:1e:39:f0:88:f0:b8:67:d4:
03:a0:e1:08:f7:7d:a4:cf:98:2c:18:29:60:fe:21:
be:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6F:AC:74:36:4F:47:E9:44:F8:1D:EE:31:F7:58:C0:28:1D:4D:54
X509v3 Authority Key Identifier:
keyid:C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:12:f6:a4:0a:28:f8:67:2d:a5:e9:e1:08:c9:2f:ab:59:4e:
61:13:99:4c:30:2c:9d:80:c3:32:d8:83:43:c5:5b:3b:61:ea:
5f:7a:0b:47:1e:5b:ff:1f:ca:0e:cc:7a:a1:77:45:dc:60:c8:
be:f4:95:28:cc:5a:b2:ea:47:1c:38:ac:1f:9c:b9:37:cb:84:
52:a5:11:5d:3e:63:24:74:c8:70:ec:0e:29:4c:51:ab:65:b5:
6f:07:28:76:89:6e:2c:e8:e6:d4:d9:59:d3:4f:4c:e1:96:99:
97:96:ed:48:bf:7c:25:91:61:e3:2e:5b:29:34:88:03:f7:27:
c2:02:0f:16:0b:46:70:44:be:a4:78:47:9c:8f:3b:e9:86:7d:
1d:4c:35:6d:db:0c:a7:8b:98:3a:4e:2d:50:43:17:0e:0c:8e:
e3:26:39:d5:14:c5:30:e6:c4:3f:05:cc:60:1e:ed:c3:67:13:
a7:83:57:c7:77:e9:1f:02:b9:f0:85:23:ad:f6:a4:79:23:3c:
28:20:88:c4:f9:95:be:fa:52:98:f1:2d:19:1f:9a:c7:4e:02:
37:d7:6e:6c:17:a1:ff:9f:97:bc:6c:f7:b6:f3:b1:e0:4b:74:
2c:30:dd:e3:44:79:04:2c:46:8d:d7:ba:21:72:e3:d9:ab:18:
b4:6f:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:56:21 2025 by rpki-client