Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File: wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier: Kn0VQfr/XOFrbwplADbSjV4bStc6iQznU9mL/gZvh+U=
Subject key identifier: FD:D8:0C:65:00:74:D1:29:F3:9A:90:28:D5:54:C1:3C:AE:A8:14:8C
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer: /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial: 01976F2BA572752560C6E20671EC4BE2BDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number: 0420
Signing time: Sat 14 Jun 2025 16:00:20 +0000
Manifest this update: Sat 14 Jun 2025 16:00:20 +0000
Manifest next update: Sun 15 Jun 2025 16:00:20 +0000
Files and hashes: 1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=)
2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: B47GvgijGhnzezJf4ni3rTot71wS60dISF/5CiLNELo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:a5:72:75:25:60:c6:e2:06:71:ec:4b:e2:bd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Validity
Not Before: Jun 14 16:00:20 2025 GMT
Not After : Jun 15 16:00:20 2025 GMT
Subject: CN=fdd80c650074d129f39a9028d554c13caea8148c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:4b:77:70:07:a1:ce:5e:19:78:3e:6f:76:
0e:05:9c:8f:ea:82:ca:ff:79:9a:ef:00:34:d8:d2:
09:55:9c:a1:de:cf:44:85:59:c2:5b:28:c5:f2:e8:
7f:a1:51:c9:be:62:98:f5:c9:e4:26:e7:45:a0:a7:
a9:54:6d:dc:0c:40:c9:e1:5b:9b:3e:d6:c1:fd:4d:
a8:98:f3:df:31:07:ce:a4:e3:81:9f:ba:d8:f0:b6:
06:03:86:49:a6:3a:70:26:f6:66:86:2c:47:d3:0d:
26:48:ef:2d:58:1f:6c:7a:5d:ee:29:79:33:51:6e:
6f:79:33:fa:06:28:e3:ce:8e:10:63:f0:b0:51:71:
7b:43:0b:7c:ba:6c:3f:b7:f9:4e:3b:4f:5b:d5:13:
0e:bf:28:10:be:77:43:a9:cd:ca:a7:bd:ba:b8:59:
c1:89:4c:f4:e3:96:4c:37:be:e4:13:56:88:97:c2:
c3:8e:29:60:75:21:2f:84:7d:a1:ab:9e:17:1d:f5:
5c:63:a1:00:09:ff:74:97:c4:13:69:ec:ed:00:24:
73:1b:2e:4b:1c:2a:cd:cf:d1:f7:a4:d2:2f:b1:cf:
92:e4:a9:a2:95:46:bd:05:ba:2f:7f:15:33:c0:85:
23:24:97:0f:9e:a4:c3:0c:62:8c:ff:8d:4b:a2:ff:
b4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D8:0C:65:00:74:D1:29:F3:9A:90:28:D5:54:C1:3C:AE:A8:14:8C
X509v3 Authority Key Identifier:
keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e2:b0:53:57:d2:9a:40:db:a0:9c:12:12:9a:a3:ab:5e:f5:
24:2a:05:45:ca:57:16:c4:f8:ed:54:29:72:fc:09:ab:24:e9:
41:43:6d:b4:21:73:71:a6:c9:2b:32:0d:10:e0:20:7a:11:b3:
51:42:82:d6:6f:7b:66:91:84:9f:b9:e5:af:ab:c6:d2:26:2a:
83:02:21:bf:7f:bc:bb:6d:d9:c0:d9:a9:b2:ea:99:14:ee:7a:
b7:1a:1d:1a:89:00:11:34:01:bb:6b:5d:9f:80:8f:53:a4:62:
61:4b:6d:88:af:f2:a7:d3:2c:ff:fd:b7:ca:e6:b1:71:ae:40:
0b:86:63:6c:9c:85:5a:71:91:b9:1d:92:7a:ac:24:03:18:8d:
d5:db:83:97:a9:65:d9:c8:d4:8a:67:eb:5e:41:e0:6c:57:a2:
4a:cf:50:9f:21:7f:b4:75:1d:60:16:9e:ab:66:08:6a:24:3e:
3e:fa:f2:83:f0:0c:07:d4:4d:1d:f8:88:9a:9b:77:e4:ff:07:
42:b8:ed:40:ba:0a:8b:9a:88:12:08:25:45:d1:aa:de:96:8c:
37:23:da:72:79:5d:83:4b:5a:7b:1c:d0:24:7a:e1:d9:23:48:
b8:66:f3:20:67:e4:21:12:e3:cb:50:b4:55:67:2c:b7:3d:78:
45:be:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:46:23 2025 by rpki-client